Privacy policy

This page describes current practice and is reviewed before launch by counsel.

What we collect

If you boost a product without an account, we set a cookie containing a random identifier so your boosts are still there when you come back. That identifier is not tied to a name or an email address until you create an account, at which point your existing boosts move across.

If you create an account, we store your email address. If you ask for a price-drop alert, we store the product and the price it was at when you asked.

When you click through to a merchant, we record which product, when, and which publisher sent you, so the merchant and the publisher are credited correctly. We store a hashed form of your IP address rather than the address itself. The hash lets us spot abuse; it does not let us recover the address.

What we receive from merchants

When an order is attributed to us, the merchant tells us the order value, the items, and a hashed form of the buyer's email address so a later order from the same person can be matched. We do not receive payment details, and we never handle a payment: checkout always happens on the merchant's own site.

How long we keep it

Each kind of record has its own window, and a scheduled job deletes what is past it:

• Request details attached to a click — hashed IP address, browser, referring page — are erased after 90 days. The click itself remains, because it is what ties an order to the product page that produced it.
• The raw order data a merchant sends us is erased after 120 days, once the window for disputing an attribution or a refund has closed. The order totals stay, because they are our accounting.
• The record that links a buyer to the click that introduced them is kept for two years from their most recent order, and is what lets us tell a merchant that a customer came back. It holds a hashed email address and the merchant's own customer number, never an address in the clear.

Financial records are kept for the period we are required to retain them, in a form that no longer identifies the individual.

Deletion

You can ask us to delete your account and everything attached to it. Where a merchant sends us a deletion request on a buyer's behalf, we honor it on the same terms. Financial records we are required to retain are kept in a form that no longer identifies the individual.

Cookies

We use cookies for three things: keeping you signed in, remembering anonymous boosts, and recording which publisher referred a visit. We do not sell personal information.