Privacy Policy

The information the service uses

• Email address — Clerk uses this address for sign-in by one-time code. It is also the destination for alert emails when none of your devices has notifications enabled.
• Push subscription — enabling device notifications supplies us with a browser-generated, anonymous delivery address: an endpoint and two encryption keys. The subscription is linked to your account. Turning notifications off or removing the device deletes that record.
• Alert settings — we retain your chosen model, capacity, color and store selections. If you grant location access, your browser uses the location to order nearby stores; that location stays in the browser and is not sent to ShelfSpring.
• Payment — Stripe handles the transaction. Our records contain the Stripe identifiers for your customer and subscription, but no card numbers.
• Usage analytics — FlowGlance collects page visits, clicks and interactions with forms, including submitted text and uploaded images, for product improvement. The full capture scope and your choices appear under Your analytics controls. We do not use advertising trackers.
• Server logs — security and rate limiting use records containing IP addresses and request metadata. These logs are retained for 30 days.

Why it is processed

The requested service determines these uses: checking inventory, finding matches for your saved alerts, delivering phone notifications or email, and administering billing. We neither sell nor rent personal data.

Services that help run ShelfSpring

Sign-in relies on Clerk, and payment processing relies on Stripe. Resend delivers stock-alert emails. Device push messages travel through services operated by Apple, Google and Mozilla. The website is hosted on Vercel and the database runs on Linode. Cloudflare supplies DNS, inbound mail, operational messages and private backups. FlowGlance supplies analytics.

Your analytics controls

We use one analytics provider: FlowGlance. Its record brings together visited pages, clicks, form interactions, device and browser types, and an approximate location inferred from the network address. For a signed-in visit, the record is associated with your account id and email. This lets us connect a support request with the experience you had on the site.

Allowing analytics enables every FlowGlance capture feature. The captured material includes text submitted in forms, copied text, images uploaded through the site, interactions with media, page content, technical errors and account identity. Text and images you supply can therefore add personal information to the record. We use it to understand how the site is experienced and to investigate problems. Please leave unnecessary sensitive information out of support messages.

• EU, EEA, UK and Switzerland — consent comes before loading analytics. The same rule applies when your location cannot be determined. Choosing Accept allows FlowGlance to load; choosing Decline means it does not load.
• Everywhere else, including the US — analytics runs by default, with an opt-out available through Do not track me in the page footer. After opting out, FlowGlance no longer loads. A page on which it was already running reloads once to remove it. A browser sending Global Privacy Control is also treated as having opted out.

Two browser cookies keep these choices in context. pc_consent retains the analytics choice for 180 days; the footer control, including Analytics off · Turn on, lets you change it at any time. To determine whether consent is needed first, the browser makes a one-time request to Vercel for the country associated with your network address. That answer stays in pc_region for 180 days and is not stored on our servers.

How long records stay

We keep account details and saved alerts for the life of the account. To have the account deleted, send the request from its email address. Deletion takes place within 7 days; only payment records that tax law requires us to retain are kept afterward.

Access, correction and other rights

Contact contact@shelfspring.com to request access to your data, a correction or deletion, or to object to its processing. Consent-based processing, including analytics in the EU, EEA, UK and Switzerland, can be stopped by withdrawing consent at any time; withdrawal does not change what was collected previously. Residents of the EU or UK may also raise a complaint with their supervisory authority. For California residents, we do not sell or share personal information within the meaning of the CCPA, and we honor Global Privacy Control.

What the browser remembers

The necessary sign-in cookies belong to Clerk. ShelfSpring's pc_consent records your analytics preference, while pc_region records whether the consent-first rule applies. When FlowGlance runs under the rules above, it also sets a first-party analytics cookie. There are no third-party advertising cookies.