Privacy policy

The short version: we don't run display ads, we don't sell data, and we collect the minimum a rate-alert site needs.

What we collect

• Browsing. Standard server logs and page analytics from Google Analytics and Vercel Analytics (aggregate visit and page counts, no cross-site tracking profiles).
• Accounts (optional). Your email address, your saved alerts, and your alert and valuation preferences. Google sign-in shares only your email with us.
• Outbound clicks. When you click through to a portal we log the click (which portal, which store, when) to understand what's useful. Click logs are keyed to a short-lived anonymized session hash, not your identity.
• Click receipts (on by default for account holders, and you can turn them off). When you click through to a portal while signed in, we save a private record of it: the store, the portal, the rate and terms we were showing, and the time. It is there so you have evidence if the cashback never arrives. Free accounts keep click receipts for 180 days. Click receipts saved while you are on a paid plan are kept indefinitely, including after you cancel. You can turn click receipts off at any time from your account page, delete any click receipt yourself, and download everything as a spreadsheet whenever you like. Turning them off stops new ones and deletes nothing. Click receipts are private to your account and are stored separately from the anonymized click logs above. If you are not signed in, none of this happens: your recent clicks are kept only in your own browser and are never sent to us.
• Newsletter (optional, double opt-in). Your email and delivery events (delivered/bounced) from our email provider.

What we don't do

• No selling or renting personal data.
• No purchase tracking: what you buy after leaving is between you and the store.

Where it lives

Data is stored with our infrastructure providers (Supabase for the database and authentication, Vercel for hosting, Resend for email, and Stripe for premium subscription billing), all under their own security and data-processing terms. If you subscribe, your card details go straight to Stripe: we never see or store them. We only receive your subscription status and receipts.

Cookies

A sign-in session cookie (only if you create an account), a local theme preference, and first-party analytics cookies set by Google Analytics (the _ga cookies) so we can count visits and pages. Those analytics cookies are not used for advertising and are never sold. We don't set third-party or ad-network cookies.

Your choices

Every email we send has a one-click unsubscribe. You can delete your account from the account page, or by contacting us. That removes all of it: alerts, preferences, click receipts and claim log.

Who operates the site

CheckBeforeYouShop is operated by PickaPoint LLC, a Georgia (USA) limited liability company, the entity responsible for the data described on this page. Reach us any time via the contact page.