Privacy
Last updated: October 2026
In short
Dropbeep keeps only what it needs to watch prices and alert you. We don’t sell data, show ads or store your browsing history.
Who is responsible
- Controller: Amin Tahtah Toumi
- Contact: [email protected]
What we keep
- A random install identifier (stored hashed), to recognise the extension.
- Your Google account ID and email, only if you sign in, for your account and email alerts.
- The products you track (link, title, image, price) and the alert rule you choose.
- Your browser’s language, to send you alerts in your language.
- Your plan and Stripe customer IDs if you subscribe. Payment details are handled by Stripe; we never see them.
- Your Telegram chat, only if you connect it.
- Per-store, per-day statistics (successful or failed checks, pages where a price was found), with nothing that identifies you.
- Contact form messages (name, email and message), only to reply. Deleted after 180 days.
- Invitations: if you invite someone, their email, to send them a single message from you and give them their free days if they join. If they don't join within 60 days we delete the address and keep only an encrypted fingerprint so they aren't invited again.
- If you uninstall the extension, the reasons you tick and your comment on the farewell page, with a summary of how it went (plan, days used, number of products and alerts, stores and extension version), with nothing that identifies you. Deleted after a year.
Why, and on what legal basis
- Providing the service (watching prices, your account, your browser, email or Telegram alerts, and your plan): necessary to perform the contract you accept by using Dropbeep.
- Billing subscriptions: performing the contract and meeting tax obligations.
- Answering your messages: your consent, given when you send the form and withdrawable at any time.
- Preventing abuse and improving how prices are read, with anonymous per-store statistics: our legitimate interest in keeping the service working.
- Understanding why people uninstall Dropbeep, to improve it: our legitimate interest. Answering is optional.
- Sending an invitation: the inviter's and our legitimate interest in sharing Dropbeep; it's a single email that says who sent it, and the invited person can ignore it.
What we don’t keep
Your name or photo (your Google photo stays in your browser, to show it in the extension), IP addresses (used in memory only, to prevent abuse), your country (used on the spot to show prices in euros or dollars), or your browsing history: the extension reads a page only when you open Dropbeep on it.
Who processes data for us
We don’t sell or hand over your data. We use these providers, who process it only to provide their service to us:
- Oracle Cloud: Dropbeep’s server, in Madrid (EU).
- Cloudflare: the website’s network and security; it sees your IP address when you visit.
- Google: signing in with your Google account.
- Stripe: subscription payments and billing.
- Resend: sending email alerts.
- Web3Forms: delivers contact form messages to our inbox.
- Telegram: sending alerts, only if you connect the bot.
- Google Analytics: visit statistics for this website, only if you accept cookies.
Some of these providers may process data outside the European Economic Area. When they do, it is under the safeguards the GDPR requires, such as the European Commission’s standard contractual clauses.
How long we keep it
For as long as you use Dropbeep, except as described in the next section. Contact messages are deleted after 180 days, and uninstall answers after a year. Billing records are kept by Stripe for as long as tax and commercial law require.
If you stop using Dropbeep
When you uninstall the extension, Chrome lets us know: without an account, your data is deleted right away; with one, your products are paused until you sign in again. If you don’t use Dropbeep for 60 days, we check your products every 6 hours; if your browser doesn’t check in for 30 days, we pause them (they resume on their own when you’re back). Installs without an account idle for 90 days and free accounts idle for 12 months are deleted. Paid plans aren’t affected.
Your rights
You can access, correct or delete your data, object to or restrict its processing, ask for a portable copy, and withdraw your consent at any time. To delete your account and all your data right away, go to the extension: Settings → Delete account and data. For anything else, write to us at [email protected] or through the contact form.
If you think we haven’t handled your data properly, you can complain to the Spanish Data Protection Agency (AEPD).
Affiliate links
The extension never changes links. This website may include Amazon affiliate links in the future; if it does, they’ll be clearly marked.