Privacy
Privacy policy
This page explains what Shelfcrest collects when you use this site, why, who else handles it, how long it is kept, and how to ask for it or have it deleted. It describes what the site actually does, not what a template says sites usually do.
Who we are
This site is run by Marko Ristić, the founder of Shelfcrest. For anything about your information, write to hello@shelfcrest.com.
What we collect, and when
We collect information only when you send it to us through the audit form on this site. The form asks for:
| Your email address | So we can reply. Required. |
|---|---|
| Your name | If you give it. |
| An ASIN or store link | So we know which listing or store to audit. |
| Marketplace and monthly ad spend range | If you choose them, to size the audit. |
| What is hurting most | The boxes you tick, and any message you write. |
Please do not send passwords, payment details or login access through the form. We never ask for them there.
What we do not collect
- No advertising trackers. Apart from Google Analytics and Cloudflare Web Analytics, both described below, the site loads no third-party scripts.
- No cookies for visitors other than the Google Analytics cookies and the cookie that remembers your choice about them, both described below. WordPress sets its own cookies only for the site's administrators when they log in.
- Nothing from the ACoS calculator. It calculates in your browser; the numbers you type are not sent to us.
Analytics
To see which pages are read and how visitors find the site, we use Google Analytics 4, a service run by Google. It records the pages you view, how you arrived, the type of device and browser you use, and an approximate location. Google says Analytics 4 uses your IP address to estimate that location and does not log or store the address itself.
Google Analytics sets first-party cookies, named _ga and _ga_ followed by an ID, to tell one visit from another. If you are in the UK, the European Economic Area or Switzerland, these cookies stay off until you accept them in the cookie banner; until then Analytics sends only cookieless measurements. Everywhere else they are on unless you turn them off. Google signals and ad personalization are turned off in our tag, and we use the reports only to improve the site, never for advertising.
You can change your choice at any time with , also linked at the bottom of every page. Rejecting deletes the Analytics cookies already stored. Your choice is kept for six months in a cookie named sc_consent, which holds only the word granted or denied.
Cloudflare, which delivers this site and protects it from attacks, also measures visits and page load times with Cloudflare Web Analytics. Cloudflare says this tool sets no cookies, stores nothing in your browser and does not fingerprint visitors.
You can block Google Analytics with your browser's privacy settings or with Google's opt-out add-on. Google describes how it handles this data in its privacy policy.
How we use it
We use what you send to prepare the audit you asked for and to reply to you. We do not sell it, rent it, or use it for advertising, and we do not add you to a mailing list unless you ask to be added.
Spam protection
To stop automated spam, the form limits how many messages can be sent from one connection in an hour. To do that, the site stores a one-way hashed form of your IP address for one hour, then discards it. The form also contains a hidden field that only automated scripts fill in.
Who else handles it
Your message is stored in the site's database on servers run by our hosting provider, Hetzner Online. Cloudflare carries the traffic between your browser and that server. A notification of each request is emailed to our inbox, so our email provider handles a copy. These providers handle the data only to run the site and deliver the message. We share it with no one else unless the law requires it.
How long we keep it
We keep audit requests for 24 months after our last contact, then delete them. If you become a client, records we must keep for tax or legal reasons are kept for as long as the law requires.
Your choices and rights
You can ask us to show you what we hold about you, correct it, or delete it, by writing to hello@shelfcrest.com. Depending on where you live, including several US states, you may have further rights under local privacy law; we will honor any request those laws give you, and we will not treat you differently for making one.
Security
The site is served only over HTTPS, form submissions are checked for a valid security token, stored requests are private in the site's administration, and logins to the administration are rate limited. No system is perfectly secure, and we will tell you if a problem affects your information.
Children
This site is for businesses. It is not directed at children under 13, and we do not knowingly collect information from them.
Changes to this policy
If what the site collects changes, this page changes with it, and the date below moves. See also our contact page for the other ways to reach us.
Last updated October 1, 2026