Privacy
We collect as little as possible. For price alerts we store your email address and your target price, and we use them for exactly one thing: sending you that alert. Every alert email carries a link that deletes it, and your data with it. We count visits with Cloudflare Web Analytics, which works without cookies and does not identify you. Like any website host, Cloudflare receives the technical data of each request, such as your IP address, but does not use it to recognise you.
When you click through to a shop, that shop or its affiliate network may set cookies to attribute the purchase to us. Check that shop's privacy policy for the details. With each click to a shop we store a pseudonymous code made from your IP address and browser, which changes every day. It doesn't contain your IP address, we don't use it to identify you, and no cookie is involved. We remove it after about a day. It lets us count a double click once and keep scripts out of our figures. The legal basis is our legitimate interest in counting clicks correctly; if you object to it, get in touch.
If you have an account
When you log in, we keep your email address (and your name if Google shares it), your last 50 searches, the products you save or view and your price alerts. We use them to show your profile and deliver your alerts. The legal basis is our agreement with you: your account works with this data. On your profile you can delete your account, and then it is all gone right away. Want a copy of your data? Get in touch and we'll send it.
Part of this also sits in Brevo, the system we email from: your email address, your first name if Google shares it, your language, how many price alerts you have, and when you signed up, set an alert or got one. That shows us whether Supzie helps people, for example how many set an alert. The legal basis is our legitimate interest in making Supzie better. News and price tips by email only come if you say yes to them yourself. For that, your consent is the legal basis. Switch it off with the unsubscribe link in those emails.
Who else handles your data
Google Analytics: Google Ireland Ltd (Dublin) and Google LLC (US). Only if you allow statistics cookies, we use it to count visits: which pages, how you found us and where you click through to a shop. If you also allow marketing cookies, Google may use the data for advertising too: to measure which ads work and to show you ads that fit you. If you're signed in to Google, Google can link this to your Google account. The legal basis is your consent; withdraw it with 'Change your choice' at the bottom of every page. Data may end up in the US; Google is certified under the EU-US Data Privacy Framework. Google Analytics keeps it for 14 months. How Google uses this data.
Cookiebot: Usercentrics A/S (Copenhagen, Denmark). Shows the cookie notice and keeps your choice as proof: a random consent ID, the date and time, your choice, your browser, the page where you chose and your IP address with the last part removed. Cookiebot's terms.
Firebase Authentication: Google Ireland Ltd (Dublin) and Google LLC (US). Handles logging in with Google or with a code by email, and processes your email address and, when you log in with Google, your name. We load Google's sign-in window only if you choose to log in with Google. Data may end up in the US; Google is certified under the EU-US Data Privacy Framework. When you delete your account, we delete your Firebase account too. Privacy at Firebase.
When you ask for a login code, we keep your email address and an irreversible derivative of your IP address for 24 hours. That stops anyone from having endless codes sent. We never store the code itself. After that, everything is deleted automatically. The legal basis is our legitimate interest in keeping logins safe.
Brevo: Sendinblue SAS (Paris, France). Sends our emails, such as price alerts, and keeps our customer records. It notes whether you opened an email from us or clicked a link in it. When you delete your account, we delete your record at Brevo too. Privacy at Brevo.
Questions about your data? Get in touch and we'll sort it out.