Legal
Privacy policy
Short version: PriceSentinel stores only what it needs to track your prices, uses no analytics, ads or tracking cookies, and lets you export or delete everything yourself.
Last updated:
Who runs this service
The hosted PriceSentinel service at pricesentinel.bogdanandras.com is operated by Andras Bogdan-Andrei, a private individual, who is the controller of the personal data described here. Data is processed on a server operated by Andras Bogdan-Andrei. This policy covers the hosted service only; a self-hosted install keeps its data on your own hardware.
What is stored
- Account: your email address and a hash of your password (the password itself is never stored).
- Your tracking data: products, store links, captured prices and price history, alerts and their delivery log, a log of price checks and activity, tags, notes and settings.
- Notification channels: the webhook URLs, bot tokens and similar settings you enter, encrypted at rest.
- AI keys: the API keys you add for your AI provider, encrypted at rest (AES-256-GCM), and the AI research jobs you run with their results.
- Usage counters needed to apply the daily limits, such as the number of AI research jobs today.
The email address is used to identify your account and for logging in. No emails are sent to it at the moment and it is not verified.
Cookies
The app sets one session cookie when you log in, so that you stay logged in. It is strictly necessary and is not used for anything else. This website and the app use no analytics, no advertising, no tracking pixels and no third-party cookies.
Why the data is processed
Your data is processed to provide the service you signed up for (performance of a contract, Art. 6(1)(b) GDPR): checking prices, keeping history, sending the alerts you configured and running the AI features you use. Limited technical data may be processed to keep the service secure and working (legitimate interest, Art. 6(1)(f) GDPR).
Price checks and third parties
- Online stores: to check a price, the server fetches the product page from the store. The store sees the server’s IP address, not yours, and receives no information about you.
- Your AI provider: when you use AI research, the assistant or the AI price extractor, the relevant product names, page text and your prompts are sent with your own API key to the provider you chose, under that provider’s terms and privacy policy.
- Web search: AI link research sends search queries (product names, not your account details) to a web search service.
- Your notification channels: alerts are delivered to the Discord, Slack, Telegram, ntfy or webhook endpoints you configure.
- Exchange rates: daily currency rates are downloaded from the European Central Bank; no personal data is sent.
Your data is not sold, rented or shared with anyone for marketing.
Logs
The application does not keep a log of the pages you visit. Errors may be logged with technical details (for example a store link that could not be read) to fix problems. The hosting infrastructure may keep short-lived connection logs, such as IP addresses, for security.
How long data is kept
Your data is kept while your account exists. When you delete your account from the settings page, your account and all its tracking data are deleted.
Your rights
Under the GDPR you have the right to access, correct, export and delete your personal data, to object to or restrict its processing and to lodge a complaint with a data protection supervisory authority. Most of this is self-service:
- Export: download your data from the settings page.
- Correct: edit products, channels and settings in the app.
- Delete: delete your account from the settings page.
For anything else, open an issue in the PriceSentinel GitHub repository. Issues are public: describe your request without posting your email address, passwords, API keys or other personal data. Exporting your data and deleting your account don’t need a request: both are in Settings in the app.
Security
Passwords are stored as hashes, credentials and API keys are encrypted at rest, and the service is served over HTTPS. No system is perfectly secure; please use a unique password. Security issues can be reported privately through the repository’s security page.
Children
The service is not intended for children under 16.
Changes
If this policy changes, the new version will be published on this page with a new date. See also the terms of use.