Account settings and privacy

AdminUpdated Sep 24, 2026

Account settings and privacy

This page covers signing in, verifying your email, resetting your password, the Settings tabs, API keys, plans, and what data Shippified keeps about you.

Signing in

The sign-in page offers the following methods:

Method

How it works

Email and password

Register with a workspace name, email and a password of at least 8 characters, then sign in with Sign in.

Continue with Google

Signs you in with your Google account. If an account already uses that email address, it's linked to it; otherwise a new account is created.

Continue with Discord

Signs you in with your Discord account. Shippified matches your Discord account first, then your email address; if neither matches, it creates a new account.

The Google and Discord buttons only appear when those options are turned on. A short bot check may appear on the sign-in form before you can continue.

Some useful details:

  • Sessions last 14 days. After that you'll need to sign in again. To sign out, click your initials at the bottom of the sidebar and choose Sign out.

  • Signed up with Google or Discord and want a password too? Use Forgot your password? with the same email address to set one.

  • Too many attempts: after 10 sign-in, register or reset attempts in a minute from the same network, you'll see "Too many auth requests — slow down (60s)." Wait a minute and try again.

Email verification

When you register with email and password, Shippified emails you a verification link. It expires after 24 hours.

Until you verify, a Verify your email. banner appears across the dashboard. Click Resend to get a new link. Signing in with Google, or with a Discord account that has a verified email, marks your email as verified automatically.

Note: Everything in Shippified works before you verify. The only thing verification unlocks is paid upgrades, and only when billing is on (see Plans and billing).

Resetting your password

  1. On the sign-in page, click Forgot your password?

  2. Enter your email and click Send reset link. You'll get the same confirmation whether or not the email has an account, which keeps account emails private.

  3. Open the link in the email within 1 hour.

  4. On Set a new password., enter a new password (8+ characters) and click Update & sign in.

You're signed in on that device and signed out everywhere else.

Settings

Open Settings in the sidebar. It has four tabs.

Profile

Section

Contents

Workspace

Username, Workspace name, Public profile, Include my checkouts in public stats, Timezone, and two read-only fields: Account email and Workspace id (used in your Discord webhook URLs). See Sharing and public profiles for what the visibility settings do.

Appearance

Dashboard theme presets, or Custom colours and a background image. Themes are saved in your browser, not your account.

My shares

Your share cards, with copy, open and revoke buttons.

Your data

Download my data and Delete account…. See Exporting your data and deleting your account.

Timezone saves as soon as you pick it. It controls when the monthly order counter resets (midnight on the 1st in your timezone) and how dates are formatted in the dashboard.

Note: You can't change your account email from Settings.

Billing

Shows your plan and how many orders you've added this month. See Plans and billing.

Forwarding

Controls where Shippified posts to Discord:

  • Bot throughput fallback webhook receives every order from bots that don't have their own output webhook.

  • Shippified pings webhook receives order notifications. Switch Placed, Shipped, Delivered and Updates on or off individually.

  • Default IMAP host pre-fills the host when you add an IMAP inbox.

Webhook addresses must be public URLs. An address that points to a private or internal network is refused when you save.

See Discord monitor bots and Connect your email for details.

Developer

  • API keys let the SDK, the MCP server or your own scripts access your workspace.

  • Outbound webhooks send signed event notifications to your own endpoints. See the Webhooks developer guide.

  • Embed Copier sends Discord embeds into Shippified as template samples. See Embed Copier.

API keys

  1. Go to Settings → Developer → API keys.

  2. Under Mint a new key, name it (for example "n8n workflow") and click Create key.

  3. Copy the key right away. The panel warns Save this key now — it won't be shown again. Click I've saved it when you're done.

After that, only the key's prefix, created date and last-used date are visible under Active keys. You can have up to 25 keys. Revoke any key with the revoke button; anything using it stops working immediately.

Shippified stores only a fingerprint (hash) of each key, not the key itself, so a lost key can't be recovered. Create a new one instead. How to use keys is covered in the Authentication developer guide.

Important: An API key has the same access to your workspace as you do. Keep it out of screenshots, shared spreadsheets and public repositories.

