Privacy

What we store (and why)

• Your email — to send you your sign-in codes and your alerts.
• Your alerts — criteria, watched countries, email or digest choice — to notify you when a product matches.
• Your timezone: to send the digest at the right time and show the Apple Store closing time in your alerts.
• Your session — to keep you signed in (web cookie 30 days; in the iOS app, a token valid for 90 days).
• If you enable notifications (web or iOS app) — a notification identifier (provided by Apple on iOS), plus your device model and version, to deliver pushes and check they work.
• If you get Plus or leave a tip in the iOS app — the details of the purchase receipt Apple signs (plan, price and currency, store country, purchase, renewal and expiry dates, trial or offer, refunds), to turn Plus on for you and handle renewals and refunds.
• If you subscribe to Plus on the website — the subscription details Stripe sends us (subscription and customer identifiers, plan, status, billing period, cancellation or refund), to turn Plus on and keep it in sync. Your card details go to Stripe, never to us.
• If you turn on the Apple Store closing alert: the moments you chose (closing, reopening), the channels (email, push), the email language and your store, to notify you and show what's new there.

We keep this data as long as your account exists. For your account: no name, no phone number, no advertising profile.

How we use your email

• 6-digit sign-in code.
• Instant alert when a product matches your criteria.
• Daily digest of new arrivals (only if you opted in).
• Apple Store closing and reopening alert (only if you turned it on).

No newsletter, no marketing. We only measure whether these emails arrive, are opened and are fast enough — the whole point is to warn you before stock runs out. Plain operational statistics, kept for 90 days.

Your country and our statistics

To show you the right Apple store (Switzerland, France, US…) and the right language, we estimate your country from your IP address. This calculation stays on our server, with no external provider, and is approximate.

To know which pages are useful and improve the site, we use Umami: cookieless statistics with no advertising identifier, routed through our own server so no ad network can follow you. Umami sees the page visited, the browser type and an approximate area — never your email or your account, and your IP address is not kept.

What we don't do

• No ads, no advertising cookies.
• No resale or sharing of your data for commercial purposes.
• No profiling, no tracking of your browsing from one site to another.

Who we share with, and where

• Resend: to send emails (sees your address and the message content).
• Apple and your browser's push service — to deliver push notifications (iOS app and web); they see a device identifier, not your email.
• Umami — anonymous audience statistics (see above).
• Apple — if you ask Apple to refund an App Store purchase, we confirm to Apple that the purchase was delivered and state our preferred outcome (full refund, partial refund or decline), based on how much of the period had passed and the alerts you received during it. Apple already knows the purchase; we never send it your email. We do this based on our legitimate interest in preventing refund abuse; by getting Plus or leaving a tip, you agree to this sharing.
• Bark (api.day.app) — a third-party notification relay the publisher uses on their phone: it receives subscription, trial and refund notices (plan, price, store country, trial end date, refund reason, subscriber counts), never your email or name — at most an internal account identifier when an account deletion needs attention.
• Stripe / Link — for Plus bought on the website. Link (by Stripe) is the merchant of record: it receives your email and payment details, charges you, collects the taxes and keeps the transaction records the law requires, under its own privacy policy. We send it your email and an account identifier.

We sell nothing. Your data is hosted on a dedicated server in Europe. Some of these providers (email, push, statistics, notifications) may process data outside Switzerland/the EU; we only use those offering adequate data-protection safeguards. This includes Stripe / Link (payments), which may process data in the United States.

Your rights

• View your alerts: the "My alerts" page.
• Unsubscribe: from your dashboard or via the link in each email.
• Access, correct, export or delete your data: email us, or delete your account.
• Lodge a complaint: you can contact the data-protection authority (the FDPIC in Switzerland, your national authority in the EU).

Contact form

When you write to us through the contact form (website or iOS app), we keep your message with its topic, your email, your name if you give it, your language, your IP address and your browser or device details (user agent). The IP address and user agent are only used to help you (for example to reproduce a bug). If you are signed in, we also link the message to your account, so we know it really comes from you. Your message and our replies are deleted after 90 days, or as soon as you delete your account (messages sent from it or with its address); you can also ask us to erase them sooner. We email you an acknowledgement and our replies; like every email we send, each one leaves a send log (your address, the subject and the delivery status) kept for 90 days after sending. The message also reaches us by email (through Resend) with the same details; that copy stays in our inbox, with no fixed retention period.

Account deletion

When you delete your account, everything is erased immediately and permanently: your email, your alerts, your sessions, your notification devices, your pending codes, your email-send logs and any message sent via the contact form. Already-aggregated notification stats are anonymised (with no link to you). It's instant and irreversible. App Store notifications about your purchases are kept for up to 13 months to handle refunds and fraud; they are no longer linked to your account or your email. Deleting your account also cancels a Plus subscription bought on the website and deletes your customer record at Stripe; Link keeps the transaction records (receipts, invoices) the law requires. One exception: if you reported one of our emails as spam, we keep a fingerprint of your address (a hash, not the address itself) so alert emails stay stopped; lift it from the My alerts page or email us.

Contact

Question or request? Email privacy@refurbmonitor.com. Data controller: Jérôme Neuvéglise.