Legal & transparency

Privacy Policy

Updated October 17, 2026 · Describes the current SureDeal starter application.

This page describes the current starter application's browser, account, shopping research, watchlist, analytics, and price-history behavior. The backend address can be configured in the workspace; use only a backend you trust.

Information stored in your browser

Depending on the features you use, this browser may store saved product links, recent analysis URLs, guest watchlist reminders, feedback drafts, the API address, theme, preferences, and an analytics opt-out setting in local storage. These items remain on this browser until you clear them or browser data is removed. The Android app uses bundled website assets and may store the same local workspace data on that device.

Information sent to a backend

When you analyze or compare a product, the submitted product URL and request data needed for that feature are sent to the backend address configured in Settings. Signed-in account actions send the information needed to authenticate and perform that action. Do not submit private URLs or sensitive personal information.

Product-source checks are restricted to the independent retailer and manufacturer domains approved by the backend source policy. Amazon and Flipkart are not used as SureDeal product-data sources. Price retrieval can be unavailable. A missing or unverified price is not represented as a verified offer. No official retailer partnership is promised by this page.

Accounts, sessions, watchlists, and alerts

When account features are enabled, your email address, optional display name, salted password hash (not your raw password), preferences, watchlists, price-alert settings, and in-app notifications are associated with your account in the configured backend database. The application uses an HttpOnly session cookie; production cookies are Secure, and the configured SameSite policy can affect whether sessions work in the Android app. Session records expire after 30 days. Verification and password-reset requests can send your email address and a single-use action link through the backend's configured SMTP provider. Price notifications are recorded in-app; outbound price-alert email delivery is not active in the current configuration.

Price history and analytics

Price history is intended to contain observations that have been verified by the configured backend. Records may include the product page URL, product and merchant identifiers, price, currency, source evidence, and observation time. Historical data describes recorded observations and may be incomplete or unavailable. Global product observations are not part of an individual account’s private watchlist.

First-party analytics records fixed page categories and product-check/comparison outcome counts, with a 180-day retention cleanup. These analytics rows do not contain full product URLs, account IDs, cookies, or visitor identities. The analytics request itself is sent to the configured backend and may be subject to that backend host's ordinary connection and security logging. You can disable these first-party events in the workspace where that control is available; Do Not Track and Global Privacy Control are also respected by the website analytics script. This is not a claim that network infrastructure keeps no technical logs.

AI features

When configured search-backed features run, the backend sends a search query derived from the submitted product or request to its configured search provider. Provider order is Tavily, Brave Search, then Serper; each provider has its own data and retention practices. When AI research or explanations are enabled, the backend sends the relevant product query and evidence context to Anthropic's Claude API. AI output can be incomplete and is not a source of verified price evidence. These services are optional backend integrations; live availability depends on configuration. Review the providers' own privacy information before using these features.

Retailers and external links

For supported product checks, the configured backend may request the submitted product URL from an approved retailer or manufacturer source to retrieve available listing evidence. Search discovery may send a derived query to a search provider. External merchant, provider, and policy links open sites governed by their own privacy practices. SureDeal does not control those sites.

Retention and deletion

Use the workspace privacy controls to clear local browser data. Signed-in account deletion removes account-associated data handled by the configured backend; global verified price observations may remain independently of an account. Session records expire after 30 days and analytics events are cleaned up after 180 days. Other server records, retailer observations, infrastructure logs, and backups may have separate retention based on the backend operator and deployment configuration. The project does not provide a universal deletion or retention schedule for those records.

Contact

Contact [email protected] or use the workspace customer service form.

This page describes the current software behavior and is not a statement about a registered company, certification, retailer affiliation, or legal compliance review.

Signup administration

When you create an account, your email address is also sent to the SureDeal administrator for signup administration. Passwords, verification codes, and session tokens are not included in this notification.

Customer support

When you submit the customer service form, your email address, selected topic, and message are sent to [email protected] for handling your complaint and replying to you.

Contact support