Skip to main content

ETSY INC

For the period ended Dec 31, 2024. Filed Feb 19, 2025.

View on SEC.gov

About this filing

A company's yearly report to the SEC, with audited financial statements. It is the fullest account a company gives of its business, its finances and the risks it sees.

FY2024 · Filed Feb 19, 2025

ETSY$88.44-1.7%Stored close · as of Nov 9, 2026

What changed in Risk Factors?

Read the current filing

Previous report: 10-K

Period ended 2023-12-31; filed 2024-02-22.

0001370637-24-000013

Item 1A. Risk Factors

Current report: 10-K

Period ended 2024-12-31; filed 2025-02-19.

0001370637-25-000017

Item 1A. Risk Factors

The baseline is this issuer’s latest earlier reporting period of the same form that was filed before the current report. A previous 10-Q is a different quarter, not a year-over-year comparison. Amendments are excluded.

Compared 329 previous paragraphs and 307 current paragraphs.

185 unchanged; 106 reworded; 16 added; 34 removed; 4 previous and 0 current paragraphs rearranged.

Tables are not compared: 0 previous and 0 current tables excluded. Dates, whitespace, punctuation and numbering changes are ignored; changes to financial figures remain significant.

A changed paragraph is not evidence that risk increased or decreased. An unchanged paragraph does not establish that risk stayed the same.

Added paragraphs (16)

Current report

•fluctuations of currency exchange rates, including the strengthening or weakening of the U.S. dollar against foreign currencies; and

Current report

•evolving expectations in our talent markets and our own policies regarding remote, hybrid or other flexible work modes;

Current report

•mitigating concerns around any potential cost-savings actions in light of past restructurings; and

Current report

•our tools, education, and services;

Current report

•integrating or separating administrative functions;

Current report

While we benefit from certain protections and safe-harbors from liability, such as the Digital Millennium Copyright Act § 512 et seq., those protections are limited, vary across jurisdictions, and may diminish as lawmakers, courts, and regulators across the globe continue to reexamine the legal liability of platforms for the content and actions of their third-party users. We have been and may continue to be subject to allegations, litigation and/or regulatory claims seeking to hold us liable for the content and actions of our third-party sellers, including in the areas of intellectual property, consumer protection, product liability, privacy and data protection, content compliance, and criminal laws. If we are alleged or found to be liable for our sellers’ content or actions, or if new laws or court decisions expand the obligations or liability of marketplace platforms, we could be forced to pay monetary damages, civil or criminal penalties and attorneys’ fees, change or restrict our business practices or services, restrict certain types of content from our marketplaces, and/or suffer reputational or other harm. Any of these, or similar, consequences could have a material adverse impact on our business, including by making our platform less attractive to buyers or sellers, reducing our revenue, or increasing our costs.

Current report

Privacy, data protection, and information security regulations are complex and rapidly evolving areas that have and may adversely affect our and our sellers’ business.

Current report

We collect, receive, use, store, disclose, share, and transfer a host of personal, confidential, and otherwise potentially protected information in the course of our operations, including to operate our business and for legal, compliance, and marketing purposes, which subjects us to an increasingly complex array of global privacy and data protection regulations. Authorities around the world have adopted and are considering a number of legislative and regulatory proposals affecting data protection, data usage, data transfer, localization, and information security, among other things. These laws and regulations are evolving, are subject to interpretation, and in some cases may conflict with each other, and create substantial operational, financial, regulatory, reputational, and legal risk to our business. We are subject to regular inquiries and requests from regulators regarding these efforts. Examples of these laws include:

Current report

•The E.U. General Data Protection Regulation and the U. K. General Data Protection Regulations, which apply to our activities conducted from an establishment in the European Union or the United Kingdom, respectively, or related to products and services that we offer to our users in the European Union or the United Kingdom.

Current report

•Various comprehensive U.S. state and international privacy laws, which give new data privacy rights to their respective residents (including, in California, a private right of action in the event of a data breach resulting from our failure to implement and maintain reasonable security procedures and practices) and impose significant obligations on controllers and processors of consumer and employee data.

Current report

•U.S. state laws governing the processing of biometric information, such as the Illinois Biometric Information Privacy Act, which impose obligations on businesses that collect or disclose consumer biometric information.

Current report

•Various federal, state, and international laws, like the Children’s Online Privacy Protection Act of 1998 and the U.K. Age-Appropriate Design Code, which govern the provision of services to children and minors, including the collection and processing of their data.

Current report

Further, we are subject to evolving international laws, regulations, decisional authority, and guidance governing whether, how, and under what circumstances we can transfer, process and/or receive personal data. The validity of various cross-border data transfer mechanisms remains subject to legal, regulatory, and political developments in both the European Union and the United States. Any changes to existing frameworks may require us to adapt our existing arrangements or impede our ability to effectively transfer data to our users, vendors, and partners in other jurisdictions.

Current report

Collectively, worldwide privacy, data protection, and information security laws and regulations have and may continue to change some of the ways that we, our sellers, our vendors, and other third parties collect, use, and share protected information, in some cases creating costly compliance obligations and/or impeding our business. For example, some of these requirements may introduce friction into the user experience on our platforms, restrict our ability to use data in ways that could benefit our sellers and our business, or impact the scope and effectiveness of our marketing efforts, any of which could negatively impact our business and future outlook.

Current report

We may fall short of our data protection obligations due to various factors either within our control (such as limited internal resource allocation) or outside our control (such as a lack of vendor cooperation, new regulatory interpretations, or lack of regulatory guidance in respect of certain requirements). Any actual or perceived failure to comply with applicable privacy or data protection laws, our contractual obligations to third parties, our privacy policies, or similar requirements, could subject us to significant damages, fines, penalties, regulatory investigations, lawsuits, remediation costs, reputational damage, and/or other liabilities. In addition, although our sellers and vendors are independent businesses with their own data protection and privacy obligations, it is possible that a privacy authority could deem us jointly and severally liable for actions of our sellers or vendors, which would increase our potential liability and costs of compliance and could harm our business.

Current report

We are also subject to various data breach notification laws and, in some instances, have contractual and other obligations to notify relevant stakeholders in the event of an actual or potential breach. Our contracts, our contractual representations, and/or industry standards, to varying extents, may require us to use industry-standard or other reasonable measures to safeguard personal or confidential information. Cyber-related events and security breaches even if only related to the actions of a third-party vendor, are and have been costly, could lead to negative publicity, may cause our users, employees, or other stakeholders to lose confidence in our security measures, may cause us to breach certain contracts, and may require us to expend significant resources to remediate. There can be no assurance that indemnity, contractual remedies, or insurance will be available or adequate to protect us from liabilities or damages in the event of a breach or cyber-related incident.
Removed paragraphs (34)

Previous report

While we have experienced rapid growth in our business in the past, our revenue growth rate and financial performance have fluctuated, which makes it difficult to predict the extent of demand for our services or the products sold in our marketplaces.

Previous report

Even if our revenue continues to grow, we may not be able to maintain profitability in the future. Our costs have and may continue to increase as we continue to invest in the development of our marketplaces, including our services and technological enhancements, and as we increase our marketing efforts and expand our operations. Further, the growth of our business places significant demands on our management team and pressure to expand our operational, compliance, payments, and financial infrastructure. For example, we may need to continue to develop and improve our operational, financial, compliance, payments, and management controls and enhance our reporting systems and procedures to support our recent and any future growth.

Previous report

If we do not continue to grow our business or manage our growth effectively, the increases in our cash operating expenses could outpace any increases in our revenue and our business could be harmed. For example, in December 2023, we implemented a Restructuring Plan, which was intended to reduce our operating expenses. In addition, our revenue may decline and our revenue growth rate has and may continue to decelerate for a number of reasons, including as a result of Macroeconomic Conditions and other factors described elsewhere in these Risk Factors. For further information, see Part II, Item 7, “Management’s Discussion and Analysis of Financial Condition and Results of Operations—Results of Operations—Revenue.” You should not rely on prior periods as an indication of our future performance.

Previous report

•the impact of the Restructuring Plan approved in December 2023;

Previous report

Our business may continue to be impacted by Macroeconomic Conditions, which may adversely affect us or the third-parties on whom we rely. If the equity and credit markets deteriorate, it may make any necessary debt or equity financing more difficult to obtain in a timely manner, or on favorable terms, more costly, or more dilutive. Increased inflation rates can adversely affect us by increasing our costs, including labor and employee benefit costs. In addition, higher inflation and macroeconomic turmoil and uncertainty could also adversely affect our buyers and sellers, which could reduce demand for the products sold in our marketplaces.

