Privacy Policy

This says what StorefrontCheck keeps about you, why, and for how long. It is short because the service holds very little.

Who holds it

Kristiyan Kaloyanov Krastev, in Bulgaria, is the controller of the personal data described here. Write to [email protected] about anything on this page.

What we keep

• Your email address and password. The address is your login and the only way we have of reaching you. The password is never stored: what we keep is a hash of it, which cannot be turned back into the password.
• The stores you add. Their web address, the collection and product you want checked, and your settings. If a store is not published yet and you give us its storefront password, that password is encrypted before it is stored.
• The results of checks. What each check looked at and what it found: addresses on the storefront, prices, whether a button worked.
• Sign-in records. When you last signed in, and a session identifier in a cookie so you stay signed in.

We do not use advertising cookies, we do not track you across other websites, and there is no analytics script on the dashboard.

Why we are allowed to

To provide the service you asked for, which is the contract between us, and to keep it secure and working, which is our legitimate interest. Billing records are kept because tax law requires it.

Who else sees it

• Paddle.com Market Ltd, who take the payment as merchant of record. They receive your billing details directly; we never see your card.
• The company hosting our servers, which are in the European Union.

Nobody buys this data and nobody is given it for their own purposes. We hand it over to an authority only where the law requires it.

The stores themselves

A check visits a public storefront the way any visitor does, and reads what that page shows. It does not sign in to a store's admin, it does not read orders, and it does not touch anybody's customer data.

How long

• Check results are kept for seven days and then deleted automatically.
• Your account and your stores are kept while the account exists.
• Sign-in sessions expire after thirty days.
• Billing records are kept for as long as tax law requires.

Ask us to delete your account and everything of yours goes with it, except records we are required to keep.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Write to [email protected] and we will answer within thirty days. If you are not satisfied, you may complain to the data protection authority where you live.