Privacy

Who we are

This policy is from What Metrics (whatmetrics.com). It explains what personal information we collect through our website, our Chrome extension and our other services, how we use it, who receives it and your choices. What Metrics is independent of Whatnot, Inc.

What we collect from you

• Account: your email address; your name and profile picture if you sign in with Google or set them yourself; your workspaces and roles; when you signed in; and when you last had the app open (we note this about once a minute while an app page is open).
• Workspace: shop name, region, currency, time zone, category and settings, including your own Whatnot username; your team members and their roles; the email address of anyone you invite; your answers to our sign-up questions (such as sales range, shows per week, the tools you use, your goals and how you heard about us); and anything you type, upload or create.
• Reports: Whatnot reports uploaded to your workspace and the orders, costs and buyer details in them, including buyer usernames and names, state, country, any city column, tracking numbers, order messages and item descriptions. We filter address, email, phone and postcode columns from the parsed rows. Uploaded originals are kept unchanged for 90 days and then deleted. Files, messages and free text can contain personal information.
• Billing: your plan, trial and subscription status, your Stripe customer ID, and the payment updates Stripe sends us, which can include your name, email and billing address. We never receive your full card number. If you cancel, we keep any reason you give.
• How you found us: the page you first landed on, the site that sent you, campaign tags and ad click IDs, from the wm_touch cookie described below, saved with your account when you sign up. If you arrived through a referral link, which link it was.
• Referral partners: if we give you a referral link, your name and, if you share it, your email address, and the clicks and sign-ups the link brings.
• Support and community: support tickets and replies, and your community name, posts, replies, likes and saves in the seller forums.
• Custom solution inquiries: your name, email, optional business and phone number, and project details. We use them to reply, not to add you to a mailing list.
• Technical and security records: IP addresses, browser details, and the pages you asked for and when, kept in the logs of our hosting and sign-in providers; IP addresses in short-lived rate-limit records; and each browser you connect (its name, extension version, when it was last seen, and the Whatnot username that browser is signed in to).

The Chrome extension

The extension reads pages only on whatnot.com, inside your own signed-in Whatnot tab, and sends what it reads to What Metrics. We do not receive your Whatnot password or session credentials, or your other browsing history. Each part starts switched on, and you can turn each one off in the extension’s Options:

• Your inbox: your conversations and their full history, and Whatnot’s statistics about the buyers you talk to. See Messages below.
• Your orders and shipments: your own Whatnot orders: each order’s number, status, dates, the show it came from, the buyer’s username and Whatnot user number, its items (title, category, quantity and picture link) and its subtotal, shipping, tax, coupon code and currency; and your shipments’ status, dates, carrier and tracking number. It never reads or sends a shipping address. On your Seller Hub orders page it can also read each order’s reference, status and tracking reference.
• Your reviews: the reviews on your public Whatnot profile: each reviewer’s username, the rating and its shipping, packaging and accuracy ratings, the text, your response and the date.
• Live shows you open, yours or anyone else’s: the host's handle, the show’s title, category and audience count, each chat line and who wrote it, and each lot that closes with its title, price, bid count and the username of the person who won it. This includes other sellers' public shows and people who are not our users. We do not ask for their consent or tell them when we record.
• Earlier sales: when you open a show, it can load that show’s sold list from Whatnot through your tab: each sale’s item, price, quantity, type and time, and the buyer’s username.

What it reads goes to your workspace. Until October 2026, the sales it recorded on any show, yours or another seller’s (time, price, item title and the buyer’s username), could also be used to make clips of that show for another What Metrics customer who had saved that show’s seller as their own store. We no longer make clips (see Stored history: Clips).

Our server decides which shows, orders and reviews are yours. It keeps orders only from a browser signed in to the Whatnot account saved as your store, and reviews only of that account. Buyers in your own shows and orders become buyer records in your workspace. We also keep a raw copy of what the extension sends from the live shows you open and your Seller Hub orders page for 180 days after it arrives, or longer if it could not be processed. Your inbox, message history, orders, shipments and reviews are kept only as the records described here, with no raw copy.

If your workspace has no store yet, the Whatnot username you type in the extension’s Options becomes your store. The extension also tells us which Whatnot account the browser is signed in to, and we save it with that browser’s record. It notices your clicks and Enter or Space presses on Whatnot pages, only to work out which show to open the side panel for. It does not record what you clicked or typed, and none of that leaves your computer.