Previous report

Fluctuations in our quarterly operating results, key metrics, and the price of our common stock may be particularly pronounced in the current economic environment due to the uncertainty caused by the Macroeconomic Conditions and changes in consumer spending patterns. Fluctuations in our quarterly operating results and key metrics may cause those results to fall below our financial guidance or other projections, or the expectations of analysts or investors, which could cause the price of our common stock to decline. Fluctuations in our results could also cause a number of other problems. For example, analysts or investors might change their models for valuing our common stock, we could experience short-term liquidity issues, our ability to retain or attract key personnel may diminish, and other unanticipated issues may arise.

Previous report

Any failure to successfully implement our operating strategy or the occurrence of any of the events or circumstances described elsewhere in these Risk Factors could result in the actual operating results being different from our guidance, and the differences may be adverse and material.

Previous report

Our business could be adversely affected by economic downturns, inflation, natural disasters, public health crises, political crises, geopolitical events, or other macroeconomic conditions, which have in the past and may in the future negatively impact our business and financial performance.

Previous report

Macroeconomic Conditions have and may continue to adversely affect our business. If general economic conditions deteriorate in the United States or other markets where we operate, consumer discretionary product spending may decline and demand for the goods and services available on our platforms may be reduced. This would cause our Marketplace and Services revenue to decline and adversely impact our business.

Previous report

If trends supporting self-employment, and the desire for supplemental income were to reverse, the number of sellers offering their goods in our marketplaces and the number of goods listed in our marketplaces could decline. In addition, currency exchange rates may directly and indirectly impact our business. If the U.S. dollar strengthens or weakens against foreign currencies, particularly if there is short-term volatility, our foreign currency denominated GMS and revenue, when translated into U.S. dollars, could fluctuate significantly. Currency exchange rates may also impact demand for cross-border purchases, which could impact GMS and revenue. For the year ended December 31, 2023, approxi mately 71% of our GMS was denominated in U.S. dollars.

Previous report

•fluctuations of foreign exchange rates; and

Previous report

•enhancing engagement levels among existing employees and supporting their work-life balance;

Previous report

•attracting high quality talent in a timely fashion;

Previous report

•retaining qualified employees who support our mission and guiding principles, and continuing to do so in our hybrid work environment;

Previous report

•hiring employees in multiple locations globally, and building a diverse, equitable, and inclusive workforce; and

Previous report

Over the last several years, the Organization for Economic Cooperation and Development (“OECD”) has been developing its “two pillar” project to address the tax challenges arising from digitalization. The OECD project, if broadly implemented by participating countries, will result in significant changes to the international taxation system under which our current tax obligations are determined. The second pillar of the project (“Pillar Two”) calls for a minimum tax rate on corporations of 15% and is expected to be implemented by a significant number of countries starting in 2024. The OECD and implementing countries are expected to continue to make further revisions to the rules, however, we expect adverse consequences to our tax liabilities based on rules as currently drafted. We will continue to monitor developments to determine any potential impact of Pillar Two in the countries in which we operate.

Previous report

•our tools, education, and services, which support a seller in running her business;

Previous report

•from time to time, we may revise our policies in ways that we believe will enhance trust in our platforms, even though the changes may be perceived unfavorably, such as updates to the way we define handmade.

Previous report

•integrating administrative functions;

Previous report

Further, we purchase verified emissions reductions (“VERs”) and use renewable energy credits (“RECs”), including RECs arising from a 15 year virtual power purchase agreement expiring in 2034, to help balance our carbon and energy footprints. If the cost of VERs were to materially increase or we were required to purchase a significant number of additional VERs or RECs, our cost to obtain these offsets and/or credits could increase materially which could impact our ability to meet our public goals or our financial performance.

Previous report

Our tools and procedures may not effectively reduce or eliminate our liability. For example, on the Etsy marketplace we use a combination of automatic and manual tools and depend upon human review in many circumstances. No tools and procedures are guaranteed to function completely without error, particularly for physical, non-standardized goods, our tools and procedures may be subject to error or enforcement failures and may not be adequately staffed, and we may be subject to an increasing number of erroneous or fraudulent demands to remove content. In addition, we may be subject to civil or criminal liability for activities carried out by sellers on our platforms, especially outside the United States where laws may offer less protection for intermediaries and platforms than in the United States.

Previous report

Under current U.S. copyright laws such as the Digital Millennium Copyright Act § 512 et. seq., we benefit from statutory safe harbor provisions that protect us from copyright liability for content posted on our platforms by sellers and buyers, and we rely upon user content platform protections under 47 U.S.C. § 230 (commonly referred to as CDA § 230), which limit most non-intellectual property law claims against Etsy based upon content posted by users on our platforms. However, trademark and patent laws do not include similar statutory provisions, and limits on platform liability for these forms of intellectual property are primarily based upon court decisions. Similarly, laws related to product liability vary by jurisdiction, and the liability of marketplace platforms for products and services of sellers, while traditionally limited, is subject to increasing debate in courts, legislatures and legislative proposals, and with regulators. Any legislation or court rulings affecting these safe harbors or other limits on platform liability may adversely affect us and may impose significant operational challenges. For example, there are legislative and regulatory proposals and pending litigation in both the United States and European Union that could diminish or eliminate certain safe harbor protections and/or immunities for websites and online platforms. Moreover, changes focused on actions by very large platforms that perform retailer-like functions, or handle mass user content, may directly or indirectly also impact us, our sellers, buyers and vendors.

Previous report

Proposed and enacted laws in Europe and the United States may change the scope of platform liability, and ongoing case law developments may unpredictably increase our liability as platforms for user activity. In that event, we may be held directly or secondarily liable for the intellectual property infringement, product compliance deficiencies, consumer protection deficiencies, privacy and data protection incidents, or regulatory issues of our sellers, including potentially for their conduct over which we have no control or influence.

Previous report

Expanding and evolving regulations in the areas of privacy and user data protection could create technological, economic and complex cross-border business impediments to our business and those of our sellers.

Previous report

We collect, receive, store, process, generate, use, transfer, disclose, make accessible, protect, secure, dispose of, and share personal information, confidential information and other sensitive or potentially protected information necessary to provide our service, to operate our business, for legal and marketing purposes, and for other business-related purposes.

Previous report

Data protection remains a significant issue in the United States, countries in the European Union, and in many other countries in which we operate. In addition to the actual and potential changes in data protection laws described elsewhere in these Risk Factors, global developments in privacy and data security regulation have changed and may continue to change some of the ways we, our sellers, our vendors and other third-parties collect, use, and share personal information and other proprietary or confidential information, and have created and will continue to create additional compliance obligations for us and our sellers, vendors, and other third-parties. In addition, although our sellers are independent businesses, it is possible that a privacy authority could deem us jointly and severally liable for actions of our sellers or vendors, which would increase our potential liability exposure and costs of compliance, which could negatively impact our business. If we fall short of our data protection obligations in countries in which we operate, we could face potential liability, regulatory investigations, and costly litigation, which may not be adequately covered by insurance.

Previous report

In the European Union, the E.U. General Data Protection Regulation (“GDPR”) contains strict requirements for processing the personal data of individuals residing in E.U. member states, the European Economic Area (“EEA”), and certain additional territories. A substantially similar law, the U.K. General Data Protection Regulation (“U.K. GDPR”) (a version of the GDPR as implemented into U.K. law that combines the GDPR and the U.K. Data Protection Act of 2018) is in effect in the United Kingdom. Both laws contain significant obligations for data processors and controllers, including to protect certain data subject rights, such as the “right to be forgotten” and certain data portability, access, and redress rights, as well as obligations related to security and accountability controls (including stringent data breach notification requirements), online and email marketing, documentation and record-keeping, and other compliance requirements related to our sellers, vendors and other third parties. Both laws are also subject to changing interpretations due to decisions of data protection authorities, courts, and related legislative efforts. Furthermore, while the GDPR and U.K. GDPR remain substantially similar for the time being, the U.K. GDPR is currently under review in the United Kingdom and there may be further changes made to it over the next few years, including in ways that may differ from the GDPR, which could result in further or conflicting compliance obligations. In addition, although our sellers are independent businesses, it is possible that a privacy authority could deem us jointly and severally liable for actions of our sellers or vendors, which would increase our potential liability exposure and costs of compliance, which could negatively impact our business. Due to the GDPR and the U.K. GDPR, we may experience difficulty retaining or obtaining new E.U. or U.K.

Previous report

sellers, or current and new sellers may limit their selling into the European Union, due to the legal requirements, compliance costs, potential risk exposure, and uncertainty for them about their own compliance obligations with respect to the GDPR and U.K. GDPR.

Previous report

In the United States, rules and regulations governing data privacy and security include those promulgated under the authority of the Federal Trade Commission Act, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, California’s California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (collectively, the “CCPA”), and other state and federal laws relating to privacy, consumer protection, and data security. Some of these laws provide for penalties and/or include a private right of action and statutory damages for data breaches and other violations.

