Privacy policy

Who we are

Prelovu (“we”) operates prelovu.com. Contact: hello@prelovu.com.

Analytics without cookies

We run our own privacy-friendly analytics instead of Google Analytics. When you use the site, your browser sends us small anonymous events: the page you viewed, the referring site, which tool or button you used (for example “clicked a search result”), search terms, approximate country (from our network provider), and device type, browser and operating system derived from your user agent.

• We do not set cookies for analytics and we do not store your IP address with these events.
• To count unique visitors, we store a one-way hash of your IP address, user agent and a secret that changes every day. It cannot be reversed, can't be linked across days, and is deleted after 48 hours.
• A random session id is kept in your browser's sessionStorage and disappears when you close the tab.
• Analytics events are deleted after 180 days. Aggregated daily counts (e.g. “1,200 page views on Monday”) are kept.
• Traffic from known bots is counted separately by type only.

Price alerts

If you create an alert we store your email address, your alert settings (search terms, maximum price, condition) and when we last emailed you. We use your email only to send the alerts you asked for and the confirmation email. Item ids we've already emailed you are kept for 7 days to avoid duplicates. Unsubscribe deletes your alerts immediately; email us to delete your address entirely.

Alert emails are sent through our email provider, Resend, which processes your address on our behalf.

Reactions, reports and feedback

When you react (🔥, 👍, etc.) your browser creates a random id stored in localStorage. We store only a hash of that id together with the reaction, plus a hashed IP to limit abuse. Reports and feedback store what you type, the page, and a hashed IP. If you include an email address in feedback we use it only to reply.

Bot protection

We use Cloudflare (network protection) and Cloudflare Turnstile (an invisible human check) to keep automated traffic away from our tools. Turnstile may process information about your browser and may set a strictly necessary cookie; its use is covered by the Cloudflare Turnstile Privacy Addendum. After the check we set one short-lived, strictly necessary session cookie on api.prelovu.com (30 minutes). See cookies.

eBay

Listings come from eBay. When you click through to eBay, eBay's own privacy policy applies, and eBay may use cookies to attribute your purchase to our affiliate account. We never receive your eBay account details or purchase details beyond aggregated commission reports.

Stored in your browser

Saved items, recent searches, recently viewed items, your theme, your ZIP code and similar preferences are stored in your browser (localStorage) and never sent to us unless needed for a request (for example your ZIP for shipping estimates).

Hosting and processors

Pages are served by Vercel; our API runs on Railway; data is stored in MongoDB Atlas and Cloudflare R2; network protection is by Cloudflare; emails are sent by Resend. These providers process data on our behalf under their terms.

Your rights

You can ask us to access, correct or delete personal data we hold about you (in practice, your alert email) by writing to hello@prelovu.com. We'll respond within 30 days.

California residents (CCPA/CPRA)

We do not sell or share personal information, as those terms are defined under the California Consumer Privacy Act, and we do not use personal information for cross-context behavioral advertising. In the last 12 months we collected: identifiers (email, for alerts only), internet activity (anonymous usage events described above) and approximate geolocation (country). We use them only to provide and improve the service and to prevent abuse. You have the right to know, delete and correct your personal information and to not be discriminated against for exercising these rights. Contact hello@prelovu.com; we will verify requests by email.

Children

Prelovu is not directed at children under 13 and we don't knowingly collect their data.

Changes

If we change this policy we'll update the date above and note it on What's new.