On your computer, the extension keeps its settings, an encrypted connection token and recent live show records, which it removes after 24 hours unseen. Recordings not yet sent stay until they are sent, with no time limit. After a recording is sent, a copy stays on your computer for 24 hours, or 7 days if you choose. Sent recordings the server could not process, and that can be sent again, are kept for 7 days whichever you choose. “Delete all local data” in Options removes all of it.

Live room video never leaves your computer: your own show’s video and sound pass from your Whatnot tab to your What Metrics tab inside your browser, and nothing of it is stored by us.

We use extension data only to run What Metrics. We do not use it for personalized advertising, creditworthiness or lending.

Messages

• Inbox sync: through your Whatnot tab, the extension reads your Whatnot conversations and their history. For each one we store the other person’s username, Whatnot user number and profile picture link, the kind of conversation (such as a message request, or one Whatnot attached a refund or cancellation request to), whether it is unread, and each message’s full text, time and sender. We do not store attachments or attachment counts.
• Buyer statistics: for the buyers you talk to, the extension reads Whatnot’s own statistics about them as your customer: how many orders they placed, how many were refunded or cancelled and for how much, their total spend and the currency.
• Your choices on a conversation: when you archive or snooze it, and the next step we suggest for it (see AI features).
• Replies: when you reply from What Metrics, the extension sends the message from your Whatnot account. We keep a copy, who sent it and the templates you save.
• Review requests and win-back messages: when you queue them, the message, the buyers it goes to (by username), its pacing and each message’s status. They go only to people who bought from or reviewed your own shop. Your “do not contact” marks are checked before each message is sent.
• Campaigns made before October 2026: Campaigns is no longer offered. Campaigns you made stay in your workspace with their name, audience (including any usernames you pasted or uploaded), message versions, pacing and schedule, and for each recipient their username, the message sent and its status. A pasted username with no buyer record was added as a contact.
• Replies and the messages you queue go to Whatnot and to the person you message.

Stored history: Market data and Store Stalking

Until October 2026 we ran our own reader: a computer that opened Whatnot shows around the clock. Each of its browsers was signed in with its own Whatnot account. The reader no longer runs, and Market and Store Stalking are no longer offered, but what it collected is still stored:

• Market data: for the live shows it found, the host, title, category, thumbnail, audience count and observed sales. From each show’s sold list, each item’s title, price and time and the buyer’s username. From this we built the Live Board, Top Sellers and Top Buyers. Top Sellers showed each seller’s public profile, followers and ratings, and their estimated revenue, sales and buyers. Top Buyers showed each buyer’s username, how much they spent and bought, which sellers and categories they bought from, and up to 50 of their latest purchases.
• Store Stalking: for each seller a workspace added, their profile (name, picture, followers, sales count and shipping time) checked every minute and, while they were live, their sold list: items, prices, quantities and the winners’ usernames. Their chat was not recorded. Each recording was copied to every workspace that followed that seller.
• Your own store: when you saved your Whatnot username as your store, our reader watched your store the same way it watched a stalked seller, and filed what it read as your own shows.
• Older Store Stalking data: an earlier version also saved still images and short video clips from stalked sellers’ shows, and links to buyers’ profile pictures. What was saved remains and has no automatic expiry.

No subscriber can open this data in the app any more. Our staff can still read it, and the deletions described under How long we keep it still run over it.

We also message some Whatnot sellers on Whatnot about What Metrics, using figures we observed about their shows. We keep the message, their first reply and whether they asked us to stop, and we leave anyone we have already contacted out of later messages.

Stored history: Clips

Until October 2026, when a workspace saved a Whatnot store as its own and its plan included Clips, our recorder recorded that store’s live shows. Clips is no longer offered and the recorder no longer runs. What it made is still stored:

• The show’s video and sound; the chat (usernames, messages and profile pictures); lots, bids and the bidders’ usernames; sales; and audience counts. It could also record the picture of the show’s chat and auction panels.
• A show’s sales, with the buyers’ usernames, could come from our recorder or from any customer’s extension that recorded the same show (see The Chrome extension).
• The speech was turned into a text transcript on our own computer, with the Whisper speech model. No outside transcription service was used.
• The transcript, with the show’s lots and sales, was sent to Anthropic to pick the best moments (see AI features).
• We store the clips we cut (video files and a cover image), each clip’s transcript, the chat, bids and sales around it, and a map of the whole show’s transcript, sales and bids.

