Privacy policy

Who we are

Watchlist (justwatchlist.com) is run by It depends OÜ, registry code 16135274, Marati tn 5, 11712 Tallinn, Estonia. We are the controller of your personal data. Write to hello@justwatchlist.com with any question about your data.

What we store and why

Your account: your email address and language. We need them to sign you in with a code and to send you reminders (contract).

What you save: product links, names, prices, sizes and colours you chose, your reminders and notification settings, and when you were last told about a product. This is the service itself (contract).

Your devices: if you turn on phone notifications, the push subscription your browser gives us; if you link the Chrome extension or the iPhone Shortcut, a personal key we store only as a fingerprint (contract).

Payments: your subscription status and plan. Card details go to Stripe and never reach us. Invoices are kept as accounting law requires (legal obligation).

Save log: for 90 days we keep a record of what was saved and whether it worked, including the address of a page where the extension found no product, so we can fix shops that don’t work (legitimate interest).

Usage: to run and improve the service, we record what happens in your account — for example that you signed up, saved a product, turned on a reminder, received an alert, or started or ended a subscription — together with your account’s internal ID only, never your email or what the product is (legitimate interest). We use PostHog (EU) for this.

Security: short-lived counters to stop abuse (with your email address or IP turned into an unreadable code) and error reports without personal data (legitimate interest).

The Chrome extension

The extension reads a page only when you click it. For shops that block our server and that you allow one by one, it checks your saved products in the background while Chrome runs. It sends us the price, stock and a small part of the page around the price, never the whole page and never your browsing history.

Cookies and analytics

Essential cookies keep you signed in and remember your language and choices; they don’t need consent. Analytics in your browser (Google Analytics for how people find us, PostHog for how the site is used) runs only if you accept it in the cookie banner, with advertising features off and no recording of what you type (consent). You can change your choice any time under “Cookie settings” at the bottom of the page.

Service providers

Like most online services, we use trusted providers to run Watchlist: hosting and the database, sending emails, payments (Stripe), error reports, product analytics (PostHog, EU) and, only with your consent, Google Analytics. They process data only on our instructions, under data processing agreements, and mostly within the EU.

Where data may leave the EU, it is protected by the EU–US Data Privacy Framework or the EU’s standard contractual clauses. To read some product pages we use an AI service; it gets only the shop’s page content, never anything about you. We don’t sell your data or use it for advertising. Ask us at hello@justwatchlist.com if you’d like the full list of providers.

How long we keep it

Your account and everything you saved: until you delete your account. The save log: 90 days. Usage records: up to 2 years. Error reports and abuse counters: a few weeks at most. Backups roll over within days. Invoices: 7 years, as Estonian accounting law requires.

Your rights

You can see, download and delete your data yourself in Settings. You can also ask us to correct or restrict it, object to how we use it, or withdraw consent you gave (analytics, notifications) at any time. Write to hello@justwatchlist.com; we answer within a month.

If you think we got something wrong, please tell us first. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority in your country.

Age

Watchlist is for people aged 16 and over.

Changes

If we change this policy in a way that matters, we’ll tell you by email before it takes effect. The date at the top shows the latest version.