Previous report

Aspects of certain newly enacted U.S. state privacy statutes remain unclear, resulting in further legal uncertainty and potentially requiring us to modify our data practices and policies and to incur substantial additional costs and expenses in an effort to comply. If more stringent privacy legislation arises in the United States, E.U., or other jurisdictions where we operate, it could increase our potential liability and adversely affect our business, results of operations, and financial condition.

Previous report

The GDPR, CCPA, and similar laws in other jurisdictions, and future changes to or interpretations of any of these laws, may continue to change the data protection landscape globally, may be potentially inconsistent or incompatible, and could result in potentially significant operational costs for internal compliance and risk to our business. Some of these requirements introduce friction into the buying and selling experience on our platforms and may impact the scope and effectiveness of our marketing efforts, which could negatively impact our business and future outlook. Complying with these laws and contractual or other obligations relating to privacy, data protec tion, data transfers, data localization, or information security may require us to make changes to our services to enable us or our customers to meet new legal requirements, incur substantial operational costs, modify our data practices and policies, and restrict our business operations. Any actual or perceived failure by us to comply with these laws, regulations, or other obligations may lead to significant fines, penalties, regulatory investigations, lawsuits, significant costs for remediation, damage to our reputation, or other liabilities. For example, under the GDPR alone, noncompliance could result in fines of up to 20 million Euros or up to 4% of the annual global revenue of the noncompliant company, whichever is greater. We may not be entirely successful in our compliance efforts due to various factors either within our control (such as limited internal resource allocation) or outside our control (such as a lack of vendor cooperation, new regulatory interpretations, or lack of regulatory guidance in respect of certain requirements).

Previous report

In addition, E.U. data protection laws also generally prohibit the transfer of personal information from Europe to the United States and most other countries unless the recipient country has been deemed to have adequate privacy protections in place to protect the personal information. On July 10, 2023, the European Commission adopted an adequacy decision concluding that the United States ensures an adequate level of protection for personal data transferred from the EEA to the United States under the E.U.-United States Data Privacy Framework (followed on October 12, 2023 with the adoption of an adequacy decision in the U.K. for the UK-United States Data Bridge). Etsy relies on a variety of compliance methods to transfer personal data of EEA individuals to the United States. The rules related to cross-border transfers remain subject to legal uncertainty and potential change, which may impede Etsy and our subsidiaries’ ability to effectively transfer data between jurisdictions with parties such as partners, vendors and users, or may make such transfers of personal data more costly. Among other things, there is a risk that transfers by us or our vendors of personal information from Europe may not comply with E.U., or U.K. data protection law, may increase our exposure to potential sanctions for violations of applicable cross-border data transfer restrictions, and may result in lower sales on our platforms because of the potential difficulty of establishing a lawful basis for personal information transfers out of Europe.

Previous report

We also publish privacy policies and other documentation regarding our collection, processing, use, and disclosure of personal data. Although we endeavor to comply with our published policies and documentation, we may at times fail to do so or may be perceived to have failed to do so. Moreover, despite our efforts, we may not be successful in achieving compliance, such as if our employees or vendors fail to comply with our published policies and documentation. We are subject to occasional requests from regulators regarding these efforts. Failures can subject us to potential international, local, state, and federal action under both data protection and consumer protection laws. We are or may also be subject to the terms of our own and third-party external and internal privacy and security policies, codes, representations, certifications, industry standards, publications and frameworks and contractual obligations to third-parties related to privacy and/or information security, including contractual obligations to indemnify and hold harmless third-parties from the costs or consequences of non-compliance with data protection laws, or other obligations.

Previous report

Our sellers and vendors may have been and may now and in the future be subject to similar privacy requirements, which may significantly increase costs and resources dedicated to their compliance with such requirements. We have varying contractual and other legal obligations to notify relevant stakeholders of security breaches related to us or, in some cases, our third-party service providers. Many jurisdictions have enacted laws requiring companies to notify individuals, regulatory authorities, and others of security breaches involving certain types of data in some circumstances. In addition, our agreements with certain stakeholders may require us to notify them in the event of such a security breach. Such mandatory disclosures, even if only related to actions of a third-party vendor, are costly, could lead to negative publicity, may cause members of our communities to lose confidence in the effectiveness of our security measures and require us to expend significant capital and other resources to respond to and/or alleviate problems caused by the actual or perceived security breach, and may cause us to breach customer contracts. Our contracts, our representations or industry standards, to varying extents, require us to use industry-standard or reasonable measures to safeguard sensitive personal information or confidential information. A cyber-related event or security breach could lead to claims by members of our communities or other relevant stakeholders that we have failed to comply with such legal or contractual obligations. As a result, we could be subject to legal action or members of our communities could end their relationships with us. There can be no assurance that any indemnifications, limitations of liability or other remedies in our contracts would be enforceable or adequate or would otherwise protect us from liabilities or damages. Our risks are likely to increase as we continue to expand, grow our customer base, and process, store, and transmit increasingly large amounts of proprietary and sensitive data.
Reworded paragraphs (106)

Previous wording

Investing in our securities involves a high degree of risk. You should consider carefully the risks and uncertainties described below, our Consolidated Financial Statements and related notes, and the other information in this Annual Report. If any of these risks actually occur, our business, financial condition, results of operations, and prospects could be adversely affected. As a result, the price of our securities could decline and you could lose part or all of your investment. In addition, factors other than those discussed below or in other of our reports filed with or furnished to the SEC also could adversely affect our business, financial condition, or results of operations. We cannot assure you that the risk factors described below or elsewhere in our reports address all potential risks that we may face. These risk factors also serve to describe factors which may cause our results to differ materially from those described in forward-looking statements included herein or in other documents or statements that make reference to this Annual Report. For more information, see the “Note Regarding Forward-Looking Statements.”

Current wording

Investing in our securities involves a high degree of risk. You should consider carefully the risks and uncertainties described below, our Consolidated Financial Statements and related notes, and the other information in this Annual Report. If any of these risks actually occur, our business, financial condition, results of operations, and prospects could be adversely affected. As a result, the price of our securities could decline and you could lose part or all of your investment. In addition, factors other than those discussed below or in other of our reports filed with or furnished to the SEC also could adversely affect our business, financial condition, results of operations, or prospects. We cannot assure you that the risk factors described below or elsewhere in our reports address all potential risks that we may face. These risk factors also serve to describe factors which may cause our results to differ materially from those described in forward-looking statements included herein or in other documents or statements that make reference to this Annual Report. For more information, see the “Note Regarding Forward-Looking Statements.”

Previous wording

Our quarterly operating results may fluctuate, which could cause significant stock price fluctuations.

Current wording

Our quarterly operating results have and may continue to fluctuate, which can cause significant stock price fluctuations.

Previous wording

Our quarterly operating results, as well as our key metrics, may fluctuate for a variety of reasons, many of which are beyond our control, including:

Current wording

Our quarterly operating results, as well as our key metrics, have and may continue to fluctuate for a variety of reasons, many of which are beyond our control, including:

Previous wording

During 2020 and 2021, we experienced rapid growth in our business, in the number of buyers and sellers, and purchase frequency. While our revenue growth continued more modestly in 2022 and 2023, our GMS declined slightly for the year ended December 31, 2022 as compared to the year ended December 31, 2021 and again declined slightly for the year ended December 31, 2023 as compared to the year ended December 31, 2022. Our business may continue to be impacted by macroeconomic factors beyond our control such as inflation, rising interest rates, disruptions to the banking industry, potential recessionary factors, foreign exchange rate volatility, changing consumer shopping preferences, continued pressure on consumer discretionary product spending, global geopolitical uncertainties, supply-chain disruptions, an increasingly competitive retail environment, and employment levels, among others (collectively, “Macroeconomic Conditions”).

Current wording

•inflation, interest rates, recessionary factors, foreign exchange rate volatility, tariffs and other trade barriers, disruptions to the banking industry, changing consumer shopping preferences, continued pressure on consumer discretionary product spending, weather, domestic and global geopolitical uncertainties, various types of cultural events, public health crises, supply-chain disruptions, an increasingly competitive retail environment, and employment levels, among other factors (collectively, “Macro Conditions”).

Previous wording

•fluctuations in GMS or revenue, including as a result of uncertainty or changing spending patterns resulting from Macroeconomic Conditions, the seasonality of market transactions, and our sellers’ use of services;

Current wording

•fluctuations in our GMS or revenue, including as a result of Macro Conditions, the seasonality of market transactions, and our sellers’ use of services;

Previous wording

•our ability to manage our business and future growth; and

Current wording

•our ability to manage our operating expenses and our Adjusted EBITDA margin as we continue to invest in our marketplaces;

Previous wording

•the impact of competitive developments and our response to those developments;

Current wording

•the impact of competitive developments and our response to those developments; and

Previous wording

Any events causing significant disruption or distraction to the public or to our workforce, or impacting overall macroeconomic conditions, such as natural disasters and other adverse weather and climate conditions, public health crises, supply chain disruptions, political instability or crises, terrorist attacks, war, social unrest, or other unexpected events, could disrupt our operations, or the operations of one or more of our third-party service providers. These events may also impact buyer demand for discretionary goods, impact sellers’ ability to run their businesses on our marketplaces and ship their goods, and impact our ability to execute on our strategy, any of which could negatively impact our business and financial performance.

