Last updated: March 9, 2026
1. Information We Collect
From Google OAuth: Name, email address, and profile picture when you sign in with Google.
Automatically: IP address, browser type, device information, pages visited, and interaction data (cookies, analytics).
User-provided: Votes on content, price alert preferences, and subscription information.
2. How We Use Your Data
Account management and authentication; processing subscription payments via Stripe; sending price alert notifications via email; personalizing your experience (vote history, preferences); analytics and service improvement; preventing abuse and enforcing our terms.
3. Data Sharing
Stripe: Payment and subscription data for processing transactions.
Resend: Email address for sending transactional emails (alerts, confirmations).
Google AdSense: Advertising cookies and data for non-premium users.
We do not sell your personal data to third parties.
4. Data Retention
Account data is retained until you delete your account. Analytics and log data is anonymized after 90 days. Subscription records are retained for legal and financial compliance purposes.
5. Your Rights
You have the right to: access your personal data; request correction of inaccurate data; request deletion of your account and associated data; export your data in a portable format; withdraw consent for data processing; and opt out of marketing communications.
6. Cookies
Essential: Session cookies for authentication (required for the Service to function).
Functional: Preference cookies for locale and display settings.
Advertising: Google AdSense cookies for non-premium users. Premium users do not receive advertising cookies.
7. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we become aware of such collection, we will delete the data promptly.
8. International Data Transfers
Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.
9. Security
We implement industry-standard security measures including encryption in transit (HTTPS), secure session management, and regular security reviews. However, no system is 100% secure, and we cannot guarantee absolute security.
10. Changes to This Policy
We may update this policy periodically. We will notify users of material changes via email or prominent site notice. The "Last updated" date at the top reflects the most recent revision.
11. Contact
For privacy inquiries, data requests, or concerns, contact us at privacy@its-rock.com. See also our Terms of Service.