Privacy

What we collect

• Waitlist: your email address and the times you signed up, confirmed and were sent the launch announcement.
• Beta app: a session cookie and a settings cookie that remember your preferences.
• Beta app: the ZIP code and distance you choose in Settings. They are saved on our server in your session record (linked to your browser by a session cookie, expiring 2 weeks after you last save your settings), used only to show in-store prices from nearby stores, and never logged. Clear the ZIP code in Settings to remove it.
• No analytics, no ads and no tracking pixels.

Feedback

• The feedback form on the beta app stores what you send: the type, your message, a store name and website for store requests, the product you reported (if any) and, only if you give it, an email address for a reply. We do not store your IP address; it is used only, in hashed form, to limit how many messages one visitor can send per hour.
• Your reply email is deleted when we close or reject your item, and in any case 90 days after you sent it.
• Nothing is published without our review. Approved bug reports, ideas and other feedback may be posted publicly as issues on our GitHub repository (your message text, with email addresses and links made inert), and approved store requests as a public request count for that store. Your email address is never posted. Reports of a wrong price or size stay private.

Why

To confirm your signup and to send you one launch email, and to read and act on feedback you send (including replying if you asked us to). Nothing else.

Who handles it

• DigitalOcean (New York): hosting.
• Cloudflare: network, security and access control for the beta.
• Resend: email delivery.
• GitHub: public issues for approved feedback (never your email address).
• Database backups: nightly dumps kept on our server (newest 7) and DigitalOcean's daily server backups (kept 7 days); off-site Cloudflare R2 copies kept 30 days once enabled.

Cookies

• csrftoken: on forms only, to protect them from forgery.
• Cloudflare security cookies.
• Beta app: CF_Authorization and sessionid.

How long

• Unconfirmed signups are deleted after 7 days.
• Confirmed signups are kept until you unsubscribe or we close the waitlist.
• Feedback reply emails: deleted when the item is closed or rejected, or after 90 days. The rest of a feedback item is kept until we delete it.
• Backups age out as described above.
• Server logs hold no IP addresses.

Your choices

Use the unsubscribe link in any email we send, which deletes your address. Or email [email protected] to see or delete your data.

Changes

Last updated: 2026-11-08