Privacy Policy
This policy explains what information Patriot Price Board collects, why, and how you can delete it. We collect as little as we can to run the Board and send the alerts you ask for.
1. Information we collect
- Email address, if you create an account. We use it to send your sign-in link and any email alerts you turn on.
- Watchlists: the items, calibers, price limits and other criteria you save, and whether you want push or email alerts for each.
- Push notification subscriptions, if you turn on phone alerts. Your browser gives us a technical address (an "endpoint" and encryption keys) that lets us send notifications to that device. It does not include your phone number or contacts.
- Alert history: which alerts we have already sent you, so we do not send duplicates.
- Click records: when someone taps "View deal", we record which listing was clicked and when, to count clicks for each retailer and to support affiliate reporting. If you are signed in, a click may be linked to your account.
- Basic technical logs kept by our hosting and database providers (such as IP address, browser type and request time) for security and troubleshooting.
We do not collect payment information, because we never sell anything. Purchases happen on the retailer's site, under the retailer's privacy policy.
2. How we use it
- To sign you in, save your watchlists, and send the alerts you ask for.
- To keep the Board running, secure and free of abuse.
- To understand which deals and retailers are useful, in aggregate.
We do not use your watchlists to build advertising profiles, and we do not send marketing email unless you separately opt in.
3. Who we share it with
We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising. We share it only with service providers that run parts of the Board for us, under their own security and privacy terms:
- Database and sign-in: Supabase (stores accounts, watchlists and alert settings).
- Website hosting: our web host (currently planned: Cloudflare).
- Alert and sign-in email: our email provider, Resend, which delivers emails from our own domain.
- Phone notifications: the push service run by your device's browser maker (for example Apple, Google or Mozilla), which delivers the notification to your device.
When you click through to a retailer, the retailer (and any affiliate network) can see that you came from the Board, as with any link. We may also disclose information if the law requires it.
4. Cookies and local storage
We use your browser's storage to keep you signed in and remember settings such as your filters. We do not use third-party advertising cookies. Retailer and affiliate sites you visit may set their own cookies.
5. Keeping and deleting your information
- We keep your account data while your account is open.
- Delete a watch or turn off alerts any time from your Watchlist. Turning off phone alerts removes that device's push subscription.
- Delete your account from your account settings, or by emailing us (see below). We delete your email address, watchlists, push subscriptions and alert history within 30 days. Click records are then kept only without your account attached.
- Every alert email includes a link to stop email alerts.
6. Security
Your data is stored with access rules that let only you read your own watchlists and settings. No system is perfectly secure, but we take reasonable steps to protect your information.
7. Children
The Board is for adults. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will delete it.
8. Your rights
Depending on where you live, you may have the right to see, correct, download or delete your information, and to opt out of any sale or targeted-advertising sharing (we do neither). Contact us to make a request. [Attorney to review state-specific requirements.]
9. Changes
We will update the date at the top of this page if this policy changes, and will notify members by email of significant changes.
10. Contact
Privacy questions or deletion requests: contact@ our domain (address set at launch).