Privacy Policy
Draft: this document describes how the service actually handles data today. It will be reviewed by legal counsel before launch.
What we collect
Your email address and name, a password hash (never the password itself), the pages you ask us to watch and the prices and stock we observe on them, and a security log of sign-ins and account changes including IP address and browser.
How we use it
Only to run the service: checking pages, sending the alerts you configured, securing your account and billing. We do not sell or rent personal data.
Cookies and analytics
We use one essential cookie to keep you signed in. Site analytics use Plausible, which sets no cookies. Google Analytics is only loaded if you allow it in the cookie banner.
Service providers
Payments are processed by PayPal. Emails are delivered through our email provider. If you connect Telegram, Slack, Discord or a webhook, alert contents are sent there.
Security
Passwords are hashed with Argon2id, sessions and one-time links are stored only as hashes, and secrets such as two-factor keys and webhook URLs are encrypted at rest.
Retention
Security logs and alerts are kept for about 13 months and price history for up to about 2 years. Everything is deleted when you delete your account.
Your rights
You can download your data or delete your account at any time in Settings → Privacy & data.
Contact
Contact details will be added before launch.