Your data, explained.
There are no advertising trackers and no analytics cookies here. One cookie keeps you signed in. Everything you record is yours to export or delete from your account page.
What we keep
| What | Why it exists |
|---|---|
| Your email address | Identifies the account and receives your sign-in codes. It is the only thing you have to give us. |
| Sign-in codes | Held hashed, usable once, and expired within minutes. We cannot read a code back out. |
| Session records | Keep you signed in between pages. They expire after 30 days. |
| Listings you record | The offers you save: title, source, condition, price, shipping and the link. |
| Price observations | What an offer cost each time you recorded it, so its history can be shown. |
| Monitor settings | What you follow, your target, and how many new monitors you started this month. |
| Alerts | Target hits and confirmed price drops, kept in your workspace until you clear them. |
| Sold references | Completed-sale records you import yourself, marked as user-reported. |
| Billing identifiers | Once you subscribe: Stripe customer and subscription ids, and the status. Card numbers stay with Stripe and never reach us. |
| Security records | Rate-limit counters that expire on their own. They exist to stop accounts being brute-forced. |
Why we keep it
Account and research data is processed to run the service you asked for. Billing records are kept to administer a subscription and to meet the obligations that come with taking money. Security records exist to protect accounts and stop abuse. Nothing here is used to build a profile of you or sold to anyone.
Who else sees it
| Company | What it does | What reaches it |
|---|---|---|
| Railway | Hosts the application and the database | Everything above, at rest |
| Cloudflare | Handles edge requests and TLS | Request metadata as your browser reaches the site |
| Stripe | Takes subscription payments | Your email and your card details, which you give Stripe directly |
| Resend | Delivers your sign-in codes | Your email address and the code, and nothing else |
When an automatic marketplace source is connected, your search terms go to that provider so it can answer. Your sign-in codes go nowhere but your own inbox.
Cookies
One cookie, and it is the session that keeps you signed in. Without it you would be signed out on every click. This release carries no advertising trackers and no marketing analytics. If that ever changes, the new categories appear in the consent panel and stay off until you turn them on.
Your controls
Export everything as one JSON file from your account page. Delete your account there too, once any subscription has ended. Billing records that accounting or a payment dispute requires may be kept separately from your research. Rate-limit counters expire by themselves, and sessions expire after 30 days.
Your rights
- Ask for a copy of what we hold, or have it corrected.
- Have it deleted, or ask us to restrict what we do with it.
- Take it elsewhere in a portable format.
- Object to processing where that right applies to you.
- Complain to your local data protection authority.
Write to help@saikobit.com and we will answer.