Privacy Policy

Account: your email address. Sign-in is by emailed magic link; we never create or store a password.

Watches: the Mac configurations you ask us to watch (model, chip, memory, storage, cores, exact part number).

Alert channels:if you enable web push, your browser's push subscription (endpoint and delivery keys). If you use ntfy, the topic name you choose. If your plan includes webhooks, the webhook URL you provide. If you explicitly opt into SMS, we store the mobile number, consent record, verification state, and delivery or opt-out events needed to operate that channel.

Billing: payments are processed by Stripe. We store your plan entitlement and billing status, never card numbers.

Automatic: standard server logs (IP address, browser type, timestamps) for security, rate limiting, and debugging, plus one session cookie that keeps you signed in. We use Ahrefs Web Analytics for cookieless, aggregate SEO and site-health reporting; it does not store raw IP addresses or use visitor cookies. We use Google Analytics 4 to understand site usage in aggregate (with IP anonymization), including limited server-side conversion events such as plan, value, and transaction ID after checkout. We do not send Google Analytics your email address, card number, Apple credentials, or watch criteria. We also use advertising pixels to measure conversions from our ads: X (Twitter), sharing conversion events with X Corp. These pixels set cookies in your browser and share those conversion events with the respective ad network. Visitors in the EU, EEA, UK, and Switzerland are not loaded into Google Analytics or any advertising pixel. We build no behavioral profiles ourselves.

Navigation evidence: when you arrive at RefurbSitter, we record how your browser reports your navigation — whether you arrived from another website, or typed or bookmarked the address — the referring site's hostname (if your browser provides it), and a timestamp. This is stored in a session cookie that is deleted when your browser closes. It contains no ad identifiers, full URLs, or search terms, and is kept only while no attribution data has been recorded yet. We use this to understand which channels bring new signups.

Alert clicks:links in RefurbSitter alert emails may route through our servers before opening Apple's online store. This lets us measure whether an alert was useful and distinguish email-scanner checks from real clicks. We only wrap links that go to https://apple.com/shop/ orhttps://www.apple.com/shop/, we store only HMAC-hashed identifiers (not your raw email address). Redirect tokens expire according to the configured tracking TTL, capped at 90 days; expiry disables the link, but does not by itself assert deletion of the underlying record.

To run your watches, deliver alerts on the channels you chose, process your plan, send transactional email (sign-in links, receipts, account notices), prevent abuse, and meet legal obligations. We do not sell your data. The only data shared for marketing measurement is conversion metadata sent to Google Analytics and our active ad networks (X (Twitter), sharing conversion events with X Corp) to measure our advertising; we do not otherwise share your data for anyone's marketing.

Supabase (accounts, watches, and alert records), Stripe (billing), Resend (transactional email from alerts@mail.refurbsitter.com), Twilio (optional SMS verification and delivery), Google Analytics (site usage and conversion measurement), and Ahrefs (cookieless web analytics), X Corp (advertising conversion measurement) process data on our behalf. If you enable web push, delivery goes through your browser vendor's push service. If you use the ntfy channel, alerts publish to your chosen topic on ntfy.sh; note that anyone who knows a topic name can subscribe to it, so pick an unguessable topic. Mobile information and SMS consent are not sold or shared with third parties for their marketing.

RefurbSitter watches Apple's public refurbished store only. We never ask for or store your Apple ID, password, or payment information, and we never buy on your behalf.

Account data and watches are kept while your account is active and removed within 30 days of a verified deletion request. SMS consent and opt-out records may be kept as long as needed to document permission and honor suppression, then deleted or de-identified. Server logs are kept up to 90 days. Stripe retains payment records under its own compliance requirements.

You can view and edit your watches and channels from the dashboard. You can request a copy, correction, or deletion of your data at any time by emailing us. California and other US state residents have the rights their state laws provide (access, deletion, correction, opt-out of sale). Conversion data is shared with advertising networks for ad measurement (see the "Automatic" section above). US state residents may opt out via the Do Not Sell or Share My Personal Information page. The Global Privacy Control (GPC) browser signal is honored as an opt-out automatically. RefurbSitter is for adults; we do not knowingly collect data from children under 13 and will delete it if found.

If this policy changes materially we will note it here with a new effective date and give notice in the product or by email.

Privacy questions and requests: ryan@refurbsitter.com with "Privacy Request" in the subject line.