Privacy
Privacy and personal data
Searching and comparing prices needs no account and sets no cookie. Below is exactly what we store when you use Fordeal, why, on what legal basis and who processes it for us.
Vigente desde el 15/10/2026
En resumen
You can search and compare prices without an account and without cookies. We store only what a feature needs: the text of your question, clicks to shops without a readable IP address and, once you sign in, your e-mail and your lists. Only the providers Fordeal runs on process the data for us; we never sell it or use it for advertising. You can delete your account yourself at any time, and write to us about anything else.
Who is the controller
The controller of personal data is Banbosh Studio, Petr Knobloch, company ID 06535666, Praha. Write to hello@fordeal.ai about anything concerning your data.
What we process and why
For each processing we state the purpose and the legal basis under Article 6 of Regulation (EU) 2016/679 (GDPR).
| Search | the text of your question (at most 200 characters), the delivery country and the answer card are stored so the card can be shared by link and the home page can show recent answers. No account, no IP address, no cookie. Legal basis: performance of the service you asked for (Art. 6(1)(b)) and our legitimate interest in running the site (Art. 6(1)(f)). Please do not write personal data into a question. |
|---|---|
| Answers with AI | when the catalogue does not recognise a question, its text with the language and the country goes to the Claude model of Anthropic, which turns it into a product name. Your e-mail never goes there. Legal basis: Art. 6(1)(b). |
| Click on an offer | when you leave for a shop we record the offer, the shop, the country, the price, the time and two fingerprints (hashes) of the browser and of the IP address combined with the date. The IP address and the browser are never stored in readable form. Purpose: counting clicks and savings, excluding robots and double clicks, attributing the shop's commission. Legal basis: legitimate interest (Art. 6(1)(f)). |
| Account | if you sign in with a link from an e-mail (no password), we store your e-mail, favourite products, lists, price watches and the reviews you write (a review is shown under the name you choose). Legal basis: Art. 6(1)(b), the functions you switched on yourself. |
| Favourites without an account live only in your browser's storage (localStorage). Nothing reaches us until you sign in. | |
| E-mails | the sign-in link, price watch alerts and replies to your requests. Every alert has an unsubscribe link. Legal basis: Art. 6(1)(b). |
| Request to add a shop | the domain, the e-mail and the note are stored to verify the request and reply. Legal basis: Art. 6(1)(b). |
| E-mail you send us is kept while we handle your matter. Legal basis: legitimate interest in replying to you (Art. 6(1)(f)). | |
| Operation logs | the hosting provider records the IP address, the time and the page address for security and operation. Our own server error records hold the page address, the error type and the time, never the IP address, and are deleted after 30 days. Legal basis: legitimate interest in a secure and working service (Art. 6(1)(f)). |
| Visit statistics | we collect none today. If we switch them on, they will run without cookies and without personal data, and this page will say so. |
| Protección de formularios contra bots | el inicio de sesión, los informes de errores y las solicitudes para añadir una tienda pueden estar protegidos por Cloudflare Turnstile. Cuando está activado en un formulario, se carga desde Cloudflare un script que comprueba en el navegador si lo rellena una persona (tratando la dirección IP y datos técnicos del navegador); de Cloudflare solo recibimos el resultado y le pasamos la IP del remitente para la verificación. Base jurídica: interés legítimo en proteger formularios y buzones frente a abusos (letra f). |
| Fixation-end watcher (electricity and gas): your e-mail, the end date of your fixed price and, if you give them, the distribution area, supplier and consumption, to send one confirmation e-mail and one e-mail before the end date. Nothing is sent before you confirm the address (double opt-in). Legal basis: your consent (Art. 6(1)(a)), withdrawn with the link in every e-mail. | |
Who processes data for us
We do not sell your data and do not pass it on for advertising. Only the providers Fordeal runs on process it for us:
| Provider | What it does for us | Where it is based |
|---|---|---|
| Supabase | database and sign-in | USA; data centre in Frankfurt (EU) |
| Vercel | hosting of the website and the API | USA; servers for our application in Frankfurt (EU) |
| Resend | sending of e-mails (price watch alerts, notices) | USA |
| Anthropic | the Claude model that understands the text of a question | being verified |
| Google Workspace | our mailboxes | being verified |
| Hetzner Online | the server on which price collection and alert sending run | Germany |
| Cloudflare | protección de formularios contra bots (Turnstile), solo donde está activada | EE. UU. |
Algunos de estos proveedores tienen su sede en EE. UU. o pueden acceder a los datos desde EE. UU.
Esa transferencia se rige por el capítulo V del RGPD (arts. 44–46): la decisión de adecuación de la Comisión (EU–US Data Privacy Framework) para los proveedores certificados, y en otro caso las cláusulas contractuales tipo de su acuerdo de tratamiento. Si lo solicita en hello@fordeal.ai, le indicamos en qué garantía se apoya cada proveedor.
Shops and affiliate networks are not our processors. When you click an offer, your browser goes to the shop, possibly through an affiliate network; from then on the shop and the network process your data as separate controllers under their own terms. They learn from us only that you came from fordeal.ai, and shops in our own partner programme also receive a click identifier.
How long we keep data
| Account and everything in it | until you delete the account in the account settings or write to hello@fordeal.ai. The deletion is immediate. |
|---|---|
| Answer cards | the full content is shortened after 14 days; the question and the record of the answer remain without any link to you. |
| Server error records | 30 days. |
| Click fingerprints (the two hashes of the browser and of the IP address with the date): deleted automatically 90 days after the click. The click record itself (offer, shop, country, price, time) stays without them, for the accounting of commissions. | |
| Known devices of an account (browser, system, country; for the new sign-in e-mail): 180 days after their last use. | |
| Sent e-mails (address, kind and content of the e-mail, time): deleted automatically 3 years after sending. | |
| Shop requests | not deleted automatically yet; we delete them when you ask at hello@fordeal.ai. |
| Fixation-end watcher | an unconfirmed watcher after 7 days, a confirmed one 30 days after the end date; at once when you cancel it. |
Your rights
You have the right of access to your data, to rectification, erasure, restriction of processing and portability, and the right to object to processing based on legitimate interest. Write to hello@fordeal.ai; we reply within one month. You can delete the account and all its data yourself in the account settings.
You can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz) or with the authority of the country where you live. We make no automated decisions about you with legal effect: the order of offers is a calculation from the product price and the shop's rating (optionally with shipping).
Contact
Banbosh Studio, Petr Knobloch, company ID 06535666, Praha, hello@fordeal.ai.