TRUST / PRIVACY

Privacy

Last updated October 28, 2026.

Accounts and watches

Supabase provides email-and-password authentication. Your account stores your watches and in-app notifications. You can browse prices without signing in.

Email price alerts

When enabled, guest alerts need only your email address, a product and target price. We send a confirmation before activating an alert. No account is created. Email addresses are used only for the requested product alerts, never marketing or sale. Resend processes delivery when the owner configures it. Open and click tracking must be disabled on the sending domain.

Every email includes a no-login deletion link. It deletes that email subscription and its queued messages; an existing signed-in watch remains. Unconfirmed requests expire after 24 hours and are purged by subsequent alert requests or collection delivery. Delivery retries expire after 23 hours. Provider delivery logs and private recovery backups may retain data until their retention expires; deletion is not retroactive removal from an email already delivered.

Abuse prevention

Alert requests use short-lived keyed fingerprints of IP addresses and email addresses for rate limits. Raw IP addresses are not saved in our alert tables. The counters expire after 24 hours and are purged on subsequent requests. Cloudflare and Supabase may process technical connection logs to operate and protect the service.

Contact messages

The contact form stores your message and an optional reply email privately in Supabase. The email is used only to reply, never added to alerts or marketing. Messages are removed after 30 days during routine collection or contact cleanup. Please do not send sensitive credentials or payment details.

Outbound links

We count retailer/product redirects without recording your IP, account ID or cookies in the click log. Configured affiliate links can identify The RigScore to the destination retailer or affiliate network. Retailers have their own privacy policies. Compensation never affects rankings or tracked price history. Amazon comparison searches are not tracked prices.

Cookies and storage

Signed-in authentication uses browser storage for your session. We do not add advertising trackers or sell personal data. Public price snapshots contain catalog data, not account or alert information.

Optional Cloudflare Web Analytics is disabled unless the owner supplies its public site token. It uses no analytics cookies or fingerprinting; we add no account identifiers, email addresses or custom search events. The optional beacon skips direct visits to account, alert and search pages and requests with query strings, respects Do Not Track and Global Privacy Control, and has automatic SPA measurement disabled. Cloudflare states that its analytics does not log query strings. No Google Analytics or ad tracker is installed.

For questions, see Contact.