This notice explains how WillItCostMore handles personal data when you use the website, create a price alert, or contact us. The service is designed to collect only the personal data needed for these functions.
WillItCostMore is operated from Switzerland. The controller responsible for the purposes and means of the processing described in this notice is identified below.
If you create an alert, we store your email address, selected market and product, interface language, a random unsubscribe token and the time the subscription was created. We use these data only to operate the alert you requested unless you separately choose another service in the future.
When you visit the site, Railway and Cloudflare can process ordinary technical request and security data such as IP address, request time, requested URL, user-agent and security signals needed to deliver, protect and diagnose the service. WillItCostMore does not currently use these data for behavioural advertising or cross-site profiling.
If you email [email protected], [email protected] or [email protected], we process the address, message content and related mail metadata needed to receive, respond to and retain the correspondence for as long as reasonably necessary.
We use alert subscription data to provide the alert you explicitly request. Where the EU or UK GDPR applies, we rely on consent for the alert subscription and delivery; you can withdraw that consent by unsubscribing. We use necessary technical and security data to operate, secure and troubleshoot the service and, where the EU or UK GDPR applies, generally rely on our legitimate interests in providing a secure and reliable service. We process contact correspondence to respond to your request and manage the resulting relationship. We do not bundle marketing consent with price alerts.
Railway hosts the application and PostgreSQL database. Cloudflare provides DNS, reverse-proxy/security services and inbound email routing. Resend sends transactional and alert email. GitHub provides source hosting, deployment automation and scheduled forecast jobs that may access production data as required to run the service. The operator’s destination mailbox provider can also process messages sent to the public contact addresses.
Railway DPA ↗ · Cloudflare DPA ↗ · Resend DPA ↗ · GitHub Privacy ↗
The application and database are currently deployed in Railway’s Amsterdam region in the Netherlands. Cloudflare, Resend, GitHub and their subprocessors may also process data in the United States and other countries disclosed in their current service documentation. Where applicable law restricts an international transfer, WillItCostMore relies on the relevant provider agreements and transfer safeguards, such as adequacy mechanisms or contractual clauses, as applicable.
Active alert subscriptions are kept while the alert is active. Unsubscribing deletes the subscription record from the WillItCostMore subscriber database. Failed-email outbox records are automatically pruned after the configured retention period (30 days by default). Independent infrastructure/provider logs can have their own retention periods.
WillItCostMore uses HTTPS, access-controlled service accounts, managed infrastructure and restricted production credentials. No internet service can promise absolute security. We limit the personal data collected and use providers with published security and data-processing commitments appropriate to their role.
WillItCostMore automatically generates product- and market-level price-pressure forecasts. Subscriber personal data are not used to make automated decisions about an individual that produce legal or similarly significant effects.
Under the Swiss Federal Act on Data Protection, you can request information about personal data processed about you and, where the legal requirements are met, request correction or deletion/destruction. You may contact the Swiss Federal Data Protection and Information Commissioner if you believe your data-protection rights have been infringed.
Where the GDPR applies, you may have rights of access, rectification, erasure, restriction, objection and data portability, and the right to withdraw consent without affecting earlier lawful processing. You may complain to the competent supervisory authority in your EEA country.
Where UK data-protection law applies, you may have corresponding rights including access, rectification, erasure, restriction, objection and portability, and the right to complain to the UK Information Commissioner’s Office.
WillItCostMore does not currently serve Google AdSense or other behavioural advertising and does not currently run third-party analytics. Before advertising or non-essential analytics is activated, this notice and the consent setup will be updated and any required consent mechanism will be implemented.
We may update this notice when the service, providers or legal requirements change. The review date below identifies the current version. Material new uses of personal data will be disclosed before they begin where required.