Privacy Policy

Account: your email address. Sign-in is by emailed magic link; we never create or store a password.

Watches: the Mac configurations you ask us to watch (model, chip, memory, storage, cores, exact part number).

Alert channels:if you enable web push, your browser's push subscription (endpoint and delivery keys). If you use ntfy, the topic name you choose. If your plan includes webhooks, the webhook URL you provide. We do not collect phone numbers; SMS is not offered today.

Billing: payments are processed by Stripe. We store your plan entitlement and billing status, never card numbers.

Automatic: standard server logs (IP address, browser type, timestamps) for security, rate limiting, and debugging, plus one session cookie that keeps you signed in. We use Ahrefs Web Analytics for cookieless, aggregate SEO and site-health reporting; it does not store raw IP addresses or use visitor cookies. We use Google Analytics 4 to understand site usage in aggregate (with IP anonymization), including limited server-side conversion events such as plan, value, and transaction ID after checkout. We do not send Google Analytics your email address, card number, Apple credentials, or watch criteria. We also use advertising pixels to measure conversions from our ads: X (Twitter), sharing conversion events with X Corp. These pixels set cookies in your browser and share those conversion events with the respective ad network. Visitors in the EU, EEA, UK, and Switzerland are not loaded into Google Analytics or any advertising pixel. We build no behavioral profiles ourselves.

To run your watches, deliver alerts on the channels you chose, process your plan, send transactional email (sign-in links, receipts, account notices), prevent abuse, and meet legal obligations. We do not sell your data. The only data shared for marketing measurement is conversion metadata sent to Google Analytics and our active ad networks (X (Twitter), sharing conversion events with X Corp) to measure our advertising; we do not otherwise share your data for anyone's marketing.

from alerts@mail.refurbsitter.com), Google Analytics (site usage and conversion measurement), and Ahrefs (cookieless web analytics), X Corp (advertising conversion measurement) process data on our behalf. If you enable web push, delivery goes through your browser vendor's push service. If you use the ntfy channel, alerts publish to your chosen topic on ntfy.sh; note that anyone who knows a topic name can subscribe to it, so pick an unguessable topic.

RefurbSitter watches Apple's public refurbished store only. We never ask for or store your Apple ID, password, or payment information, and we never buy on your behalf.

Account data and watches are kept while your account is active and removed within 30 days of a verified deletion request. Server logs are kept up to 90 days. Stripe retains payment records under its own compliance requirements.

You can view and edit your watches and channels from the dashboard. You can request a copy, correction, or deletion of your data at any time by emailing us. California and other US state residents have the rights their state laws provide (access, deletion, correction, opt-out of sale). Conversion data is shared with advertising networks for ad measurement (see the "Automatic" section above). US state residents may opt out via the Do Not Sell or Share My Personal Information page. The Global Privacy Control (GPC) browser signal is honored as an opt-out automatically. RefurbSitter is for adults; we do not knowingly collect data from children under 13 and will delete it if found.

If this policy changes materially we will note it here with a new effective date and give notice in the product or by email.

Privacy questions and requests: ryan@refurbsitter.com with "Privacy Request" in the subject line.