Clips are no longer shown in the app. Clip video files are deleted 30 days after they were made; the rest stays until we delete it. To have your store’s clips deleted, email info@whatmetrics.com.

AI features

We use Anthropic’s Claude models for the features below. Anthropic receives only what each feature needs:

• Chat summaries run automatically on your own shows unless you turn them off. We send up to 3,000 lines of your own show’s chat, with usernames replaced with aliases, and the show and lot details with usernames removed. The messages themselves are sent, up to 200 characters each, so anything a viewer typed can reach Anthropic.
• Live reads run by themselves when you open the Live room during your own live show, and again about every two and a half minutes while the Live room is on screen. You can also ask for one. We send the newest 80 lines of your own show's chat, however old they are, with the same aliases. We also send the show's title and category, audience count, the lots that just closed, sales figures, the items viewers asked for, your last read and your usual pace. Anthropic sends back a two-sentence read. The chat summaries switch turns this off too.
• Reply drafts are made only when you ask for one. We send the buyer's username, the conversation, what you typed, your shop's name and a summary of that buyer's purchases, including wins in other shows recorded in your workspace. We do not draft replies to buyers marked “do not contact”.
• Next steps suggest one action and a reply for a conversation that is waiting on you. On Pro they are prepared in the background when a buyer's message arrives; on Free, when you ask. We send your playbook, the conversation with its times, the buyer's username, Whatnot's statistics about that buyer, their orders with you and the kind of conversation. Nothing is sent to the buyer until you press Send.
• Playbook learning runs when you choose Learn from my messages. We send up to 50 of your conversations that hold your own replies, and Anthropic sends back short notes on how you handle each kind of message, which you can edit or delete.
• Review drafts are made when you ask for one. We send the review (its ratings and text), the reviewer's username, their orders with you and your playbook's notes on answering reviews.
• Auto Clips no longer runs. Until October 2026 it used the full timestamped transcript of your recorded show, its title and length, lots, sale prices and giveaways, and chat counts and keywords for each candidate moment. No chat usernames or chat messages were sent, but anything said aloud on the show, including names, was in the transcript. We asked the model to flag clips where an address, phone number or email address was spoken, and we dropped those. Clips can still include names and other things people said.

We keep reply drafts (what you typed and the result), next steps, your playbook, review drafts, chat summaries and live reads in your workspace. You can turn chat summaries on or off in Settings → Extension.

Who receives data

We do not sell your account details. Until October 2026, our Market features showed subscribers information we observed in Whatnot shows, such as buyers’ usernames and what they spent, and a customer’s clips could include sales that another customer’s extension recorded, with the buyers’ usernames (see The Chrome extension). Some privacy laws may treat that as selling or sharing personal information. Neither is shown to subscribers any more.

Service providers that process data for us:

• Vercel hosts our website and handles every request to it, including IP addresses and request logs.
• Supabase provides sign-in, our database and file storage, and keeps its own sign-in records, including your IP address and browser.
• Stripe processes subscriptions and payments and is the seller of record for them. It receives your email address, card and billing address, and your workspace ID and plan.
• Anthropic provides the AI features described above.
• Resend delivers our sign-in emails, and delivers Custom solution inquiries to our team, where they stay in our email until you ask us to remove them.
• Cloudflare Turnstile checks our sign-in pages for bots. It runs a script on those pages and receives your IP address and browser details.
• Google, if you choose Continue with Google, shares your name, email address and profile picture with us, and your picture then loads from Google’s servers.

Others who can receive data:

• Whatnot: the extension talks to Whatnot from your tab, messages you send go to Whatnot and the recipient, and pictures such as profile photos and show images load from Whatnot’s servers on signed-in pages.
• Your workspace: members can see its shared records, orders, reviews, recordings, messages and original report files, depending on their role.
• Other subscribers: until October 2026, Market data, Store Stalking recordings and clips, as described above. A customer’s clips could include sales that your extension recorded, with the buyers’ usernames. None of it can be opened in the app any more.
• Our staff, for support, security and legal needs. Staff can view accounts and can sign in as a user to help them; we log each time.
• Authorities or others when the law requires it, or when needed to protect people, our service or others.
• A buyer or successor, if What Metrics or its assets are sold or merged.

If you are in our records but don’t use What Metrics

You can be in our records without ever using What Metrics: if you chatted in, bought in or hosted a Whatnot show that one of our customers opened, or that our reader or recorder picked up before October 2026, or if you bought from, messaged or reviewed a seller who uses What Metrics.

