Privacy Policy

This policy covers the Higgstee website and dashboard at higgstee.com and the Higgstee Chrome extension. "We" and "Higgstee" mean the operator of that service. If you have questions about anything below, the contact details are at the end.

Higgstee's database holds only what is needed to run your account and decide whether you may use the service:

• Your authenticated user ID.
• Your email address.
• Your password, stored as a salted hash by our authentication provider. We never see it in readable form.
• Your account and access status: whether your account is approved, when your trial started and ends, your plan and subscription state, and whether the account is active, pending, expired or suspended.
• Whether the account is an administrator, where that is needed to run the service.
• A single total: the number of listings you have successfully published. See section 4.
• Basic account activity for security and support — for example sign-ins, approvals and plan changes, recorded with a timestamp.

Like any website, our hosting and infrastructure providers process technical request data such as IP addresses and browser user-agent strings in order to serve pages and to protect against abuse. We do not combine that with your designs or listings, because we do not have your designs or listings.

Every image you add to Higgstee — uploaded, dropped in, or generated — is stored in your own browser, in a local database (IndexedDB) that belongs to your browser profile on your computer. It is not uploaded to Higgstee. We do not have a copy, cannot retrieve one, and store no image files, no image data and no links to images anywhere on our servers.

An image leaves your device in exactly two situations, both of which you start:

• When you send designs to the extension and start an upload, the image goes from your browser to the marketplace you selected.
• When you use an AI feature, the image goes from your browser to Google Gemini. See section 6.

In both cases the transfer is direct. The image does not pass through a Higgstee server on the way, and is not copied, cached or logged by us.

Because this storage lives in your browser profile, it is tied to that browser on that computer. Clearing your browsing data, using a private window, or switching to another machine will not show you the same designs. Section 9 explains how to move work between devices.

The same is true of everything you write and configure around a design: titles, descriptions, tags, filenames, prices, product selections, colour choices, the rows of any spreadsheet you import, and any TeePublic earnings export you upload to see your sales. All of it is stored locally in your browser and none of it is sent to Higgstee.

Previewing, editing, reordering, bulk-retitling and queueing all run against that local copy. A listing is submitted to a marketplace only after you take an explicit action to upload it, and it goes straight from your browser to that marketplace.

When an upload is confirmed successful, your account's total upload count goes up by one. That total is the only upload statistic we keep. The record consists of your user ID, the count, and when the count last changed.

We do not store, and do not receive:

• the design's ID or filename
• the listing's title, description or tags
• the published listing's URL
• the image
• the product or colour configuration
• any content from the marketplace page
• a per-upload history, or the time of any individual upload

The request that increases the count carries no arguments at all — the server works out which account it belongs to from your signed-in session. Repeat confirmations and retries of the same design are filtered out on your own device, so that no listing detail has to be stored on our side in order to avoid counting something twice.

Uploads run in your browser, through the Higgstee extension, on the marketplace's own site. The extension fills in the marketplace's forms and attaches your artwork using the session you are already signed into. Nothing is submitted until you start the upload.

The marketplace receives your design and listing details because that is what you asked it to publish. What it then does with them is governed by that marketplace's own privacy policy, not this one.

The AI feature is optional and runs on your own Google Gemini API key. When you press Generate, your browser sends the design image and your prompt directly to Google's Gemini API, authenticated with your key. Nothing is sent before you press Generate, and nothing is sent if you never enter a key.

• Higgstee does not proxy, receive, store or log the image, the prompt, or the listing text Gemini returns.
• Your Gemini API key is stored only in your own browser. It is never sent to Higgstee's servers and it is never included in the body of any request other than the authenticated call to Google.
• Google's handling of the image and prompt is covered by Google's own terms and privacy policy for the Gemini API.

Anyone with access to your computer and browser profile can read a key stored there, the same as any other credential saved in a browser. You can remove it at any time by clearing the key field in the AI panel.

• Your marketplace passwords. You never type them into Higgstee.
• Any other marketplace credentials, API tokens or login details.
• Your authentication cookies or session tokens for any marketplace.
• Your general browsing history. The extension only runs on the marketplace pages it needs in order to upload for you.

The extension asks Chrome only for the permissions it needs to do this: local storage, the ability to open and drive the upload tab, and access limited to higgstee.com, our authentication provider, and teepublic.com. It requests no permission to read cookies, history or browsing activity.

On your device. Your designs and listings stay in your browser until you delete them in Higgstee, or clear your browser's site data. Deleting a design also deletes its artwork. Because the data is local, deleting your Higgstee account does not delete it — and signing out does not protect it. If you are handing the computer on, clear the site data for higgstee.com and remove the extension.

Moving between devices. Because nothing is stored on our side, your work does not follow your account to another browser or machine. Use the export and import buttons on the Uploads page to move a batch yourself; the exported file stays under your control.

On our servers. We keep your account record and your upload count for as long as your account exists. When you ask us to delete your account, we delete your account record, your upload count and the associated activity log. We may keep the minimum required for legal, tax or fraud-prevention reasons, and backups roll off on our provider's ordinary schedule.

Earlier versions of Higgstee. Before this release, Higgstee stored designs, listings and artwork on its servers so they could follow your account between browsers. That is no longer how the product works. Those stores have been made read-only and are being reviewed and removed; the application no longer reads or writes them. If you want the copy held for your account deleted straight away, email us and we will do it.

You can ask us for a copy of the account data we hold about you, ask us to correct it, ask us to delete it, or ask us to restrict or stop processing it. Where the law gives you a right to object or to data portability, you have that too. Email support@higgstee.com and we will respond within 30 days.

Your designs and listings are not part of such a request, because we do not hold them. They are already in your hands.

We process your account data to provide the service you asked for and to keep it secure. Our database and authentication are provided by Supabase and our site is hosted on Vercel; both act as processors on our behalf and may store data outside your country.

Account data is protected by database row-level security, so a signed-in account can read only its own record. Sensitive fields — approval, plan, trial and account status — cannot be written by a user at all; they are changed only by administrative operations on the server. Your upload count is likewise readable only by you and writable only by the server-side operation that increases it. All traffic runs over HTTPS.

Your local designs and listings are protected by your own device and browser profile. Anyone with access to your unlocked computer and browser can open them, as with any file on that machine. No system is perfectly secure, and we cannot guarantee absolute security.

We do not sell or rent your personal information. We do not use it for personalised advertising, retargeting, ad networks, data brokering, or building profiles unrelated to running your account. We do not use your designs or listings to train machine learning models — we do not have them.

The Higgstee extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. Specifically:

• The extension collects and uses data only to provide the single purpose stated on its store listing: preparing and submitting your own product listings to supported marketplaces.
• It does not transfer user data to third parties except as needed to provide that purpose — that is, to the marketplace you chose to upload to, and to Google Gemini when you invoke the AI feature with your own key.
• It does not sell user data, and does not use or transfer it for advertising, retargeting or creditworthiness purposes.
• It does not use or transfer user data to determine anything unrelated to the extension's stated purpose.
• Humans do not read your data. We hold no design, listing or browsing data to read.

Higgstee is a tool for sellers and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has created an account, email us and we will remove it.

If we change what we store or where it goes, we will update this page and change the date at the top. Material changes will also be announced in the dashboard. Continuing to use Higgstee after a change means you accept the updated policy.

Email support@higgstee.com with any privacy question, or use the contact page. For account deletion, email from the address on the account and we will confirm once it is done.