Current wording

These events may also impact our sellers’ ability to run their businesses on our marketplaces, which could negatively impact our business and financial performance.

Previous wording

Global economic conditions have also generated pressure on consumer discretionary product spending. Consumer purchases of discretionary items, including the goods that we offer, generally decline during recessionary periods or periods of economic uncertainty, when disposable income is reduced or when there is a reduction in consumer confidence. Factors that could further affect consumers’ willingness to make discretionary purchases include, among others: high levels of unemployment; higher consumer debt levels; global geopolitical uncertainties; reductions in net worth, declines in asset values, disruptions to the banking industry, and related market and macroeconomic uncertainty; home foreclosures and reductions in home values; fluctuating interest rates, increased inflationary pressures and lack of credit availability; rising fuel and energy costs; rising commodity prices; and other general uncertainty regarding the overall future political and economic environment. It is difficult to predict how our business might be impacted by changing consumer spending patterns. In the event of a prolonged economic downturn or acute recession, significant inflation, or increased supply chain disruptions impacting our communities of sellers and the economy as a whole, consumer spending habits could be materially and adversely affected, as could our business, financial condition, operating results, and ability to execute and capitalize on our strategies.

Current wording

Fluctuations in our quarterly operating results, key metrics, and the price of our common stock may be particularly pronounced during periods of economic uncertainty, including uncertainty caused by Macro Conditions. Consumer purchases of discretionary items, including the goods that we offer, generally decline during recessionary periods or periods of economic uncertainty, when disposable income is reduced or when there is a reduction in consumer confidence. In the event of a prolonged economic downturn or acute recession, significant inflation, or increased supply chain disruptions impacting our communities of sellers and the economy as a whole, consumer spending habits could be materially and adversely affected, as could our business, financial condition, operating results, and ability to execute and capitalize on our strategies.

Previous wording

Our guidance includes forward-looking statements based on projections prepared by our management. Projections are based upon a number of assumptions and estimates that are based on information known when they are issued, and, while presented with numerical specificity, are inherently subject to significant business, economic, and competitive uncertainties and contingencies relating to our business, many of which are beyond our control and are based upon specific assumptions with respect to future business decisions, some of which may prove incorrect and/or may change. Some of those key assumptions include the timing and impact of broad Macroeconomic Conditions, particularly in our core markets, and the resulting impact of these factors on future consumer spending patterns and our business. These assumptions are inherently difficult to predict, particularly in the long-term.

Current wording

Our guidance includes forward-looking statements based on projections prepared by our management. Projections are based upon a number of assumptions and estimates that are based on information known when they are issued. While presented with numerical specificity, projections are inherently subject to significant business, economic, and competitive uncertainties and contingencies relating to our business, many of which are beyond our control and are based upon specific assumptions with respect to future business decisions and developments, some of which may prove incorrect and/or may change. Some of those key assumptions include the timing and impact of broad Macro Conditions, particularly in our core markets, and the resulting impact of these factors on future consumer spending patterns and our business. These assumptions are inherently difficult to predict, particularly in the long term.

Previous wording

We generally state possible outcomes as high and low ranges, which are intended to provide a sensitivity analysis as variables are changed but are not intended to imply that actual results could not fall outside of the suggested ranges. Furthermore, analysts and investors may develop and publish their own projections of our business, which may form a consensus about our future performance. Our actual business results may vary significantly from such guidance or consensus due to Macroeconomic Conditions or other factors, many of which are outside of our control, which could adversely affect our business and future operating results. Furthermore, if we make downward revisions of our previously announced guidance, or if our publicly announced guidance of future operating results fails to meet expectations of securities analysts, investors, or other interested parties, the price of our common stock could decline.

Current wording

We generally state possible outcomes as high and low ranges, which are intended to provide a sensitivity analysis as variables are changed, but are not intended to imply that actual results could not fall outside of the suggested ranges. Furthermore, analysts and investors develop and publish their own projections for our business, which may form a consensus about our future performance. Our actual business results may vary significantly from such guidance or consensus due to Macro Conditions or other factors, many of which are outside of our control, which could adversely affect our business and future operating results. Furthermore, if we make downward revisions of our previously announced guidance, or if our publicly announced guidance of future operating results fails to meet expectations of securities analysts, investors, or other interested parties as it has in the past, the price of our common stock could decline.

Previous wording

Guidance is necessarily speculative in nature and guidance offered in periods of significant extreme uncertainty is inherently more speculative in nature than guidance offered in periods of relative stability. It can be expected that some or all of the assumptions underlying the guidance furnished by us will not materialize or will vary significantly from actual results. Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release. Actual results may vary from our guidance and the variations may be material. In light of the foregoing, investors are urged to put the guidance in context and not to place undue reliance on it in making an investment decision regarding our common stock.

Current wording

Guidance is necessarily speculative in nature, and guidance offered in periods of significant uncertainty is inherently more speculative in nature than guidance offered in periods of relative stability. It can be expected that some or all of the assumptions underlying the guidance furnished by us will not materialize or will vary significantly from actual results. Accordingly, our guidance is only an estimate of what management believes is realizable as of the date of release. Actual results may vary from our guidance and the variations may be material. In light of the foregoing, investors are urged to put our guidance in context and not to place undue reliance on it in making an investment decision regarding our common stock.

Previous wording

•inadequate or unsatisfactory customer service experiences, failure to adequately respond to feedback from our communities, or inability of our sellers to fulfill their orders in accordance with our policies, their own shop-specific policies, or buyer expectations.

Current wording

•inadequate or unsatisfactory customer service experiences, failure to adequately respond to feedback from our communities, or failure of our sellers to fulfill their orders in accordance with our policies, including as a result of fraud, their own shop-specific policies, or buyer expectations.

Previous wording

We are and may continue to be an attractive target to bad actors and fraudsters targeting our marketplaces and our communities, civil litigants, and those seeking to enforce alleged intellectual property rights and/or alleged contractual rights. Additionally, there have been and may continue to be attempts to misrepresent or mischaracterize us or our marketplaces, such as on social media, or via individual or coordinated campaigns. We may not be successful in defending against these types of tactics which, if successful, could damage our brands and our business. Even if we are successful in defending against these types of claims, we may be required to spend significant resources in those efforts which may distract our management and otherwise negatively impact our results of operations. In addition, the recent increased scrutiny and regulation of marketplace platforms, though principally focused on other larger platforms, has and may continue to create burdens on both Etsy and its communities of buyers and sellers. This may lead to increased risks that shift more quickly than our policies, enforcement mechanisms, and systems can react.

Current wording

We are and may continue to be an attractive target to bad actors and fraudsters targeting our marketplaces and our communities. There have been and may continue to be attempts to impersonate, exploit, misrepresent or mischaracterize us or our marketplaces, such as on social media, or via individual or coordinated spam or other campaigns. We are not always successful in defending against these types of tactics which, when successful, could cause buyers and sellers to lose trust in our marketplaces, and could lead to fewer active buyers and/or sellers or otherwise damage our brands and our business. Even if we are successful in defending against these tactics, we may be required to spend significant resources in those efforts which may distract our management and otherwise negatively impact our results of operations. In addition, the recent increased scrutiny and regulation of marketplace platforms, though principally focused on other larger platforms, has and may continue to create burdens on both Etsy and its communities of buyers and sellers. This may lead to increased risks that shift more quickly than our policies, enforcement mechanisms, and systems can react.

Previous wording

As our marketplaces grow, our controls over fraud and policy violations are important to maintaining user trust, but they may not be adequate and may not be sufficient to keep up with quickly-shifting techniques used by those attempting to undertake fraudulent activity on our platforms. We take action against sellers who we are aware may have violated our policies, and in recent periods the volume of enforcement actions against sellers for such violations has increased. However, our actions may be insufficient, may not be timely, and may not be effective in creating a good purchase experience for our buyers or avoiding negative publicity. While we regularly update our processes for handling complaints and detecting policy violations, these processes are by their nature imperfect in a dynamic marketplace, and include risk to us, our sellers, and our buyers from both under-enforcement and over-enforcement.

