Legal

Privacy notice

Last updated 2026-07-01

Template — requires professional review

This notice is a development template written to describe what the software actually does. It has not been reviewed by a qualified data protection adviser and must be before any production launch. See docs/PRODUCTION_CHECKLIST.md.

The short version

We never take a payment, so we have no reason to hold payment details, a delivery address or your name. If you create an account we hold your email address, the products you chose to track and the alerts you asked for. That is the complete list.

What we collect

Data	Why	Basis
Email address	To sign you in and send the alerts you created	Performing the service you requested
Watchlist and alerts	To track prices on your behalf	Performing the service you requested
Alert delivery history	So you can see why you were or were not notified	Legitimate interest in a functioning service
Session cookie	To keep you signed in	Strictly necessary
Outbound click counts	To understand which comparisons are useful, and for affiliate reconciliation	Legitimate interest

What we deliberately do not collect

Your name, postal address or telephone number.
Any payment or card details — we never process a transaction.
Your IP address in any stored record. Rate limiting uses a salted hash held only in memory.
A browser fingerprint, or any cross-site tracking identifier.
What you searched for. Search terms are not attached to any stored record.

When you click through to a dealer we record the product, the dealer, whether the link was affiliated and a coarse device type (mobile or desktop). We do not attach your account or your IP address to that record.

Analytics

Analytics is disabled by default and loads nothing until you give explicit consent. If you decline, no analytics script is requested at all — we do not load it and then ask afterwards. You can change your choice at any time on our cookies page.

Email

Price alerts are service messages about the specific alerts you created. They are separate from marketing, which is off unless you turn it on and is never pre-ticked. Every alert email carries an unsubscribe link, and you can turn alerts off entirely in your account without deleting them.

How long we keep it

Data	Retention
Account and watchlist	Until you delete your account
Alert delivery history	12 months, then deleted
Sign-in tokens	Expire within minutes; purged after 24 hours
Sessions	Expire after 30 days of inactivity
Outbound click records	24 months (aggregate reporting and affiliate reconciliation)

Your rights

You can access, correct, export or delete your data. Deletion is self-service and immediate: the button in your account permanently removes your account, watchlist, alerts and alert history. It is a hard delete, not a flag.

For anything else, contact us. You also have the right to complain to the Information Commissioner’s Office.

Sharing

We do not sell your data and we do not share it with dealers. Our email provider processes your address in order to deliver the alerts you asked for, and our hosting and database providers necessarily store the data described above.