Privacy Policy
Last updated: September 2026
1. Who We Are
Discount Alert (“we”, “us”, “our”) is a price monitoring service operated by LICEPTIK LOGIC SRL, Mun. Târgu-Jiu, Ale. Castanilor, Nr. 3, Bl. 3, Sc. 1, Et. 3, Ap. 14, jud. Gorj, Romania (CUI: 49569964). We are the data controller for personal data collected through this website.
Privacy contact: contact@discountalert.shop
2. Data We Collect
| Category | Data | Source | Legal Basis |
|---|---|---|---|
| Account data | Email, name, profile picture, OAuth provider ID | Google or Facebook OAuth (your choice at sign-in) | Art. 6(1)(b) — Contract |
| Product tracking data | URLs, product names, price history | User-provided + scraped | Art. 6(1)(b) — Contract |
| Payment data | Stripe customer ID only (billing details processed by Stripe, not stored by us) | Stripe | Art. 6(1)(b) — Contract |
| Usage data | Last login, deals found, savings tracked | Automatic | Art. 6(1)(f) — Legitimate interest |
We do not sell data to third parties, use data for advertising, or build behavioural profiles.
3. Third-Party Processors
The following sub-processors operate under Data Processing Agreements (DPAs) and are GDPR-compliant.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database hosting (PostgreSQL) | EU (AWS eu-central-1, Frankfurt) |
| OAuth sign-in only (if you sign in with Google) | EU/US (Standard Contractual Clauses) | |
| Meta Platforms (Facebook) | OAuth sign-in only (if you sign in with Facebook) | EU/US (SCCs) |
| Stripe | Payment processing (PCI DSS Level 1) | EU/US (SCCs) |
| Resend | Transactional emails (price alerts) | US (SCCs) |
| Hetzner | Application hosting | EU (Germany) |
| Groq | AI price extraction — processes public webpage HTML only, no personal data | US (SCCs) |
| ZenRows / ScraperAPI | Scraping proxies — fetch public product pages; receive product URLs only, no personal data | US (SCCs) |
4. Data Retention
- Account data: Retained until you delete your account.
- Price history: Retained according to your subscription plan. Deleted on account deletion.
- Payment records: 7 years as required by Romanian accounting law (Legea nr. 82/1991).
- Server logs: Maximum 30 days.
5. Your Rights (GDPR Art. 15–22)
To exercise any right, email contact@discountalert.shop. We respond within 30 days.
Right of Access (Art. 15)
Request a copy of all data we hold about you.
Right to Rectification (Art. 16)
Correct inaccurate personal data.
Right to Erasure (Art. 17)
You may delete your account at any time via Settings → Delete Account. Your personal data will be permanently deleted within 30 days.
Right to Restriction (Art. 18)
Temporarily restrict processing of your data.
Right to Portability (Art. 20)
Request a copy of your data by emailing contact@discountalert.shop.
Right to Object (Art. 21)
Object to processing based on legitimate interests.
You have the right to lodge a complaint with the Romanian supervisory authority: ANSPDCP (www.dataprotection.ro), or with the supervisory authority in your EU country of residence.
6. Cookies
We use only essential cookies required for authentication. No analytics, advertising, or tracking cookies are used.
| Cookie | Purpose | Duration |
|---|---|---|
| authjs.* (Auth.js) | Authentication session — essential | 30 days |
| NEXT_LOCALE | Language preference — essential | 1 year |
Because only essential cookies are used, no consent banner is required under ePrivacy Directive recital 66.
7. Data Security
All data is transmitted over HTTPS/TLS 1.3. Database access is restricted to the application server. No passwords are stored — authentication is fully delegated to Google or Facebook OAuth.
8. Changes to This Policy
Material changes will be communicated by email at least 30 days before the effective date. Continued use of the Service constitutes acceptance of the updated policy.
9. Contact
For all privacy-related requests: contact@discountalert.shop