Privacy Policy
Last updated June 2026 · placeholder entity name pending owner's business registration
Short version: no accounts, no passwords, no third-party ad trackers. Email is collected only when you explicitly ask for something email-shaped, and analytics are first-party and anonymous.
What we collect
Email addresses — only when you set a price alert, save a build by email, or sign up for a deal digest. Every email use is double-opt-in: nothing sends until you click the verification link, and every email carries a one-click unsubscribe.
Saved builds — stored under unguessable share tokens. A build link is a capability: anyone holding the link can view it. Builds are not public, not listed, and not indexed by default.
First-party analytics — anonymous session ids (random, no cross-site tracking), event names like 'builder started' or 'build saved', and the page path. No third-party analytics scripts, no advertising pixels, no fingerprinting.
API logs — public API calls log a salted hash of the caller IP for rate-limit enforcement; the raw IP is not stored.
What we never collect
No passwords (there are no accounts). No payment data (purchases happen on retailer sites). No precise location. No data sales to anyone, ever.
Affiliate clicks
Outbound retailer clicks pass through our /go redirect, which records the offer clicked and the page type it came from. Retailers and affiliate networks have their own tracking once you arrive — their policies govern from there.
Deletion
Unsubscribing removes you from sends immediately. To fully delete your email identity and alerts, use the contact route on the corrections page; deletion is processed manually in v1.