Privacy
Last updated
This site sets no cookies, holds no accounts, and stores no personal information about you. That is not a promise about how carefully we handle your data — it is a statement that we do not collect it. BasketPrice is run by MonacoWebPix from Monaco and intended for visitors in the United States.
Who is responsible
The controller of the little personal data described below is MonacoWebPix, C/o CATS, Le Forum, 28 Boulevard Princesse Charlotte, 98000 Monaco, Principality of Monaco, registered under RCI 25P10884. Monaco’s data-protection law — Law n° 1.565 of December 3, 2022 — applies to it. Every privacy request goes to one address: [email protected].
Why there is no cookie banner
Because there is nothing to consent to. This site runs no analytics at all — not Google Analytics, not a cookieless alternative, not a self-hosted one. No script we load counts you, and we do not know how many people read any page. What we have instead is the web server’s own request log — IP address, page, browser string and time, the same file every server on the internet writes. It is read for operational and abuse-handling reasons, never joined to anything, and deleted after 14 days.
What we hold
Four things, and each is something you gave us yourself. Nothing here is collected from you by watching.
- An address you set a price alert with
- Stored against the product or search you asked to be told about, and only after you click the link in a confirmation email — an address typed in by somebody else never receives a second message from us. Every alert email carries a one-click unsubscribe that needs no login. Unsubscribing stops the mail immediately and leaves the row marked unsubscribed rather than deleting it, so the same address cannot be quietly re-added by whoever typed it; ask us at contact and we delete it outright.
- What each alert is for, and what we sent you
- Stored beside the address or the notification: the product, the saved view or the list of products in a basket you asked to be told about, and the subject line and date of every message that alert has produced. That log is what the manage page shows you under “what we sent you”, and it is the whole of it — we do not keep the message, and nothing records whether you opened one. An alert also carries the date it runs out: ninety days, extended by the link in our own reminder or by setting it again.
- A browser notification you switched on
- If you ask for a price alert as a notification instead of an email, your browser gives us an address at its own push service and two keys, and we store those against the product. The keys encrypt each notification, so the push service carries it without being able to read it. It is also the one time this site puts a script in your browser: a small service worker whose whole job is to show the notification and open the product page when you tap it. It caches nothing and reads nothing you do. Every notification has a button that stops that alert, and blocking notifications for this site in your browser stops them all; the push service then tells us the address is dead and we stop sending.
- An address you left a comment or a rating with
- Held for the same confirmation step and for abuse handling. It is never rendered on the site, never shown next to what you wrote, and never mailed to.
- A one-way hash of your request, for rate limiting
- Votes, comments and both submission forms store sha256 of your address, your browser string and a secret salt — which is what stops one machine mail-bombing a stranger’s inbox from our domain, or stuffing a ballot. It cannot be turned back into an address, and it identifies nothing across the site.
When you click through to a retailer, your browser tells us which link it was, and we send one message to a private Telegram group the site’s operator reads: the product, its price, the page you clicked on, the site that sent you to us — the address your browser gave as the referrer, or the utm_source tag on the link you followed, read when the first page loads and kept in that tab’s memory, never in storage — your IP address, the country and city Cloudflare attributes to it, and your device and browser type. Nothing about the click is written to our database. The message stays in that Telegram group, on Telegram’s servers. The link itself goes straight to the retailer, and our /go/ redirector writes no row either.
Who else handles it
- Server
- netcup GmbH, Daimlerstrasse 25, 76185 Karlsruhe, Germany. The database and the request log live here.
- Edge network
- Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. Every request passes through Cloudflare, which sees your IP address in order to route it and to stop attacks on the server.
- Telegram
- Receives the click messages described above, in a private group. Nobody outside the site’s operator is a member.
- No mail is sent from this site yet. When price alerts start, the sending provider is named here before the first message goes out.
- Browser notifications
- Delivered by your browser maker’s push service — Google for Chrome, Mozilla for Firefox, Apple for Safari, Microsoft for Edge. It sees that a notification is on its way to your browser; the content is encrypted for your browser alone.
What we do not have
- No accounts, passwords or profiles. There is nothing to sign up for at launch.
- No email list. An address given for a price alert is used to send that alert and nothing else — no newsletter, no digest, no announcement, and it is never passed on. If you email us instead, we hold that message and it goes no further than answering you.
- No advertising or social trackers. No Google Analytics, no Meta pixel, no ad network tags, no third-party fonts calling out from your browser.
- No sale or sharing of personal information, in the CCPA sense of those words. There is nothing to sell.
Retailers you click through to
Once you follow a link, you are on the retailer’s own site, under their privacy policy and their cookies — including the affiliate cookie that records the referral. We cannot see your cart, your order or your account with them. Our commission reports arrive as aggregate totals, not as a list of who bought what.
Your rights
Ask us what we hold about you, have it corrected, or have it deleted — by email, with no form and no account. We answer within one month. California and other US states give their residents the right to know and to delete; we give the same to everyone, wherever they live. Since we sell and share nothing, there is nothing to opt out of.
If you think we handled your data wrongly, you can complain to Monaco’s data-protection authority: Commission de Contrôle des Informations Nominatives (CCIN), 12 avenue de Fontvieille, 98000 Monaco.
Children
This site is not directed at children under 13 and we knowingly collect nothing from them.
Changes and questions
If this ever changes — an account system, a newsletter — this page changes first and the change is dated at /corrections. Questions: [email protected].