Current wording

Our controls over fraud and policy violations are important to maintaining user trust, but they may not be adequate and may not be sufficient to keep up with quickly-shifting techniques used by those attempting to undertake fraudulent activity on our platforms. The use of increasingly sophisticated techniques has made, and may continue to make, fraudulent activity by sellers and buyers increasingly difficult to combat and increase its impact. We take action against sellers who we are aware may have violated our policies or engage in fraud. The volume of enforcement actions against sellers for such activities has increased at times, and may increase again in the future. Furthermore, our actions may be insufficient, may not be timely, and may not be effective in creating a good purchase experience for our buyers or avoiding negative publicity. While we regularly update our processes for handling complaints and detecting policy violations and fraud, these processes are by their nature imperfect in a dynamic marketplace, and include risks to us, our sellers, and our buyers from both under-enforcement and over-enforcement, as well as potentially heightened friction on our marketplaces, which may reduce seller and buyer trust and engagement.

Previous wording

We continue to evolve our marketplaces and invest to improve our customer experience. If our efforts are unsuccessful, or if our customer service platforms or our trust and safety program fail to meet legal requirements or buyers’ and sellers’ expectations, we may need to invest significant additional resources. If we are unable to maintain trusted brands and marketplaces, our ability to attract and retain buyers and sellers could be harmed.

Current wording

We continue to evolve our marketplaces and invest to improve our customer experience. If our efforts are unsuccessful, or if our customer service platforms or our trust and safety program fail to meet legal requirements or buyers’ and sellers’ expectations, we may need to invest in significant additional resources. If we are unable to maintain trusted brands and marketplaces, our ability to attract and retain buyers and sellers could be harmed.

Previous wording

Our financial performance, specifically our GMS, revenue, and Adjusted EBITDA, has been and will continue to be significantly determined by our success in attracting and retaining active buyers and active sellers and increasing their engagement. We believe that many new buyers and sellers find us by word of mouth and other non-paid referrals from existing buyers and sellers. If existing buyers do not find our platforms appealing, for example, because of a negative experience, lack of competitive shipping costs, delayed shipping times, inadequate customer service, lack of buyer-friendly features, declining interest in the goods offered by our sellers, or other factors, they may make fewer purchases and they may not refer others to us. Likewise, if existing sellers are dissatisfied with their experience on our platforms, or feel they have more attractive alternatives, they may stop listing items in our marketplaces and using our services and may stop referring others to us, which could negatively impact our financial performance.

Current wording

Our financial performance, specifically our GMS, revenue, and Adjusted EBITDA, has been and will continue to be significantly determined by our success in attracting and retaining active buyers and active sellers and increasing their engagement. We believe that many new buyers and sellers find us by word of mouth and other non-paid referrals from existing buyers and sellers. If existing buyers do not find our platforms appealing, for example, because of a negative experience, lack of competitive shipping charges, delayed shipping times, inadequate customer service, buyer fees or lack of buyer-friendly features, declining interest in the goods offered by our sellers, lack of desirable inventory, or other factors, they may make fewer purchases and they may not refer others to us. Likewise, if existing sellers are dissatisfied with their experience on our platforms, or feel they have more attractive alternatives, they may stop listing items in our marketplaces and using our services and may stop referring others to us, which could negatively impact our financial performance. Further, if trends supporting self-employment and the desire for supplemental income were to reverse, the number of sellers offering their goods in our marketplaces and the number of goods listed in our marketplaces could decline.

Previous wording

A perception that our levels of responsiveness and support for our sellers and buyers are inadequate could damage our reputation, and reduce our sellers’ willingness to sell and buyers’ willingness to shop on our marketplaces. In some situations, we may choose to reimburse our buyers for their purchases to help avoid harm to our reputation. For example, we offer Etsy Purchase Protection, a program that refunds buyers when a qualifying order is not received, is not as described, or arrives late or damaged. While we cover the reimbursement for qualifying orders under Etsy Purchase Protection, we also take steps to cover certain reimbursements that do not relate to qualified orders, such as requiring reserves from some sellers based on indications they may not be able to fulfill orders and other factors. Our cost to refund qualifying orders may exceed our expectations, and despite our efforts, we are not always, and in the future may not be, able to recover the funds we expend for reimbursements unrelated to qualified orders, both of which could impact our financial performance. When we do recover funds used to reimburse buyers from sellers, it may increase general seller dissatisfaction and reduce their desire to continue selling using our platforms. Although we are focused on enhancing customer service, our efforts may be unsuccessful and our sellers and buyers may be disappointed in their experience and not return.

Current wording

A perception that our levels of responsiveness and support for our sellers and buyers are inadequate could damage our reputation, and reduce our sellers’ willingness to sell and buyers’ willingness to shop on our marketplaces. In some situations, we may choose to reimburse our buyers for their purchases to help avoid harm to our reputation. For example, we offer Etsy Purchase Protection, a program that refunds buyers when a qualifying order is not received, is not as described, or arrives late or damaged. While we cover the reimbursement for qualifying orders under Etsy Purchase Protection, we also take steps to cover certain reimbursements that do not relate to qualified orders, such as requiring reserves from some sellers based on indications they may not be able to fulfill orders and other factors. Depop and Reverb have similar programs. Our cost to refund qualifying orders may exceed our expectations, and despite our efforts, we are not always, and in the future may not be, able to recover the funds we expend for reimbursements unrelated to qualified orders, both of which could impact our financial performance. When we do recover buyer refund amounts from sellers, it may increase general seller dissatisfaction and reduce their desire to continue selling using our platforms. Although we are focused on enhancing customer service, our efforts may be unsuccessful, and our sellers and buyers may be disappointed in their experience and not return.

Previous wording

In addition, our GMS and revenue are concentrated in our most active buyers and sellers. The COVID-19 pandemic fueled an unprecedented increase in the growth of active buyers, andthe number of active buyers remains significantly above pre-pandemic levels. If we lose a significant number of buyers or sellers, or our buyers or sellers do not maintain their level of activity, for any reason, including due to the pressure on or shifts in consumer discretionary spending, increased seller fees, our financial performance and growth could be harmed. Even if we are able to attract new buyers and sellers to replace the ones that we lose, we may not be able to do so at comparable levels, they may not maintain the same level of activity, and the GMS and revenue generated from new buyers and sellers may not be as high as the GMS and revenue generated from the ones who leave, or reduce their activity level on, our marketplaces. If we are unable to attract and retain buyers and sellers, or our buyers or sellers do not maintain their level of activity, our business, financial performance, and growth could be harmed.

Current wording

In addition, our GMS and revenue are concentrated in our most active buyers and sellers. If we lose a significant number of buyers or sellers, or our buyers or sellers do not maintain their level of activity for any reason, our financial performance could be harmed. Even if we are able to attract new buyers and sellers to replace the ones that we may lose, we may not be able to do so at comparable levels, they may not maintain the same level of activity, and the GMS and revenue generated from new buyers and sellers may not be as high as the GMS and revenue generated from the ones who leave, or reduce their activity level on our marketplaces. If we are unable to attract and retain buyers and sellers, or our buyers or sellers do not maintain their level of activity, our business and financial performance could be harmed.

Previous wording

A small portion of buyers complain to us about their experience on our platforms. As a pure marketplace, our sellers manage their shops, certain shop policies, products and product descriptions, shipping, and returns. As a result, we do not have the ability to control important aspects of buyers’ experiences on our platforms. For example, a buyer may report that they have not received the items that they purchased, that the items received were not as represented by a seller, or that a seller has not been responsive to their questions. While we have introduced new ways to protect buyers, negative publicity and sentiment generated as a result of these types of complaints, or any associated enforcement action taken against sellers, could reduce our ability to attract and retain our sellers and buyers or damage our reputation.

Current wording

Our sellers manage their shops, certain shop policies, products and product descriptions, shipping, and returns. As a result, we do not have the ability to control important aspects of buyers’ experiences on our platforms. For example, buyers may report that they have not received the items they purchased, that the items received were not as represented by a seller, or that a seller has not been responsive to their questions. While we have introduced features designed to protect buyers, there can be no assurance that these measures will be effective in combating fraudulent transactions or improve overall buyer satisfaction. Further, negative publicity and sentiment generated as a result of these types of complaints, or any associated enforcement action taken against sellers, could reduce our ability to attract and retain our sellers and buyers or damage our reputation.

Previous wording

Similarly, we rely on sellers to be responsive to buyers and to fulfill orders from buyers. Anything that prevents the timely processing of orders or delivery of goods to our buyers could harm our sellers. Service interruptions and delivery delays may be caused by events that are beyond the control of our sellers, such as interruptions in order or payment processing, interruptions in sellers’ supply chains, transportation disruptions, customs delays, natural disasters, inclement weather, terrorism, public health crises, political unrest or geopolitical conflict. Additionally, popular or trending sellers may experience an influx of orders that may be beyond their ability to fulfill in a timely manner. While we have procedures designed to mitigate spikes in orders, we cannot guarantee those procedures will be effective. If buyers have a negative purchase experience, whether due to service interruptions or other reasons, or if sellers are unable to timely fulfill their orders from buyers, our reputation could be harmed.

