1. Information we collect
We may collect the following categories of information:
- Account information: your email address, display name, profile image, authentication provider, and account identifiers.
- Saved-search and preference data: search names, keywords, exclusions, price ranges, listing formats, conditions, alert settings, saved listings, hidden listings, and viewed status.
- Alert and communication data: alerts created for your account, email-delivery status, and preferences relating to new listings, price changes, and ending-soon reminders.
- Usage and technical data: browser and device information, IP address, timestamps, pages visited, diagnostic logs, security events, and interactions such as outbound listing clicks.
- Marketplace data: public or user-visible listing information retrieved from eBay or other supported marketplaces, including titles, prices, images, seller information, listing dates, locations, descriptions, and URLs.
- Chrome extension data: if you use the RareAlert Marketplace Chrome extension, we may process Facebook Marketplace listing information visible in your browser during a RareAlert scan, along with an extension connection token used to associate the extension with your RareAlert account.
2. How we use information
We use information to:
- create and maintain your RareAlert account;
- run saved searches and match marketplace listings to your criteria;
- show personalized feeds, saved items, hidden items, and price history;
- send account, security, and opt-in alert emails;
- prevent duplicate alerts, fraud, abuse, and unauthorized access;
- measure performance, diagnose errors, and improve RareAlert; and
- comply with legal obligations and enforce our Terms of Service.
3. Authentication and account providers
RareAlert uses Supabase for authentication and account data. If you sign in with Google, Google provides RareAlert with the basic profile information authorized through the sign-in flow, such as your email, name, profile image, and provider account identifier. RareAlert does not receive your Google password.
4. Service providers
We use service providers to operate RareAlert. Depending on the feature you use, information may be processed by:
- Supabase for authentication, database storage, scheduled jobs, and server functions;
- Vercel for website hosting, deployment, and server-side request processing;
- Resend for delivering account and alert emails;
- Google when you choose Google sign-in; and
- eBay when RareAlert searches public listings or redirects you to an eBay listing.
These providers process information under their own terms and privacy policies and only as needed to provide their services to RareAlert.
5. Affiliate links and outbound clicks
RareAlert participates in the eBay Partner Network. When you click an eBay listing link, RareAlert may record the outbound click and redirect you through an affiliate URL. RareAlert may earn a commission from a qualifying purchase at no additional cost to you. eBay may collect information about your visit under eBay's own privacy practices.
6. Cookies and local storage
RareAlert and its authentication providers may use cookies or similar browser storage to keep you signed in, remember interface preferences, protect sessions, and operate core features. Some interface state may also be stored locally in your browser. You can clear browser storage, but doing so may sign you out or reset preferences.
7. Facebook Marketplace Chrome extension
RareAlert offers an optional Chrome extension that helps scan Facebook Marketplace for listings that may match your RareAlert saved searches. The extension operates using the Facebook session that is already active in your browser. RareAlert does not receive your Facebook password, Facebook cookies, or Facebook login credentials.
When you start a Marketplace scan, or when you enable an automatic scan, the extension may read listing information that is visible on Facebook Marketplace pages in your browser. This may include listing titles, prices, images, listing URLs and identifiers, visible location text, descriptions or other listing text, and listing availability information. The extension sends information needed for matching and alert features to RareAlert so we can compare listings with your enabled saved searches, prevent duplicate processing, verify possible matches, and display matching listings in your RareAlert account.
The extension stores limited settings and scan state locally in Chrome, including the RareAlert extension connection token, scan schedule, recent listing identifiers, and temporary queue or verification state. The connection token is used only to authenticate the extension to RareAlert and can be revoked by disconnecting the extension.
RareAlert does not use Facebook Marketplace browsing data collected by the extension for advertising, creditworthiness, lending, or sale to data brokers. We use extension data only to provide and improve the user-facing RareAlert Marketplace search, matching, alert, security, and troubleshooting features described in this policy. Our use of information received through the Chrome extension is limited to providing or improving these disclosed features and complies with the Chrome Web Store User Data Policy, including its Limited Use requirements.
Automatic scans require Chrome to be running and your Facebook session to remain signed in. You can stop a scan, disable automatic scanning, disconnect RareAlert from the extension, or uninstall the extension at any time.
8. When we share information
We do not sell your personal information. We may share information:
- with the service providers listed above;
- when you direct us to interact with a third-party service;
- to investigate fraud, abuse, security incidents, or violations;
- when required by law, court order, or valid governmental request; or
- as part of a merger, acquisition, financing, or sale of assets, subject to appropriate safeguards.
9. Data retention and account deletion
We retain account and service data for as long as your account is active or as reasonably necessary to provide RareAlert, comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements.
You may permanently delete your RareAlert account from Account Settings. Account deletion removes the authentication account and associated user-specific data, including saved searches, alerts, queued alert emails, preferences, favorites, hidden listings, listing notes, and account settings. This action is permanent and cannot be undone.
Outbound-click records may be retained without the deleted account's user identifier. Shared marketplace listing records, aggregated or de-identified analytics, security records, and information we must retain for legal or fraud-prevention purposes may also remain where appropriate.
10. Your choices and data rights
You may:
- update or delete saved searches, alerts, saved listings, and preferences;
- disable optional email alerts;
- sign out or revoke Google access through your Google Account settings;
- permanently delete your account through Account Settings;
- request access, correction, or export of your account data; and
- contact us about rights available under applicable privacy law.
To delete your account, open RareAlert's Account Settings and select Delete account. You will be asked to confirm the permanent deletion before it is processed. For another privacy request, contact us at support@rarealert.io from the email address associated with your account.
11. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security, and you are responsible for protecting access to your email account and devices.
12. Children's privacy
RareAlert is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it where appropriate.
13. International use
RareAlert and its providers may process information in the United States and other countries. Privacy protections may differ from those in your location. Where required, we rely on lawful mechanisms for cross-border processing.
14. Changes to this policy
We may update this Privacy Policy as RareAlert changes. We will post the revised policy here and update the date above. Material changes may also be communicated through the website or by email when appropriate.
15. Contact us
Questions or privacy requests can be sent to support@rarealert.io.