Privacy in this preview

Last updated 21 October 2026.

Saved on your browser

Your selected country, saved offers, saved drops and tracked radar products are stored in your browser’s local storage. They stay on that browser and aren’t sent to an account. Clear site data in your browser settings to remove them. Private browsing or storage restrictions may stop them from persisting.

Requests and operational records

Cloudflare handles page and API requests; Supabase stores store observations; GitHub Actions runs the daily store check and tests. The application logs route categories, selected country, response status, duration and release revision. It doesn’t deliberately log your search text, saved lists, raw headers or IP address.

Cloudflare Web Analytics counts page views without cookies or identifiers. Cloudflare still processes network and security metadata to serve requests. Rate-limited actions, such as tracking a product, use your IP address only to choose a rate-limiter bucket. Provider retention and processing are separate from the application’s sanitised logs. The application never sends your IP address to stores.

Stock radar

Choosing Track stock adds that public product to a shared, capped Cloudflare monitor for up to 24 hours. It isn’t linked to an account or identity, and it uses your IP address only to choose a rate-limiter bucket. Shared product checks and change signals are publicly readable. Browser notifications are opt-in and need the radar page to stay open. The monitor keeps up to 100 recent signals for 24 hours. No Discord, email or closed-browser push delivery is enabled.

No account in this preview

The preview doesn’t ask for your name, email or payment details, and it has no advertising analytics or tracking cookies. When you open a store, that store’s own privacy practices apply.

Usage counts

To learn what people look for, the site counts things in aggregate: page views, taps on the Telegram button, searches (the words typed and whether anything was found), follows, and which product pages are opened. These are daily totals only. No cookies are set, no address or device identifier is stored, and nothing links a count to a person. If your browser sends a “Do Not Track” signal, nothing is counted at all. The totals are visible to anyone at /stats.

Email updates

If you give an email address to open the rest of a list, it is stored with your region, the date, and where on the site you entered it — nothing else. It is used for a welcome note and one Sunday email about that week’s drops, once sending starts. Every email carries a one-tap unsubscribe that deletes the address. Addresses are never sold or shared.

Telegram alerts

If you message the bot, it keeps your chat id, your country, your watch and mute words and your price cap, so it can send you alerts. Sending /stop deletes them. The bot never sees your phone number or name.

Retention and support

Each night a copy of the Telegram subscriber list and the email list is kept for 30 days as a private GitHub artifact, so they can be restored after a failure; /stop and unsubscribe remove you from the live lists at once, and the copies expire within 30 days. Public catalogue backups and operational reports are kept for 30 days as GitHub artifacts. Provider log retention depends on the active Cloudflare plan. A formal support contact and complete production privacy terms are still pending. Send feedback through the conversation where you received this preview, and don’t include sensitive personal information.