Privacy Policy

1. What we collect

• Account your email address (to create your account and send the alerts you ask for).
• Usage which deals and pages you view, searches you save, and unlocks you perform — to run the service, prevent abuse, and improve it.
• Technical IP address and basic device/browser info, briefly, for security and rate-limiting.

We do not collect payment card details — if you ever subscribe, our merchant of record (Paddle) handles payment data; we never see your card.

Feedback contains the message you choose to send, your optional reply email, and page/listing context. A draft may be saved on this browser for up to seven days until you send it successfully or choose “Clear draft”. The form confirms receipt only after the message is stored in our feedback database and a private Cloudflare backup. Retries use a submission reference to avoid duplicate messages. This reference is not a visitor identifier used by analytics.

2. Why (legal bases)

To provide the service and your account (contract); to send alerts you requested (consent, withdrawable any time); to keep the service secure and prevent abuse (legitimate interest). We use privacy-friendly, cookieless analytics where possible.

Our first-party usage counters record page categories and actions such as opening listing details, requesting a source link, clicking the available source link, and successfully saving a search. They do not include search text, email addresses, account identifiers, source-link tokens, or visitor IP addresses. The hosting provider processes network request information separately for delivery and security.

Return-visit measurement is optional. After you choose “Allow”, this browser stores only its first measured visit date and most recent measured visit date. No persistent visitor identifier is created or sent. A visible page and a user interaction are required before a visit is counted. The date record avoids counting repeat visits within the same UTC day, with cross-tab coordination where supported. This is an approximate browser measurement, not proof of a unique person. Automated browsers and recognized crawler user agents are excluded where detectable.

You can use “Analytics preferences” in the footer to decline or withdraw. Declining clears the local visit dates and stops our product analytics. Do Not Track and Global Privacy Control also disable these analytics. The preference expires after 180 days; old visit-date records are reset on a subsequent visit after their 90-day measurement window. Clearing browser storage also removes these settings.

3. Who processes it

Trusted processors under data-processing agreements: Cloudflare (hosting/CDN/security), Supabase (accounts/database, EU region), Resend (transactional email), and — only if you subscribe — Paddle (payments). We host in the EU. We do not sell or rent your data to anyone.

4. Seller / listing data

Listings come from public third-party marketplaces. We minimise personal data from listings, do not build profiles of sellers, and strip seller contact details from our public pages. Rights-holders can request removal via our takedown page.

5. Your rights (GDPR)

You can access, correct, export or delete your data, withdraw consent, or object to processing — from your account settings or by emailing us. We respond within one month. You may also complain to your national data-protection authority.

6. Retention

We keep account data while your account is active. Delete your account and we erase your personal data (some minimal security logs may persist briefly). Alert emails stop the moment you unsubscribe.

Anonymous product-event aggregates are stored in Cloudflare Workers Analytics Engine for up to three months. They are not copied into an ever-growing database on our application server. Return-rate reports show an unavailable result until a measured group has actually reached day 7 or day 30.

7. Contact

Data questions or requests: [email protected]. Operator details: Impressum.