Privacy Policy

Who we are

SpoorBase is operated by Liron Carmeli, who is responsible for the personal data described here. Privacy questions and requests can be sent to spoorbase.business@gmail.com.

What we collect

Account data: your email address, name if you provide one, password (stored only as a one-way hash) or, if you sign in with Google, the email address and name Google shares with us. Product data: your watchlist, alert settings and saved preferences. Billing data: your subscription status, plan, invoices and the card brand, last four digits and expiry. Messages you send through the contact form. Technical data: session and device information needed to keep you signed in, and a hashed form of your IP address used to prevent abuse. When analytics is enabled, PostHog receives page paths, browser and device information, account identifiers, subscription tiers and account activity to help us understand usage and diagnose problems. We do not send your name, email address, passwords, form contents or URL query parameters to PostHog, and we do not record your screen.

How we use it

Account and product data are used to operate the service — signing you in, storing your watchlist, and sending the alerts you configured. We also use your email address for account and billing notices such as verification, password reset and receipts.

We process your data to perform our contract with you, to comply with legal obligations such as tax record-keeping, and for our legitimate interest in keeping the service secure and free of abuse. We do not sell your personal data and do not use it for advertising.

Payments

Payments are processed by Paddle.com, our Merchant of Record, which collects your payment and billing details under its own privacy policy at paddle.com/legal/privacy. SpoorBase never receives your full card number and stores only the card brand, last four digits and expiry needed to display your payment method.

Service providers

We share personal data only with providers that help us run the service: Paddle.com for payments, billing and tax; Google if you choose to sign in with Google; Resend for sending email; PostHog for usage analytics and operational monitoring; and our hosting and database providers. Each processes the data only as needed to provide its service.

Cookies

SpoorBase uses essential cookies for sign-in, form security and Google sign-in. Your browser also stores a copy of your signed-in profile so pages load quickly and remembers your analytics consent choice for up to 180 days. We do not use advertising cookies, and PostHog analytics does not set cookies. Paddle's checkout may set its own cookies when you pay.

Optional PostHog usage analytics starts only after you choose Accept analytics. Rejecting does not affect access to SpoorBase. Use Cookie settings in the footer to change or withdraw your choice at any time. Withdrawal stops new browser and request-based account analytics; it does not erase previously collected records. Browser Do Not Track and Global Privacy Control signals keep analytics off. Essential operational logs continue independently of your analytics choice.

Retention and deletion

Product data is retained while your account is open. Deleting your account removes your watchlist, alert settings and account record; billing records are retained where required for tax and accounting purposes.

Your rights

You can ask us to access, correct, export or delete your personal data, or object to how we use it, by emailing spoorbase.business@gmail.com. You can delete your account yourself at any time from Account settings. If you are in the EU, EEA or UK, you may also complain to your local data protection authority.

Changes to this policy

We may update this policy as the service changes. The date at the top shows when it was last revised, and we will notify you by email of significant changes.