Privacy Policy

The short version

We keep what it takes to run your alerts and bill your plan. We do not sell or rent personal data, and we run no advertising trackers.

What we keep, and why

• E-mail address: you sign in with a one-time code sent by e-mail. Clerk runs sign-in and keeps you signed in with a session cookie. We also use the address for alert e-mails when no device has notifications on.
• Alert settings: the model, storage, color and stores you picked. If you share your location, your browser uses it to sort nearby stores; it is never sent to us.
• Push subscriptions: when you turn on notifications, your browser hands us a delivery endpoint and two encryption keys for that device. We store the endpoint with your account and delete it when you turn notifications off or remove the device.
• Payments: Stripe runs checkout and your subscription. We keep your Stripe customer and subscription ids, never card numbers.
• Analytics: FlowGlance records how the site is used, including deep capture of page interactions, the text you submit in forms and images you upload. Details and your choice are under Analytics.
• Server logs: IP address and request details, for security and rate limiting, kept 30 days.

Who processes it for us

• Clerk: e-mail codes, sign-in and session cookies.
• Stripe: checkout, subscriptions and invoices.
• FlowGlance: analytics.
• Resend: delivery of alert e-mails.
• Cloudflare: DNS, and e-mail routing for contact@ and test@ addresses.
• Linode: the servers that host our database.
• Vercel: hosting of the website.
• Apple, Google and Mozilla push services: carrying notifications to your device.

Each acts on our instructions and under its own privacy terms.

Analytics: what runs, and how to switch it off

FlowGlance is our only analytics tool. Its deep capture records the pages you open, your clicks and other page interactions, the text you type into and submit through forms, images you upload, your device and browser type, and a rough location from your network address. When you are signed in, the record carries your account id and e-mail, so a support question can be matched to what you saw.

• Visitors in the EU, the EEA, the UK or Switzerland, or anywhere we cannot locate: a consent banner asks first. FlowGlance loads only after Accept; after Decline it never loads.
• Everywhere else, the US included: FlowGlance runs by default. Choose Do not track me at the foot of any page to stop it; if it was running, the page reloads once without it. A Global Privacy Control signal counts as the same opt-out.

The rw_consent cookie keeps your choice for 180 days; switch it back any time with the analytics link in the page footer. To pick the right rule, your browser asks our host (Vercel) once for the country of your network address; the answer sits in the rw_region cookie for 180 days and is not stored on our servers.

Cookies

Clerk's session cookies keep you signed in. Ours are rw_consent (your analytics choice) and rw_region (whether the consent banner applies). FlowGlance sets a first-party cookie only while it runs. No third-party advertising cookies.

How long we keep it

Account data and alerts stay while your account exists. To delete your account, write from your account address; it is gone within 7 days, except the payment records tax law makes us keep.

Your rights

Ask contact@restockwire.com to see, correct or delete your data, or to object to its use. Where analytics rests on your consent (EU, EEA, UK, Switzerland), you can withdraw it at any time; earlier collection is unaffected. EU and UK residents may also complain to their supervisory authority. California residents: we do not sell or share personal information as the CCPA defines it, and we honor Global Privacy Control.