Plans and billing

Right now, Shippified is free for everyone. Billing is switched off, so every workspace gets the full plan with unlimited order intake at no cost. Settings → Billing says Everyone's on the full plan and shows how many orders you've added this month, marked Unlimited.

The paid plan described elsewhere in the app only applies if billing is switched on in the future. In that case, the code defines:

Free

Pro

New orders per month

100

Unlimited

Monthly counter resets

Midnight on the 1st, in your timezone

n/a

Price shown in the app

Free

$5/month or $50/year

Even with billing on, only new orders count toward the limit. Updates merged into an existing order (such as a shipping email with the same order number), tracking refreshes and sale-price edits never count. Upgrading would require a verified email.

Note: If you subscribed to Pro before billing was switched off, Settings → Billing shows Manage existing subscription with an Open billing portal button, where you can manage or cancel it.

Data and privacy

What Shippified stores

Data

Why

How it's protected

Account details: email, workspace name, username, timezone

To run your account

Your password is stored only as a scrypt hash, never in readable form.

Orders: items, prices, order numbers, tracking numbers, statuses, your sale prices and costs

This is the product

Scoped to your workspace. Every request is checked against your account.

Source messages: the decoded content of each order email (sender, subject, text and HTML) and the JSON of each Discord webhook post

So Shippified can rebuild your orders with Re-run parsing after templates improve, and to prevent duplicates

Scoped to your workspace

Carrier details returned by tracking: shipping address, weight, dimensions, signed-by, service level

To show delivery information

Scoped to your workspace

Activity logs: bot webhook hits and the emails that created, updated or were refused an order

To help you troubleshoot

Capped at the most recent 5,000 entries

Email inbox credentials: IMAP passwords, Google and Microsoft sign-in tokens

To read your order mail

Encrypted at rest with AES-256-GCM. Never sent back to the dashboard.

API keys

To authenticate your integrations

Only a SHA-256 hash is stored

Outbound webhook signing secrets

To sign the events Shippified sends to your endpoints

Encrypted at rest with AES-256-GCM

Share cards, templates, subscriptions, webhook settings

Features you use

Scoped to your workspace

Your browser also stores your sign-in token and your theme. Payments, if billing is ever switched on, are processed by Stripe; Shippified doesn't store card numbers. For the full policy, see the Privacy Policy.

Removing data

To remove

Do this

An order

Open the order and click Delete order in the editor at the bottom of its drawer.

An email inbox

Delete it from Links → Email. Shippified stops reading it. Orders already imported from it stay in your workspace.

A Discord bot

Delete it from Links → Webhooks. Its webhook URL stops working.

A share card

Revoke it in Settings → Profile → My shares.

An API key

Revoke it in Settings → Developer → API keys.

Exporting your data and deleting your account

Both live in Settings → Profile → Your data. For safety, both only work from a signed-in browser session. They can't be done with an API key.

Download my data

  1. Go to Settings → Profile and scroll to Your data.

  2. Click Download my data.

Your browser saves a file named like shippified-export-2026-09-24.json. It contains your account details and settings, orders, email sources, bots, custom templates, subscriptions, share cards, the list of your API keys, and the stored source messages your orders were built from.

Secrets are never included: no password hash, no mailbox passwords or Google and Microsoft sign-in tokens (email sources keep only their host, username or address), no API key values or hashes, and no webhook signing secrets.

You can also read your orders at any time with an API key using the Orders API.

Delete account

  1. Go to Settings → Profile → Your data and click Delete account….

  2. Type your account email exactly as shown.

  3. Click Delete everything.

Your account and everything in the workspace are deleted immediately: orders, email sources, bots, templates, subscriptions, share cards, activity logs, stored messages, API keys, outbound webhooks and settings. You're signed out and returned to the home page. If you linked Discord, the Embed Copier's saved submission link for your Discord account is removed too.

Important: Deletion can't be undone. Download your data first if you might want it. Copies in database backups roll off within 14 days, as described in the Privacy Policy.

Related

Was this page helpful?
Account settings and privacy