PriceSniffer — Privacy Policy

Effective date: August 8, 2026Last updated: August 9, 2026

1. Who we are

PriceSniffer ("PriceSniffer", "we", "us") is an iOS app that tracks the price and stock of e-commerce products you choose and notifies you when a product drops to your target price or comes back in stock.

The data controller is Yunus Emre Celik, Istanbul, Türkiye. Contact: info@pricesniffer.net.

  • EU/EEA users (GDPR): no EU representative appointed at this time; the controller is established outside the EU.
  • Turkey users (KVKK): the data controller (veri sorumlusu) is Yunus Emre Celik; VERBİS registration is not applicable at current scale and will be completed if thresholds are met.

2. Scope

This policy covers personal data we process when you use the PriceSniffer app and backend. It does not cover the e-commerce websites you track — those are operated by third parties under their own policies.

3. What we collect

We collect only what the service needs. We do not collect payment card details — all payments are handled by Apple.

Category Data Source
Account Email address received from your Apple or Google sign-in (Apple private-relay addresses supported); a reference to your Apple or Google identity; account creation/update timestamps Apple or Google, when you sign in
Profile / settings Default currency; country (2-letter code, used to set extraction geolocation); subscription plan You / the system
Authentication Session/refresh tokens (revocable, server-stored) Generated on login
Push Apple Push Notification (APNs) device token; platform; last-seen time Your device, if you allow notifications
Tracked products The product URLs you paste; your target price or percentage-drop; check interval; category and tag labels you create; per-product currency You, when adding/editing a product
Product data & history Extracted title, price, currency, availability, image URL for products you track; price-check history Fetched from the target site via our extraction provider
Subscription Your current plan / entitlement status Apple (StoreKit)
Diagnostic Technical/operational logs needed to run and secure the service (e.g. errors, request/extraction events). We do not use third-party advertising or analytics SDKs. Automatic

The URLs you track are sent to our web-data extraction provider. To fetch price and stock, we transmit the product URL (and a country/geolocation hint) to this provider, which retrieves the public product page and returns structured data. See §6.

4. Why we use it, and our legal bases (GDPR Art. 6 / KVKK Art. 5)

Purpose Legal basis
Create and operate your account; track products; run scheduled checks; show price history Performance of a contract (GDPR 6(1)(b)); KVKK contract necessity
Send price-drop / restock push notifications you set up Performance of contract; device-level notification permission (iOS) acts as consent
Secure the service, prevent abuse/fraud, debug Legitimate interests (GDPR 6(1)(f)); KVKK legitimate interest
Enforce plan limits and process subscriptions Performance of contract; legal obligation for tax/billing records
Comply with law, respond to lawful requests Legal obligation (GDPR 6(1)(c))

We do not sell your personal data and do not use it for third-party advertising.

5. Push notifications

If you allow notifications, we store an APNs device token to deliver alerts you configured. You can turn notifications off any time in iOS Settings; revoking the permission stops delivery and you may delete the stored token by signing out or deleting your account.

6. Who we share it with (processors / sub-processors)

We share personal data only with providers that help us run the service, under contract:

Provider Purpose What it receives
Web-data extraction provider (EU-based) Product extraction (fetch + parse the product page) The product URL you track + a country/geolocation hint
Apple App distribution, push delivery (APNs), payments & subscriptions (StoreKit) Push token; purchase/subscription data (Apple is the merchant of record)
Hosting / database provider A reputable cloud hosting provider (to be finalized before public launch; this policy will be updated with provider and region) Data at rest/in transit as needed to host the service

We may also disclose data where required to comply with law, a court order, or a lawful request, or to protect our rights, users, or safety.

Regarding data extracted from third-party sites: our web-data extraction provider acts as our processor for the fetch, and we are the controller of the tracked-product data we then store for you.

7. International transfers

Your data may be processed in the EU, Ireland, the United States, and other countries where we or our providers operate. Where data leaves the EEA/UK or Turkey, we rely on an adequacy decision or appropriate safeguards (e.g. EU Standard Contractual Clauses). Contact info@pricesniffer.net for details or a copy of the safeguards.

8. How long we keep it

Data Retention
Account & tracked products While your account is active
After account deletion Deleted or anonymized without undue delay, except where law requires retention
Refresh/session tokens Until you log out or they expire/are revoked
Diagnostic logs Deleted immediately upon account deletion; we do not retain diagnostic logs beyond operational necessity
Billing/tax records As required by applicable law (typically several years)

9. Your rights

EU/EEA & UK (GDPR): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with your supervisory authority (in Ireland, the Data Protection Commission, dataprotection.ie).

Turkey (KVKK Art. 11): learn whether your data is processed, request information, learn the purpose and whether it is used accordingly, know third parties to whom it is transferred, request correction/deletion, and object to results arising from automated analysis. Apply via info@pricesniffer.net; you may complain to the Kişisel Verileri Koruma Kurumu (KVKK).

California (CCPA/CPRA): right to know, delete, correct, and opt out of "sale"/"sharing" of personal information, and non-discrimination for exercising rights. We do not sell or share personal information as defined by the CCPA. Submit requests to info@pricesniffer.net.

To exercise any right, email info@pricesniffer.net. We verify identity before acting and respond within the timeframe the applicable law requires (generally within 30 days under GDPR). Portable data is provided in a structured, machine-readable format (e.g. JSON or CSV).

10. Security

Sign-in is handled by Apple and Google — we never receive or store a password. API access uses short-lived tokens with revocable refresh tokens; traffic is encrypted in transit (TLS). No system is perfectly secure, but we apply measures appropriate to the risk. Access to personal data is restricted to authorized personnel.

11. Data breach notification

If a personal-data breach is likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours of becoming aware of it (GDPR Art. 33). Where the breach is likely to result in a high risk to you, we will also notify affected users without undue delay (GDPR Art. 34). Equivalent notification duties under KVKK apply for Turkey users.

12. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

13. Data Protection Officer

We have not appointed a formal Data Protection Officer, as we do not meet the thresholds requiring one under GDPR Art. 37. All data requests are handled via info@pricesniffer.net.

14. Notification categories

You control all of these in iOS Settings and/or the app's notification preferences:

  • Price-drop / restock alerts — core service function for products you track; enabled when you set a trigger. Disable any time.
  • Service / account notices (security, important changes) — operational, sent as needed.
  • Marketing (tips, promotions) — opt-in only; sent solely with your explicit consent and withdrawable any time.

15. Aggregated / anonymized data

We may create and use aggregated or anonymized data (which cannot identify you) to operate, secure, and improve the service. This is no longer personal data.

16. Children

PriceSniffer is not directed to children. We do not knowingly collect data from anyone under 16 (EU) / 18 where a higher age applies. If you believe a child provided us data, contact info@pricesniffer.net and we will delete it.

17. Changes

We may update this policy. Material changes will be notified in-app or by email where required. The "Last updated" date reflects the current version.

18. Contact

Privacy / data requests: info@pricesniffer.net · Support: info@pricesniffer.net · Yunus Emre Celik, Istanbul, Türkiye.

19. Governing language

This policy is written in English and may be made available in other languages for your convenience. In the event of any conflict or inconsistency between the English version and any translated version of this document, the English version shall prevail.