• What: your Whatnot username and user number, your chat messages, what you won or bought and the price, and a link to your profile picture. For sellers, also your public profile, show details and estimated sales. Clips recordings can include your voice or image if you appeared on a seller’s show.
• Messages, orders and reviews: if you message a seller who uses What Metrics, or they message you, your messages with them are stored in their workspace, with Whatnot’s statistics about you as their customer (your orders with them, refunds, cancellations and what you spent), including campaign messages, review requests and win-back messages they send you. So are your orders with them (never your address), any review you left them, any notes or “do not contact” marks they keep about you, and the orders in reports they upload, which can include your name, city, state and country. An AI reply draft or next step can include a summary of what you bought from them.
• Why: to give sellers records of their own shop: their shows, orders, buyers, reviews and messages. Before October 2026, also research on the Whatnot market.
• How long: it depends where it is. Chat and lot winners’ usernames in show recordings go 90 days after the show. Buyers’ usernames stop showing in stored Market data 90 days after their last purchase, and stored copies can stay up to about 180 days after it. Raw copies of what customers’ extensions send us from live shows are kept for 180 days or more. Other records have no end date, such as a seller’s buyer records, orders, reviews, messages, notes and campaigns, and clips with the chat around them. For sellers, so do your public profile, show details and sales figures. See How long we keep it.
• Your choices: email info@whatmetrics.com with your Whatnot username and what you want removed. We handle these requests by hand and will tell you what we did. We cannot stop a customer’s extension from recording a show you are in later.

Cookies and similar technologies

Sign-in cookies (sb-…-auth-token and related)

Keep you signed in. Set on our own site by our sign-in provider’s code. Our site’s code can read them. Kept for up to 400 days.

wm_touch

Remembers how you first found us: the time and page you landed on, the address of the site that sent you (up to 500 characters), campaign tags (utm_source, utm_medium, utm_campaign, utm_term, utm_content, ref, source and via) and ad click IDs (gclid, gbraid, wbraid, gad_source, msclkid, fbclid, ttclid, twclid, li_fat_id, rdt_cid, epik and irclickid). Set on your first visit and never overwritten. It lasts 180 days, and our site’s code can read it. When you sign up, we save it with your account so we know which link, campaign or ad led to the sign-up, and we keep the ad click ID so we can match sign-ups to ads. Our site does not send it to any ad company.

wm_ref

Set only when you click a What Metrics referral link. Holds which link it was, a random visitor ID and the click time, signed so it cannot be edited, for 60 days. We log each click (the visitor ID, the referring site and the time) and credit the link if you sign up.

sl_ws and sl_rail

Remember your chosen workspace and whether the sidebar is open, for up to a year.

wm_imp and wm-plan-sim

Staff only: set while our staff support an account (12 hours) or preview a plan (8 hours).

Cloudflare Turnstile

On our sign-in pages only, Cloudflare’s script checks for bots and collects your IP address and browser details under Cloudflare’s own policy.

The app also saves some preferences and drafts in your browser’s own storage, such as live room settings. They stay on your device. We do not use advertising networks, tracking pixels or analytics services.

Do Not Track and tracking across sites

Do Not Track: our site does not respond to Do Not Track signals or Global Privacy Control. It works the same way whether or not your browser sends them.

Our website does not track you across other websites, and we do not let advertising or analytics companies collect information on it. Our Chrome extension does collect your activity on another site, by design: on whatnot.com it records the live shows you open and when, and while a Whatnot page is open it regularly reads your inbox and its history, your orders and shipments, and your reviews (see The Chrome extension). You can switch each part off in the extension’s Options. Some other companies can see your activity when you use What Metrics, under their own policies: Cloudflare on our sign-in pages, Google if you sign in with Google, Stripe on its checkout and billing pages, and Whatnot, whose servers supply images on signed-in pages and which the extension talks to.

How long we keep it

• 3 days: audience readings in stored Live Board data.
• 30 days: clip video files (the clip’s record stays), export files, and ended shows in stored Live Board data. A deleted workspace also has 30 days before it goes (see below).
• 90 days: uploaded report files and their rows, 90 days after upload. Show chat, each show’s list of who chatted and who bought (with their counts), and lot winners’ usernames are removed 90 days after the show. The lot stays, without the winner’s name. Buyers’ usernames stop showing in stored Market data 90 days after their last purchase. Stored Market summaries that include them are deleted 90 days after they were built, which can be up to about 180 days after the purchase.
• 180 days: raw copies of what the extension sends us from live shows and the Seller Hub orders page, 180 days after they arrive, once processed. A copy that has not been processed is kept until it is. These copies include chat and winners’ usernames, so they can outlast the 90 days above.
• Handles marked VIP in the live room stay until the mark is removed or the workspace is deleted.