Current wording

In addition, anything that prevents the timely processing of orders or delivery of goods to our buyers could harm our sellers. Service interruptions and delivery delays may be caused by events that are beyond the control of our sellers, such as interruptions in order or payment processing, interruptions in sellers’ supply chains, transportation disruptions, customs delays, natural disasters, inclement weather, terrorism, public health crises, political unrest, or geopolitical conflict. Additionally, popular or trending sellers may experience an influx of orders that may be beyond their ability to fulfill in a timely manner. While we have procedures designed to mitigate spikes in orders, we cannot guarantee those procedures will be effective. If buyers have a negative purchase experience, whether due to service interruptions or other reasons, or if sellers are unable to timely fulfill their orders from buyers, our reputation could be harmed.

Previous wording

We track certain operational metrics, including active buyers and active sellers, GMS, GMS from specific categories of goods or classes of buyers or sellers or specific platforms, and other information about our communities, with internal systems and tools or manual processes and these metrics are not independently verified by a third-party. The methodologies used to measure certain of these metrics require significant judgment, are susceptible to errors, and may differ from estimates or metrics published by third-parties due to differences in sources, methodologies, or the assumptions on which we rely. We also use surveys to collect and track information about our buyers and sellers and rely on third-party data, which we do not independently verify, to evaluate and report on our opportunity. Our internal systems, tools, and processes have a number of limitations, and our surveys or data collection methodologies may have errors or could change over time, which could result in unexpected changes to our metrics, including the metrics we publicly disclose. Similarly, our third-party data sources have in the past and may in the future revise the historical data provided as a result of adjustments to their prior estimates or for other reasons. If the internal systems and tools, processes, or surveys we use to track these metrics under count or over count performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics, there are inherent challenges in measuring this data. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure or obtain from third-parties may affect our understanding of certain details of our business or our opportunity, which could affect our long-term strategies. If our operating metrics are not accurate, or if investors do not perceive them to be accurate, investors may lose confidence in our operating metrics and business, and we expect that we could be subject to legal claims, and our business, reputation, financial condition, and results of operations would be adversely affected.

Current wording

We track certain operational metrics, including active buyers and active sellers, GMS, GMS from specific categories of goods, classes of buyers or sellers, or specific platforms, and other information about our communities and the performance of our platforms, with internal systems and tools or manual processes. These metrics are not independently verified by a third party. The methodologies used to measure certain of these metrics require significant judgment, are susceptible to errors, may change over time, and may differ from estimates or metrics published by third parties due to differences in sources, methodologies, or the underlying assumptions. We also use surveys to collect and track information about our buyers and sellers and rely on third-party data, which we do not independently verify, to evaluate and report on our opportunity. Our internal systems, tools, and processes and our surveys or data collection methodologies have a number of limitations, may have errors or could change over time, any of which could result in unexpected changes to our metrics, including the metrics we publicly disclose. Similarly, our third-party data sources have in the past and may in the future revise the historical data provided as a result of adjustments to their prior estimates or for other reasons. If the internal systems and tools, processes, or surveys we use to track these metrics under count or over count performance or contain algorithmic or other technical errors, the data we report may not be accurate. While these numbers are based on what we believe to be reasonable estimates of our metrics, there are inherent challenges in measuring this data. In addition, limitations or errors with respect to how we measure data or with respect to the data that we measure or obtain from third parties may affect our understanding of certain details of our business or our opportunity, which could affect our long-term strategies. If our operating metrics are not accurate, or if investors do not perceive them to be accurate, investors may lose confidence in our operating metrics and business, and we expect that we could be subject to legal claims, and our business, reputation, financial condition, and results of operations would be adversely affected.

Previous wording

Like all online services, we are vulnerable to power outages, telecommunications failures, and catastrophic events, as well as computer viruses, break-ins, intentional or accidental actions or inaction by employees or others with authorized access to our networks, phishing attacks, denial-of-service attacks, malicious or destructive code, malware, ransomware attacks, and other cyber attacks, breaches and security incidents. We regularly experience cyber-related events that may result in technology disruptions and/or security breaches, including intentional, inadvertent, or social engineering breaches occurring through Etsy or third-party service provider technical issues, vulnerabilities, or employees. Any of these occurrences could lead to interruptions or shutdowns of one or more of our platforms, loss of data, unauthorized disclosure of personal or financial information of our members or employees, or theft of our intellectual property or user data. Furthermore, if our employees or employees of our third-party service providers fail to comply with our internal security policies and practices, member or employee data may be improperly accessed, used, or disclosed. Additionally, employees or service providers have and may inadvertently misconfigure resources or misdirect certain communications in manners that may lead to security incidents, which could be expensive and time-consuming to correct. As we continue to grow our business, expand internationally, and gain greater public visibility, we may continue to face a higher risk of being targeted by cyber attacks.

Current wording

Like all online services, we are vulnerable to power outages, telecommunications failures, and catastrophic events, as well as computer viruses, break-ins, intentional or accidental actions or inaction by employees or others with authorized access to our networks, phishing attacks, denial-of-service attacks, malicious or destructive code, malware, ransomware or other extortion attacks, and other cyber attacks, breaches and security incidents. We regularly experience cyber-related events that may result in technology disruptions and/or security breaches, including intentional, inadvertent, or social engineering breaches occurring through Etsy or third-party service provider technical issues, vulnerabilities, or employees. Any of these occurrences could lead to interruptions or shutdowns of one or more of our platforms, loss of data, unauthorized disclosure of personal or financial information of our members or employees, or theft of our intellectual property or user data. Furthermore, if our employees, contractors, or third-party service providers fail to comply with our internal security policies and practices, member or employee data may be improperly accessed, used, or disclosed. Additionally, employees, contractors, or service providers have and may inadvertently misconfigure resources or misdirect certain communications in manners that may lead to security incidents, which could be expensive and time-consuming to correct. As we strive to reignite growth in our business, expand internationally, and gain greater public visibility, we may continue to face a higher risk of being targeted by cyber attacks.

Previous wording

Although we have integrated a variety of processes, technologies, and controls to assist in our efforts to assess, identify, and manage material cybersecurity-related risks, these are not exhaustive, and we cannot assure that they will be adequate to prevent or detect service interruption, system failure, data loss or theft, or other material adverse consequences, directly or through our vendors. Additionally, these measures have not always been in the past, and in the future may not be, sufficient to prevent or detect a cyber attack, system failure, or security breach particularly given the increasingly sophisticated tools and methods used by hackers, state actors, organized cyber criminals, and cyber terrorists. The costs and effort to respond to a security breach and/or to mitigate any security vulnerabilities that may be identified could be significant, our efforts to address these problems may not be successful, and these problems could result in unexpected interruptions, delays, cessation of service, negative publicity, and other harm to our business and our competitive position. We could be required to fundamentally change our business activities and practices in response to a security breach or related regulatory actions or litigation, which would have an adverse effect on our business.

Current wording

Although we have integrated a variety of processes, technologies, and controls to assist in our efforts to assess, identify, and manage material cybersecurity-related risks, these are not exhaustive, and we cannot assure that they will be adequate to prevent or detect service interruption, system failure, data loss or theft, or other material adverse consequences, directly or through our vendors. Additionally, these measures have not always been in the past, and in the future may not be, sufficient to prevent or detect a cyber attack, system failure, or security breach particularly given the increasingly sophisticated tools and methods used by hackers, state actors, organized cyber criminals, and cyber terrorists. The costs and effort to respond to a security breach and/or to mitigate any security vulnerabilities that may be identified could be significant, our efforts to address these problems may not be successful, and these problems could result in unexpected interruptions, delays, cessation of service, negative publicity, negative seller or buyer sentiment, and other harm to our business and our competitive position. We could be required to fundamentally change our business activities and practices in response to a security breach or related regulatory actions or litigation, which would have an adverse effect on our business.

Previous wording

In addition, the industry has generally moved to online remote infrastructure for core work and, as a result, we and our partners may be more vulnerable to cyber attacks. If a natural disaster, power outage, connectivity issue, or other event that impacted our employees’ ability to work remotely were to occur, it may be difficult or, in certain cases, impossible, for us to operate our business for a substantial period of time. The increase in remote working for employees, vendors, or contractors may also result in increased consumer privacy, IT security, and fraud concerns or increased administrative costs.

Current wording

In addition, the industry has generally moved to online remote infrastructure for core work and, as a result, we and our partners may be more vulnerable to cyber attacks. If a natural disaster, power outage, connectivity issue, or other event that impacted our employees’ ability to work remotely were to occur, it may be difficult or, in certain cases, impossible, for us to operate our business for a substantial period of time. The prevalence of remote working for employees, vendors, or contractors may also result in increased consumer privacy, IT security, and fraud concerns or increased administrative costs.

