Privacy Policy

When you create an account we receive your name and email address from your Google sign-in, or you provide your own email and password. Your email address becomes the destination for your alerts; connecting the Telegram channel is subject to your plan.

As you use Orange Restock we store the choices you make: the models, materials, colors, and hardware each alert watches, and the market each alert covers. We also collect basic technical information — browser, device, and IP address — to keep the service reliable and to prevent abuse.

Your data is used to deliver the service: confirming your email address at sign-up, sending restock alerts over the channels you connect, and keeping monitoring reliable. We do not sell personal data, and we do not use it for advertising or marketing.

Google — identity at sign-in (OAuth).

Paddle — merchant of record for Premium payments (card data, tax, billing).

Cloudflare — DNS, TLS edge, and tunnel ingress for orangerestock.com.

Authentication and the database run in our own deployment, not on third-party services.

Your data is shared only with the processors above, to deliver the service, and with authorities where legally required. It is never shared with advertisers.

Account data, including alert history, is kept until you delete your account. We also collect basic anonymous usage analytics on the public site — page views, button clicks, key steps toward creating an alert, and how fast pages load — to understand how the service is used and where it slows down. These events carry no cookies and no personal data; a random identifier that disappears when the tab closes is used only to count visits, at most a coarse country is derived from your IP address by Cloudflare at our network edge, and the data is stored in aggregate form only.

You may request access to, correction of, deletion of, or export of your personal data, and you may opt out of processing that is not essential to the service. To exercise any of these rights, email [email protected] — we will respond within the timeframe required by applicable law.

Data is encrypted in transit and at rest, access is limited to what operations requires, and we will notify you of a security incident affecting your data where required by law.

Your data is stored and processed in our own infrastructure. Where a processor is located outside your country of residence, we rely on the transfer mechanisms available under applicable law.

Material changes to this policy are announced at least 30 days before they take effect. Questions about privacy: [email protected].