Privacy
Last updated
This site sets no cookies, holds no accounts, and stores no personal information about you. That is not a promise about how carefully we handle your data — it is a statement that we do not collect it. BasketPrice is run by MonacoWebPix from Monaco and intended for visitors in the United States.
Who is responsible
The controller of the little personal data described below is MonacoWebPix, C/o CATS, Le Forum, 28 Boulevard Princesse Charlotte, 98000 Monaco, Principality of Monaco, registered under RCI 25P10884. Monaco’s data-protection law — Law n° 1.565 of 3 December 2022 — applies to it. Every privacy request goes to one address: [email protected].
Why there is no cookie banner
Because there is nothing to consent to. This site runs no analytics at all — not Google Analytics, not a cookieless alternative, not a self-hosted one. No script we load counts you, and we do not know how many people read any page. What we have instead is the web server’s own request log — IP address, page, browser string and time, the same file every server on the internet writes. It is read for operational and abuse-handling reasons, never joined to anything, and deleted after 14 days.
What we hold
Four things, and each is something you gave us yourself. Nothing here is collected from you by watching.
- An address you set a price alert with
- Stored against the product or search you asked to be told about, and only after you click the link in a confirmation email — an address typed in by somebody else never receives a second message from us. Every alert email carries a one-click unsubscribe that needs no login. Unsubscribing stops the mail immediately and leaves the row marked unsubscribed rather than deleting it, so the same address cannot be quietly re-added by whoever typed it; ask us at contact and we delete it outright.
- A browser notification you switched on
- If you ask for a price alert as a notification instead of an email, your browser gives us an address at its own push service and two keys, and we store those against the product. The keys encrypt each notification, so the push service carries it without being able to read it. It is also the one time this site puts a script in your browser: a small service worker whose whole job is to show the notification and open the product page when you tap it. It caches nothing and reads nothing you do. Every notification has a button that stops that alert, and blocking notifications for this site in your browser stops them all; the push service then tells us the address is dead and we stop sending.
- An address you left a comment or a rating with
- Held for the same confirmation step and for abuse handling. It is never rendered on the site, never shown next to what you wrote, and never mailed to.
- A one-way hash of your request, for rate limiting
- Votes, comments and both submission forms store sha256 of your address, your browser string and a secret salt — which is what stops one machine mail-bombing a stranger’s inbox from our domain, or stuffing a ballot. It cannot be turned back into an address, and it identifies nothing across the site.
Outbound clicks are not counted. Our /go/ redirector exists to attach an affiliate tag and nothing else: it looks the deal up, redirects, and writes no row. Amazon links skip it entirely and go direct.
Who else handles it
- Server
- netcup GmbH, Daimlerstrasse 25, 76185 Karlsruhe, Germany. The database and the request log live here.
- Edge network
- Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Every request passes through Cloudflare, which sees your IP address in order to route it and to stop attacks on the server.
- No mail is sent from this site yet. When price alerts start, the sending provider is named here before the first message goes out.
- Browser notifications
- Delivered by your browser maker’s push service — Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge. It sees that a notification is on its way to your browser; the content is encrypted for your browser alone.
What we do not have
- No accounts, passwords or profiles. There is nothing to sign up for at launch.
- No email list. An address given for a price alert is used to send that alert and nothing else — no newsletter, no digest, no announcement, and it is never passed on. If you email us instead, we hold that message and it goes no further than answering you.
- No advertising or social trackers. No Google Analytics, no Meta pixel, no ad network tags, no third-party fonts calling out from your browser.
- No sale or sharing of personal information, in the CCPA sense of those words. There is nothing to sell.
Retailers you click through to
Once you follow a link, you are on the retailer’s own site, under their privacy policy and their cookies — including the affiliate cookie that records the referral. We cannot see your cart, your order or your account with them. Our commission reports arrive as aggregate totals, not as a list of who bought what.
Your rights
Ask us what we hold about you, have it corrected, or have it deleted — by email, with no form and no account. We answer within one month. California and other US states give their residents the right to know and to delete; we give the same to everyone, wherever they live. Since we sell and share nothing, there is nothing to opt out of.
If you think we handled your data wrongly, you can complain to Monaco’s data-protection authority: Commission de Contrôle des Informations Nominatives (CCIN), 12 avenue de Fontvieille, 98000 Monaco.
Children
This site is not directed at children under 13 and we knowingly collect nothing from them.
Changes and questions
If this ever changes — an account system, a newsletter — this page changes first and the change is dated at /corrections. Questions: [email protected].