Previous wording

A successful cyber attack could occur and persist for an extended period of time before being detected. Because the techniques used by hackers change frequently, we may be unable to anticipate these techniques or implement adequate preventive measures. In addition, because any investigation of a cybersecurity incident would be inherently unpredictable, the extent of a particular cybersecurity incident and the path of investigating the incident may not be immediately clear. It may take a significant amount of time before an investigation can be completed and full and reliable information about the incident is known. While an investigation is ongoing, we may not necessarily know the extent of the harm or how best to remediate it, certain errors or actions could be repeated or compounded before they are discovered and remediated, and communication to the public, regulators, members of our communities, and other stakeholders may be inaccurate or incomplete, any or all of which could further increase the costs and consequences of a cybersecurity incident. Applicable rules regarding how to respond, required notices to users, and reporting to regulators and investors vary by jurisdiction, and may subject Etsy to additional liability and reputational harm.

Current wording

A successful cyber attack could occur and persist for an extended period of time before being detected. Because the techniques used by hackers change frequently, we may be unable to anticipate these techniques or implement adequate preventive measures. In addition, because any investigation of a cybersecurity incident would be inherently unpredictable, the extent of a particular cybersecurity incident and the path of investigating the incident may not be immediately clear. It may take a significant amount of time before an investigation can be completed and full and reliable information about the incident is known. While an investigation is ongoing, we may not necessarily know the extent of the harm or how best to remediate it, certain errors or actions could be repeated or compounded before they are discovered and remediated, and communication to the public, regulators, members of our communities, and other stakeholders may be inaccurate or incomplete, any or all of which could further increase the costs and consequences of a cybersecurity incident. Applicable rules regarding how to respond, required notices to users, and reporting to regulators and investors vary by jurisdiction, and may subject us to additional liability and reputational harm.

Previous wording

If we experience, or are perceived to experience, security breaches that result in marketplace performance or availability problems or the loss, compromise or unauthorized disclosure of personal data or other sensitive information, or if we fail to respond appropriately to any security breaches that we may experience, or are perceived to do so, people may become unwilling to provide us the information necessary to set up an account with us. Existing sellers and buyers may also stop listing new items for sale, decrease their purchases, or close their accounts altogether. We could also face damage to our reputation, potential liability, regulatory investigations in multiple jurisdictions, and costly remediation efforts and litigation, which may not be adequately covered by, and which may impact our future access to, insurance. Any of these results could harm our growth prospects, our business, and our reputation for maintaining trusted marketplaces.

Current wording

If we experience, or are perceived to experience, security breaches that result in marketplace performance or availability problems or the loss, compromise or unauthorized disclosure of personal data or other sensitive information, or if we fail to respond appropriately to any security breaches that we may experience, or are perceived to do so, people may become unwilling to provide us the information necessary to set up an account with us to become a new seller or buyer. Existing sellers and buyers may also stop listing new items for sale, decrease their purchases, or close their accounts altogether. We could also face damage to our reputation, potential liability, regulatory investigations in multiple jurisdictions, and costly remediation efforts and litigation, which may not be adequately covered by, and which may impact our future access to, insurance. Any of these results could harm our growth prospects, our business, and our reputation for maintaining trusted marketplaces.

Previous wording

The software underlying our platforms is highly interconnected and complex and may contain undetected errors or vulnerabilities, some of which may only be discovered after the code has been released. We rely heavily on a software engineering practice known as “continuous deployment,” meaning that we frequently release software code to our platforms. For the Etsy marketplace platform we typically release software code many times per day. This practice may result in the more frequent introduction of errors or vulnerabilities into the software underlying our platforms, which can impact the user experience and functionality of our marketplaces. Additionally, due to the interconnected nature of the software underlying our platforms, updates to parts of our code, third-party and open source code, and application programming interfaces, on which we rely and that maintain the functionality of our marketplaces and business, could have an unintended impact on other sections of our code, which may result in errors or vulnerabilities to our platforms that negatively impact the user experience, functionality or accessibility of our marketplaces. In some cases, such as our mobile apps, errors may only be correctable through updates distributed through slower, third-party mechanisms, such as app stores, and may need to comply with third-party policies and procedures to be made available, which may add additional delays due to app review and user delay in updating their mobile apps. In addition, our systems are increasingly reliant on artificial intelligence, machine learning systems, and large language models, which are complex, subject to increasing litigation and regulatory scrutiny, and may have errors or inadequacies that are not easily detectable. These systems may inadvertently reduce our efficiency, or may cause unintentional or unexpected outputs that are incorrect, do not match our business goals, do not comply with our policies or applicable legal requirements, or otherwise are inconsistent with our brands, guiding principles, and mission. Any errors or vulnerabilities discovered in our code after release could also result in damage to our reputation, loss of members of our communities, loss of revenue, or liability for damages, any of which could adversely affect our growth prospects and our business.

Current wording

The software underlying our platforms is highly interconnected and complex. It contains vulnerabilities and may contain undetected errors that may only be discovered after the code has been released. We rely heavily on a software engineering practice known as “continuous deployment,” meaning that we frequently release software code to our platforms. For the Etsy marketplace platform we typically release software code many times per day. This practice may result in the more frequent introduction of errors or vulnerabilities into the software underlying our platforms, which can impact the user experience and functionality of our marketplaces. Additionally, due to the interconnected nature of the software underlying our platforms, updates to parts of our code, third-party and open source code, and application programming interfaces, on which we rely and that maintain the functionality of our marketplaces and business, could have an unintended impact on other sections of our code, which may result in errors or vulnerabilities to our platforms that negatively impact the user experience, functionality or accessibility of our marketplaces. In some cases, such as our mobile apps, errors may only be correctable through updates distributed through slower, third-party mechanisms, such as app stores, and may need to comply with third-party policies and procedures to be made available, which may add additional delays due to app review and user delay in updating their mobile apps. In addition, our systems are increasingly reliant on artificial intelligence, machine learning systems, and large language models, which are complex, subject to increasing litigation and regulatory scrutiny, and may have errors or inadequacies that are not easily detectable. In some instances, we may make use of third-party artificial intelligence models, including foundational models, that have been pre-trained on data which may be insufficient, erroneous, stale, contain biased information, or infringe intellectual property or other rights. These models may inadvertently reduce our efficiency, or may cause unintentional or unexpected outputs that are incorrect, do not match our business goals, do not comply with our policies or applicable legal requirements, including the E.U. Artificial Intelligence Act and similar U.S. state and international regulations, or otherwise are inconsistent with our brands, guiding principles, and mission. Any errors or vulnerabilities discovered in our code after release could also result in damage to our reputation, loss of members of our communities, loss of revenue, or liability for damages, any of which could adversely affect our growth prospects and our business.

Previous wording

Google Cloud provides a distributed computing infrastructure as a service platform for the Etsy marketplace’s business operations. We have migrated the Etsy marketplace’s primary production environment and data centers to Google Cloud, increasing our reliance on cloud infrastructure. Any transition of the cloud services currently provided by Google Cloud to another cloud provider would be difficult to implement and would cause us to incur significant time and expense. Our products and services rely in significant part on continued access to, and the continued stability, reliability, and flexibility of Google Cloud. Any significant disruption of, or interference with, our use of Google Cloud would negatively impact our operations, and our business would be seriously harmed. In addition, if hosting costs increase over time and if we require more computing or storage capacity, our costs could increase disproportionately. If we are unable to grow our revenues faster than the cost of utilizing the services of Google or similar providers, our business and financial condition could be adversely affected. Reverb and Depop rely on Amazon Web Services for their primary production environment, and those marketplaces are thus subject to analogous risks.

Current wording

Google Cloud provides a distributed computing infrastructure as a service platform for the Etsy marketplace’s business operations. Our products and services rely in significant part on continued access to, and the continued stability, reliability, and flexibility of Google Cloud. Any significant disruption of, or interference with, our use of Google Cloud would negatively impact our operations, and our business would be seriously harmed. In addition, if hosting costs increase over time, and if we require more computing or storage capacity, our costs could increase disproportionately. If we are unable to grow our revenues faster than the cost of utilizing the services of Google or similar providers, our business and financial condition could be adversely affected. Further, any transition of the cloud services currently provided by Google Cloud to another cloud provider would be difficult to implement and would cause us to incur significant time and expense. Reverb and Depop rely on Amazon Web Services for their primary production environment, and those marketplaces are thus subject to analogous risks.

Previous wording

Our business depends on third-party services and technology which we utilize to maintain and scale the technology underlying our platforms and our business operations.

Current wording

Our business depends on third-party services and technology that we utilize to maintain and scale the technology underlying our platforms and our business operations.

Previous wording

In addition, our sellers rely on continued and unimpeded access to postal services and shipping carriers to deliver their goods reliably and timely to buyers. Our sellers have at times experienced transportation service disruptions and delays in the delivery of their goods. If these shipping delays continue or worsen, or if shipping rates increase significantly, our sellers may have increased costs, and/or our buyers may have a poor purchasing experience and may lose trust in our marketplaces, which could negatively impact our business, financial performance, and growth.