These have no automatic expiry. They stay until you or we delete them:

• Your account: the account itself, your profile and sign-up source, and your sign-up and cancellation survey answers.
• Your workspace: its records, orders and shipments, buyer records, reviews and imported file records, and invitations, including the invited email address.
• Audit history: full copies of changed or deleted orders and deleted buyer records.
• Messages and AI output: inbox conversations and messages, Whatnot’s buyer statistics, templates, review requests, win-back messages, campaigns and their recipients, reply drafts, next steps, your playbook, review drafts, chat summaries and live reads.
• Shows and clips: show totals and lot details, and clip records and transcripts, with the chat and bids around each clip and the map of the whole show.
• Other records: billing records, including the payment updates Stripe sends us; referral records; support tickets and forum posts; and connected browser and pairing records.
• Our reader’s records: Store Stalking recordings, older Store Stalking images and picture links, seller outreach records and the seller directory.
• On our own computers: our reader and recorder no longer run. What they kept on the computers they ran on, including seller, show and sale figures, buyers’ usernames, and show video, chat and transcripts, stays there until we delete it.

A nightly cleanup applies these periods, so records can stay until it reaches them, which can take several nights. Our providers keep their own logs for their own periods.

Your choices and rights

• See and correct: change your name and picture in Settings → Account, and your workspace details in Settings. Email info@whatmetrics.com to correct anything else.
• Export: in Settings → Privacy, owners, admins, managers and accountants can queue an export. The job produces a ZIP of your workspace, team, orders, buyers, costs, imports, recorded show totals and subscription records, up to 50,000 rows per table. The file is kept for 30 days. Download links expire after 60 seconds. The export does not include chat, recorded lots, messages, buyer statistics, reviews, templates, campaigns, clips, AI output or raw copies of what the extension sent. The audit log is a separate download under Team. Email us for a copy of anything else.
• Delete buyer records: owners, admins and managers can delete every buyer profile and note. Orders stay without the buyer link and campaign recipients go with the profiles, but copies in the audit history, inbox conversations and recorded shows stay.
• Delete your workspace: the owner can schedule it in Settings → Privacy. It does not cancel your subscription.
• Grace period: workspace deletion has a 30-day grace period in which the owner can restore it. After that, the workspace and its files are deleted. A paired browser can continue submitting during that period, so pause recording or disconnect it to stop collection straight away.
• What workspace deletion leaves: your login account and sign-up source, support tickets, forum posts, referral records, the payment updates Stripe sent us, and clips, because they belong to the store, not the workspace.
• Delete your account: there is no button for this yet. Email info@whatmetrics.com and we will delete it.
• Stop collecting: switch off any part of the extension in its Options; pause recording for the whole workspace or disconnect a browser in Settings → Extension; and turn chat summaries on or off there. Uninstalling the extension does not delete what it already sent.
• Other requests: email info@whatmetrics.com to ask for access, a copy, correction or deletion, or to object, including requests about someone recorded in a public show. Depending on where you live, the law may give you these rights. We may need to confirm who you are.

Security

Our providers encrypt data in transit and at rest. A workspace’s records are available only to its members and to staff who need them. Until October 2026, Market data, Store Stalking recordings and clips were also shared with other subscribers, as described above. Staff sign-ins as a user are logged. The extension stores its connection token encrypted. No system is perfectly secure. If you find a problem, email info@whatmetrics.com with “security” in the subject.

Children

What Metrics is for adults running a business, and you must be 18 or older to use it. We do not knowingly collect information from children as users. Whatnot shows can include people of any age, and a username does not tell us someone’s age. If you think we hold information about a child, email info@whatmetrics.com and we will delete it.

Where data is stored

Our database and web servers are in the United States (Ohio). The computers our reader and recorder ran on, which we operate, still hold what they collected. Our providers may process data in other countries.

Changes and contact

This version took effect on October 26, 2026. When we change this policy, we post the new version here and update the date at the top. If we make a significant change to how we use personal information, we will also email the address on your account before it takes effect.

Questions or privacy requests: info@whatmetrics.com.