Privacy Policy

Last updated: 24 October 2026

Controller: KSM - F.Z.E, Office C1 - 1F - SF3515, Ajman Free Zone C1 Building, Ajman, United Arab Emirates, registration number 38872 (Ajman Free Zone), VAT 105206954700001 (UAE Corporate Tax TRN). Contact for privacy questions: hello@instockradar.com.

What we collect and why

• Alerts (model, colours, storage, stores or an area, channels): to run the alerts you ask for. Legal basis: contract.
• Location: your approximate area (from your IP, never stored) sorts stores by distance. If you use "Use my location" it stays in your browser; if you create a radius alert we store that point to match nearby stores. Basis: contract.
• Email: when you set up an alert we keep the address you type, even if you don't buy, to deliver the alert, tell you about its status (for example that it's waiting for payment and how many restocks happened since) and sign you in. Basis: contract and legitimate interest. Restock news and offers only if you tick the box for it (never pre-ticked); every email has an unsubscribe link, and we record when and with which wording you agreed.
• Notification subscription (a technical address from Apple, Google or Mozilla's push service) and Telegram chat id if you connect Telegram. Basis: contract.
• Payments: handled by Paddle.com, our merchant of record (we never see your card); we keep the subscription status, amounts and Paddle's transaction references for accounting. Basis: contract and legal obligation.
• Attribution: the first page and referrer that brought you, stored with your account to know which channels work. Basis: legitimate interest.
• Analytics: anonymous usage events (pages, searches), only if you allow analytics. Basis: consent. You can withdraw it in Cookie settings.
• Search statistics: without cookies, we count page fetches by search engine crawlers and visits that arrive from a search engine or AI assistant (only the engine's name, the page and its country, nothing about you). Basis: legitimate interest.
• Security logs: kept by our hosting provider for a short time to prevent abuse. Basis: legitimate interest.

Who processes data for us

Cloudflare (hosting, database, email delivery), Paddle.com (our reseller and merchant of record: it processes your payment and your billing details as an independent controller), push services of Apple, Google and Mozilla (notifications), Telegram (if you connect it), Resend (email delivery, if enabled), Google Analytics (only with your consent and if enabled). Some are outside your country, including in the United States; transfers rely on the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

How long we keep it

Account, alerts and emails you gave us: until you delete them or unsubscribe; inactive for 24 months: deleted. Delivery logs: 12 months. Raw analytics: 90 days. Payment records: as long as accounting law requires (up to 10 years); Paddle keeps its own records as the seller.

Your rights

You can access, correct, export and delete your data: "My alerts" has Download my data and Delete my account. You can also object to processing based on legitimate interest, withdraw consent at any time, and complain to your data protection authority. Write to us for anything else.

Children

The Service is not intended for anyone under 16.