Current wording

In addition, our sellers rely on continued and unimpeded access to postal services and shipping carriers to deliver their goods reliably and timely to buyers. Our sellers have at times experienced transportation service disruptions and delays in the delivery of their goods. If these shipping delays continue or worsen, or if shipping rates increase significantly, our sellers may have increased costs, and/or our buyers may have a poor purchasing experience and may lose trust in our marketplaces, which could negatively impact our business, financial performance, and growth prospects.

Previous wording

Any of these events could materially and adversely affect our business, financial performance, and growth.

Current wording

Any of these events could materially and adversely affect our business, financial performance, and growth prospects.

Previous wording

The payment offerings provided on each of our marketplaces differ and, as such, are subject to varying degrees and types of risk. In particular, each payment offering has a different level of reliance on third-parties to perform certain aspects of its services. We have and plan to continue to invest in our payments tools and infrastructure, and have, or may in the future, add or change payment tools and third-party service providers to maintain existing availability, expand into additional markets, and offer new payment methods, offerings, and tools to our buyers and sellers. If we fail to invest adequate resources into our payments platforms, or if our investment efforts are unsuccessful or unreliable, our payments services may not function properly, keep pace with competitive offerings, or comply with applicable laws and regulatory requirements, any of which could negatively impact their usage and our marketplaces, as well as our trusted brands, which, in turn, could adversely affect our GMS and results of operations.

Current wording

The payment offerings provided on each of our marketplaces differ and, as such, are subject to varying degrees and types of risk. In particular, each payment offering has a different level of reliance on third parties to perform certain aspects of its services. We have invested, and plan to continue to invest, in our payments tools and infrastructure, and have, or may in the future, add or change payment tools and third-party service providers to maintain existing availability, expand into additional markets, and offer new payment methods, offerings, and tools to our buyers and sellers. If we fail to invest adequate resources into our payments platforms, or if our investment efforts are unsuccessful or unreliable, our payments services may not function properly, keep pace with competitive offerings, or comply with applicable laws and regulatory requirements, any of which could negatively impact their usage and our marketplaces, as well as our trusted brands, which, in turn, could adversely affect our GMS and results of operations.

Previous wording

We rely upon third-party service providers to perform key components of our payments platforms, including payments processing and payments disbursing, compliance, currency exchange, identity verification, sanctions screening, tax collection, and fraud analysis. Failure by these service providers to perform adequately, or changes to or termination of our relationships with these service providers, has and could again negatively affect our sellers’ ability to receive payments. For example, in the first quarter of 2023, Silicon Valley Bank, one of our payment disbursement providers, collapsed and, as a result, approximately 0.5% of our active sellers experienced a delay (generally one business day) receiving their payments while we engineered a new process flow to enable those sellers to receive payments from another disbursement account.

Current wording

We rely upon third-party service providers to perform key functions for our payments platforms, including payments processing and payments disbursing, compliance, currency exchange, identity verification, sanctions screening, tax collection, and fraud analysis. Failure of these service providers to perform adequately, or changes to or termination of our relationships with these service providers, has and could again negatively affect our sellers’ ability to receive payments. For example, in the first quarter of 2023, Silicon Valley Bank, one of our payment disbursement providers, collapsed and, as a result, approximately 0.5% of our active sellers experienced a delay (generally one business day) receiving their payments while we engineered a new process flow to enable those sellers to receive payments from another disbursement account.

Previous wording

In addition, we and our third-party service providers may experience service outages from time to time that negatively impact payments on our platforms. We have in the past experienced, and may in the future experience, such payments-related service outages and, if we are unable to promptly remedy or provide an alternative payment solution, our business could be harmed. In addition, if our third-party providers increase the fees they charge us, our operating expenses, or those of our sellers, could increase, and it could negatively impact our sellers’ businesses or our business.

Current wording

In addition, we and our third-party service providers may experience service outages from time to time that negatively impact payments on our platforms. We have in the past experienced, and may in the future experience, such payments-related service outages and, if we are unable to promptly remedy or provide an alternative payment solution, our business could be harmed. In addition, if our third-party providers increase the fees they charge us, our operating expenses, or those of our sellers, could increase, and it could negatively impact our sellers’ businesses and/or our business.

Previous wording

Various laws and regulations govern payments, and these laws are complex, evolving, and subject to change and vary across different jurisdictions in the United States and globally. Moreover, even in regions where such laws have been harmonized, regulatory interpretations of such laws may differ. As a result, we are required to spend significant time and effort determining whether various licensing and registration laws relating to payments apply to us as our business strategy and operations evolve. In addition, our payments activities and/or applicable laws and regulations may evolve over time to require licensure in one or more of our core regions. Should one of our subsidiaries become licensed as a financial services provider in any jurisdiction, we would be subject to additional regulation and oversight of that subsidiary. Any failure or claim of our failure to comply, or any failure by our third-party service providers to comply, could cost us substantial resources, result in liabilities, cause us significant reputational damage, or force us to stop offering our payments services in certain markets. Additionally, changes in payment regulation may occur that could render our payments systems non-compliant and/or less profitable.

Current wording

Various laws and regulations govern payments, and these laws are complex, evolving, and subject to change and vary across different jurisdictions in the United States and globally. Moreover, even in regions where such laws have been harmonized, regulatory interpretations of such laws may differ. As a result, we are required to spend significant time and effort determining whether various licensing and registration laws relating to payments apply to us as our business strategy and operations evolve. In addition, our payments activities and/or applicable laws and regulations have evolved and may continue to evolve. For example, to meet emerging regulatory requirements, among other reasons, our subsidiary, Etsy Payments Ireland Limited, received authorization from the Central Bank of Ireland to operate as a regulated payments institution to handle payments for sellers located in the European Economic Area. We also have applied, and may in the future apply, for registration/licensure as a payments service provider in additional jurisdictions. Each authorization as a regulated entity subjects us to additional regulation and oversight. If any of our subsidiaries become licensed as a financial services provider in any additional jurisdictions, we would be subject to additional regulation and oversight of that subsidiary. Any failure or claim of our failure to comply, or any failure by our third-party service providers to comply, could cost us substantial resources, result in liabilities, cause us significant reputational damage, or force us to stop offering our payments services in certain markets. Additionally, changes in payment regulation may occur that could render our payments systems non-compliant and/or less profitable.

Previous wording

•complying with different (and sometimes conflicting) laws and regulatory standards (particularly including those related to the use and disclosure of personal information, online payments and money transmission, intellectual property, product liability, consumer protection, online platform liability, e-commerce marketplace regulation, labor and employment laws, business practices, including those related to corporate social responsibility, and taxation of income, goods, and services) sometimes with attempts to apply these laws and regulatory standards extra-territorially;

Current wording

•complying with different (and sometimes conflicting) laws and regulatory standards (particularly including those related to the use and disclosure of personal information, online payments and money transmission, intellectual property, product safety and liability, consumer protection, online platform liability, minors’ online safety, e-commerce marketplace regulation, artificial intelligence, labor and employment laws, business practices, including those related to corporate social responsibility and sustainability, and taxation of income, goods, and services), including attempts to apply these laws and regulatory standards extra-territorially;

Previous wording

•defending our marketplaces against international litigation, including in jurisdictions that may not offer judicial norms or protections similar to those found in the United States;

Current wording

•defending our marketplaces against international litigation and regulatory matters, including in jurisdictions that may not offer judicial norms or protections similar to those found in the United States;

Previous wording

•our ability to enforce contracts, our terms of use and policies, and intellectual property rights in jurisdictions outside the United States;

Current wording

•limitations on our ability to enforce contracts, our terms of use and policies, and intellectual property rights in jurisdictions outside the United States;

Previous wording

•uncertainties and instability in U.K. and E.U. markets caused by ongoing negotiations of cross-border service agreements triggered by Brexit.

Current wording

•uncertainties and instability in U.K. and E.U. markets caused by the patchwork of cross-border service agreements triggered by Brexit.

Showing the first 40 of 106 pairs. Open the source sections for the rest.

Rearranged previous paragraphs (4)

Previous report — wording carried elsewhere

•evolving expectations regarding the ability to work remotely;

Previous report — wording carried elsewhere

If our “House of Brands” strategy is unsuccessful, or we fail to realize the expected benefits of our acquisitions, our business, growth and/or results of operations could be adversely affected.

Previous report — wording carried elsewhere

December 31, 2023, we cannot assure you that we or our independent registered public accounting firm will not identify a material weakness in our internal controls in the future.

Previous report — wording carried elsewhere

•the amount and timing of our operating expenses and the success of any cost-savings actions we take, including the reduction in force as part of the Restructuring Plan approved in December 2023;