Privacy Policy

Last updated: August 2026

What data we collect

• Wishlist data: Product URLs, names, images, and prices you save to your wishlist. This is stored locally in your browser and optionally synced to our secure cloud database when you create an account.
• Account information: If you create an account, we store your email address and an encrypted password hash.
• IP address: When you create an account, we record the IP address used at signup for security and abuse prevention.
• Alert preferences: Your price alert thresholds, stock alert settings, and notification preferences (email, web push).
• Push subscriptions: Push notification subscription identifiers, browser/device platform, and browser user-agent for devices where you enable push.

How we use your data

• To provide wishlist functionality and display your saved items.
• To monitor prices and stock availability for items you've set alerts on.
• To send you email and/or push notifications when your alert conditions are met, based on your preferences.

Data sharing

• We do not sell your data to third parties.
• We use Supabase for secure database hosting and authentication.
• We use Resend for email delivery (only for alert notifications you've opted into).
• If you enable push notifications, delivery is routed through your browser's push service (e.g. Google, Mozilla, Microsoft, or Apple, depending on your browser).

Data storage and security

• Local wishlist data is stored in your browser's extension storage.
• Cloud data is stored in Supabase's secure, encrypted PostgreSQL database.
• All communication uses HTTPS encryption.
• Row-level security ensures users can only access their own data.

Your rights

• You can delete your wishlist data at any time through the extension.
• You can delete your account and all data at any time from your account settings.
• You can disable all alerts at any time.

Contact

For privacy questions, contact us at info@tcgsherpa.com.