Privacy Policy
Last updated: 18 July 2026
1. Who is responsible
Margarita Rusetskaya
Rosa-Luxemburg-Straße 49, 10178 Berlin, Germany
margarita@pickyme.site · +49 176 80554975
We have not appointed a Data Protection Officer — we are not required to.
2. What we collect, why, and on what basis
Account
- What:
- your email address.
- Why:
- to create your account and let you sign in with a one-time code.
- Basis:
- Art. 6(1)(b) GDPR — performance of a contract.
- Kept:
- until you delete your account.
Your saved items
- What:
- product name, brand, store, product URL, price, price history, image URL.
- Why:
- to show your wishlist and tell you when a price drops.
- Basis:
- Art. 6(1)(b) GDPR.
- Kept:
- until you delete the item or your account.
Telegram (only if you connect it)
- What:
- your Telegram chat ID.
- Why:
- to send you price-drop alerts and let you save by sending us a link.
- Basis:
- Art. 6(1)(a) GDPR — consent. You can disconnect at any time.
- Kept:
- until you disconnect.
Newsletter (only if you subscribe)
- What:
- your email address and the time you consented.
- Why:
- to send you the newsletter.
- Basis:
- Art. 6(1)(a) GDPR — consent. Every email has an unsubscribe link.
- Kept:
- until you unsubscribe.
Browser extension — page content
- What:
- the extension shows a "Save to Picky Me" button on product pages. The script that draws the button is present on the page, but it sends NOTHING on load — it only looks at the page locally to decide whether to show the button. When you click Save (the on-page button or the toolbar icon), the extension sends the product’s details and its URL to our server. Before sending, it trims the page down to the product’s own region (name, image, price) in your browser — it never sends the whole page.
- Why:
- to read the product's name, image and price so we can save it.
- Basis:
- Art. 6(1)(b) GDPR — you asked us to save that product.
- Kept:
- NOT KEPT. The trimmed content is processed and discarded immediately. We store only the resulting product details. The extension never transmits a page's content unless you click Save.
Analytics
- What:
- usage data via Google Analytics 4 (measurement ID G-R6R0D6WYRH).
- Why:
- to understand which collections people read.
- Basis:
- Art. 6(1)(a) GDPR — consent, via the cookie banner. Nothing is measured until you accept. Advertising features, ad personalisation and ad data sharing are switched off.
- Kept:
- 2 months. We keep the shortest period Google offers.
Server logs
- What:
- IP address, time, requested page, user agent.
- Why:
- to run and secure the site.
- Basis:
- Art. 6(1)(f) GDPR — legitimate interest.
- Kept:
- a short period, then deleted. This data is processed at the edge by our hosting and content-delivery provider (Cloudflare) to run and secure the site; we do not keep our own long-term server logs.
3. Who else sees your data
We use these providers. They process data on our behalf, under contract:
- Supabase
- database, accounts, server functions — EU region
- Cloudflare
- hosting and content delivery
- Resend
- transactional email (sign-in codes, alerts) — EU region
- ScrapingBee
- fetches product pages when you save by link
- Zoho Mail
- our own mailbox (if you write to us) — EU servers
- Google Analytics
- usage measurement — only with your consent
- Telegram
- only if you connect it
When you click through to a shop, the affiliate network handling that link (CJ Affiliate, Awin, Kelkoo, Shopnomix, Amazon Associates) records the click so the commission can be attributed. That happens on their side, under their own policies.
Transfers outside the EU: Google Analytics involves a transfer to the United States. This only happens if you consent. Your account, your saved items and our emails stay in the EU. Cloudflare operates a global network, so basic request data may be processed on servers outside the EU; and ScrapingBee, which fetches a product page only when you save by link, may likewise process that request outside the EU. In both cases the provider acts under its standard data-protection terms.
4. Your rights
You can ask us to: show you your data, correct it, delete it, restrict how we use it, give you a copy to take elsewhere, or object to processing. Where we rely on consent, you can withdraw it at any time — that doesn't affect what we did before.
Write to margarita@pickyme.site. We answer within one month.
You can also complain to a supervisory authority. Ours is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61, 10555 Berlin — datenschutz-berlin.de
5. Cookies
We set a cookie only for analytics, and only after you accept. Your choice is stored locally in your browser so we don't ask again. You can change it any time via the cookie banner.
The extension stores one item locally: the token that links it to your account. It is not a cookie and is never sent anywhere except to us.
6. Children
This site is not intended for children under 16.
7. Changes
If we change how we handle your data, we'll update this page and, where the law requires it, tell you directly.