Privacy Policy
How FindAlert collects, uses, and protects your data. Written in plain English where possible.
01Who we are
FindAlert ("we", "us", "our", or "the Service") is operated as an independent project by a sole developer ("the Operator"). FindAlert is a marketplace monitoring service that lets users search and receive alerts for items listed on third-party online marketplaces such as eBay, Reverb, Etsy, Discogs, Gumtree, and Marktplaats.
For privacy questions, contact: support@findalert.app
02Information we collect
2.1 Information you provide directly
| Data | Why we collect it |
|---|---|
| Email address | Account identification, login, sending you alerts and account emails |
| Password (hashed) | Authentication. We never store passwords in plain text. We use cryptographic hashing. |
| Search queries and watches | To run your monitoring jobs and deliver alerts |
| Home country preference | Default shipping destination for searches |
| Slack / Discord webhook URLs (optional) | Sending alerts to your chosen channel; only used for that purpose |
2.2 Information collected automatically
| Data | Purpose |
|---|---|
| Session cookies | Keeping you logged in. We do not use third-party advertising or analytics cookies. |
| IP address (transient) | Routing requests, abuse prevention. Not stored long-term. |
| User-agent string (transient) | Compatibility, abuse prevention. Not stored long-term. |
| Watch/hit/listing history | Operational records of monitoring jobs we ran for you |
2.3 Information from third parties
If you sign in with Google, we receive your email address, name, profile picture URL, and a Google account identifier. We do not receive your Google password or contacts.
03How we use your information
We use your data only to:
- Provide the Service: run searches, monitor watches, deliver alert emails
- Authenticate and secure your account (email verification, password reset)
- Improve reliability through error logs (logs are short-lived and not used for profiling)
- Comply with legal obligations
04Third-party services we rely on
FindAlert is built on top of several third-party services. Your data may be processed by these services as a necessary part of providing the Service:
| Provider | Purpose · what is shared |
|---|---|
| Cloudflare | Hosting, database, edge compute. Your account data and watches are stored on Cloudflare D1 and processed by Cloudflare Workers. |
| Resend | Email delivery. Your email address and the contents of alert emails are sent through Resend so we can deliver mail. |
| Google (OAuth) | Optional sign-in. Only invoked if you choose "Continue with Google". |
| eBay, Reverb, Etsy, Discogs, Gumtree, Marktplaats | We query their public APIs / pages with your search keywords to fetch listings. We do not share your email or any personal account data with these marketplaces. |
| Frankfurter API | Public exchange-rate data for the currency calculator. No personal data sent. |
| Slack / Discord (if you opt in) | If you provide a webhook URL, we POST alert messages to that URL. |
05Data retention
| Data category | Retention |
|---|---|
| Account information | Kept until you delete your account. Email address and password hash deleted on account closure. |
| Watches and templates | Kept until you delete them or close your account. |
| Hit / alert records | Kept up to 12 months for reference, then automatically purged. |
| Listing price history | Kept while the corresponding listing watch exists. Deleted with the watch. |
| Pending unverified registrations | Deleted automatically after 24 hours. |
| Verification / reset codes | Expire after 15 minutes; not used after. |
| Server logs | Short-lived (typically 7 days at the infrastructure provider) for debugging. |
06Your rights
Depending on your jurisdiction, you may have the following rights:
- Access: ask what data we hold about you
- Correction: ask us to correct inaccurate data
- Deletion: ask us to delete your account and associated data
- Portability: ask for an export of your watches and templates
- Opt-out of email: turn off notification channels in your profile
- Object / restrict processing: contact us to request limits on how we process your data
To exercise these rights, email support@findalert.app from the address associated with your account. We aim to respond within 30 days. We may need to verify your identity before fulfilling certain requests.
07For California residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect about you, the right to delete it, and the right not to be discriminated against for exercising these rights.
FindAlert does not sell or share personal information for cross-context behavioral advertising. There is no opt-out required, but you can still request access or deletion as described in section 6.
08For European residents (GDPR)
If you are in the EU, UK, or EEA, our legal basis for processing your data is:
- Contract — to provide the Service you signed up for (account, watches, alerts)
- Legitimate interest — security, fraud prevention, error monitoring
- Consent — when you explicitly opt in (e.g. Slack/Discord notifications, Google sign-in)
You have the rights listed in section 6. You also have the right to lodge a complaint with your national data-protection authority. We do not have an EU representative; for inquiries please contact support@findalert.app.
09International data transfers
FindAlert runs on Cloudflare's global edge network. Your data may be processed in any of Cloudflare's data centers worldwide. By using the Service you acknowledge that your data may be transferred to and processed outside your country of residence. Our subprocessors (listed in section 4) provide appropriate safeguards including, where applicable, Standard Contractual Clauses.
10Cookies
We use a single first-party session cookie to keep you logged in. This cookie is necessary for the Service to work and cannot be disabled while staying signed in. We do not set tracking, advertising, or analytics cookies.
11Children's privacy
FindAlert is not directed at children under 13 (or under 16 in the EU). We do not knowingly collect personal information from minors. If you believe a minor has provided personal information to us, contact support@findalert.app and we will delete it.
12Security
We take reasonable technical and organizational measures to protect your data, including:
- HTTPS encryption for all traffic
- Cryptographic password hashing (passwords never stored in plain text)
- Limited access — only the Operator has database access
- Email verification before unlocking sensitive features
- Reliance on infrastructure providers (Cloudflare) that maintain industry-standard certifications
However, no system is 100% secure. We cannot guarantee absolute security and you use the Service at your own risk.
13Account deletion
You can request deletion of your account and all associated data by emailing support@findalert.app from your registered email address. Deletion is irreversible. We will complete the deletion within 30 days. Some records may be retained briefly in backups (typically up to 30 additional days) before fully purged.
14Changes to this policy
We may update this Privacy Policy from time to time. The "Last Updated" date at the top reflects the most recent change. For material changes (e.g. new categories of data collected, new third-party processors), we will notify registered users by email. Continued use of the Service after changes constitutes acceptance of the updated policy.
15Contact
Email: support@findalert.app
Operator: Independent developer (FindAlert is not a registered company)
For privacy or data-rights requests, please use the email above and write your subject line as "Privacy Request — [your request]".
What we collect: Your email, password (hashed), what you search for, what you watch, optional webhook URLs.
What we don't collect: Your real name, address, phone number, payment data, or browsing activity outside FindAlert.
What we don't do: Sell your data, show you ads, build profiles, share your searches.
How to delete: Email us from your registered address.