Privacy

What we collect

When you browse the site, we count page views with Cloudflare Web Analytics. No cookies, no cross-site tracking, no fingerprinting. We don't know who you are. We just see “13 people opened /products/aptamil-1 today”.

Browsing the site doesn't need an account or any sign-up. The one exception: tapping the ★ Notify me button on a product page. That asks for your email address so we can alert you when the product is back in stock or hits a discount you choose, and optionally your suburb or GPS location so we can mention nearby stores. It's opt-in, one product at a time, and it's the only place on the site we ask for anything personal.

How long we keep it

• Stock & price data: stock snapshots and price history come from CW's public catalogue (none of it is personal) and get pruned nightly: anything older than about a month is deleted.
• Notify-me alerts: your email, the products you've starred, and your saved location if you gave one, kept until you unsubscribe or delete them yourself (see “Your rights” below).
• Page-view counts: aggregated by Cloudflare Web Analytics. No per-person trail.
• Error reports: when something breaks server-side, the error goes to Sentry with a 90-day retention. We strip query strings and form data before sending.

Who else sees it

The site runs on a handful of managed services. Each one handles a slice of the site and only sees what they need to do that slice:

• Cloudflare: DNS, CDN, edge-level DDoS protection, and privacy-friendly page-view counts (Web Analytics). Sees every request to the site but doesn't persist request bodies or set cookies.
• Supabase: Postgres. Stores product data, stock snapshots, price history, the nightly catalogue sweep, and notify-me subscriptions.
• Upstash: Redis. Holds rate-limit counters and short-lived job state.
• Railway: runs the API and the scraper workers.
• Resend: sends notify-me emails (verification, restock, and deal alerts) on our behalf. Sees the email address you gave us and the alert content, nothing else.
• Sentry: error reports (no bodies, no IPs).

We don't sell or share user data with anyone outside this list. We don't use your information for marketing of any kind.

Your rights

If you've used Notify me, every alert email includes a link to manage or delete your alerts yourself, any time, with no login needed. Deleting all your alerts also removes your email address and saved location. If you have any other question about your data, email hi@erronlabs.com.au and we'll sort it within a week.

Changes to this page

If we add a service or change retention rules, this page updates first. The “last updated” stamp at the top moves whenever the wording here changes.