Privacy

We send you a push notification when a product comes back in stock. To do that we need an email address, a password, and your browser's push subscription. We don't collect anything beyond that. We run Google Analytics for aggregate traffic counts (which page is popular, where visitors land first) and we don't share anything with advertisers.

Reach us any time at support@restocktracker.io.

What we collect

Sign-in. When you create an account we store your email address and a hashed version of your password. We never see or store the plain text. A session cookie keeps you signed in.

Push notifications. When you tap "Notify me" your browser hands us a push subscription: an opaque endpoint URL and two cryptographic keys. That's what we send notifications to.

Alerts & comments. When you subscribe to a product or post a comment, we save the action, a reference to your account, and the time. You can have any of it deleted on request.

Server logs. Our servers log request data (IP, user agent, URL, response code) for security and debugging. We don't profile you with it.

Cookies & local storage

Strictly functional, all first-party:

• A session cookie that keeps you signed in.
• Local-storage entries for your theme choice and country toggle.

Google Analytics for aggregate traffic counts is the only third-party telemetry we run. No advertising cookies, no behavioural tracking. If we ever add anything that needs consent, a banner comes with it.

Who we share data with

We use a small number of vendors strictly to keep the service running:

• A content delivery network serves the public site and handles bot mitigation.
• A cloud hosting provider runs the backend API and database.
• A transactional email provider sends account emails (verification, password reset).
• Your browser's push service (Google FCM for Chromium browsers, Apple APNs for Safari, Mozilla autopush for Firefox) carries the actual notification to your device. Payloads are encrypted to keys your browser generated, so the relay can't read the body.
• Google and Apple, only if you choose "Continue with Google" or "Continue with Apple". We receive your email and a stable user ID from them so we can sign you in.

We don't sell or share data for cross-context behavioural advertising. We use Google Analytics for aggregate site traffic; we don't use Meta Pixel, conversion pixels, or any other ad SDK. Some of the providers above process data outside the EU/UK; those transfers rely on Standard Contractual Clauses where required. We'll share the current list of sub-processors on request. Email support@restocktracker.io.

Your rights

Email support@restocktracker.io any time to:

• Get a copy of everything we have on you.
• Delete your account and the data tied to it.
• Correct anything that's wrong.
• Withdraw consent for push notifications (you can also do this from your browser's site settings).

We aim to reply within a week; the legal ceiling is 30 days. EU/UK visitors also have the right to lodge a complaint with their data-protection authority. We'd appreciate it if you contact us first.

Age

Restock Tracker isn't intended for children under 13.

Changes

If we change what we collect or who we share it with, we'll update this page and bump the date at the top. If you have an account, we'll email you before the change takes effect.