Privacy

vmprices shows public list prices. You can use all of it without an account. Only price alerts need one.

Visitor statistics

Page views are counted by the server from the request itself, with no cookies and no script: the page, where a visit came from, the country, city and network (internet provider) Cloudflare derives from the connection, and the kind of browser and device. To tell visitors apart for a day, the server keeps a one-way hash of the connection and browser with a secret that changes every day and is deleted the next day. IP addresses are not stored.

Price alerts

When you sign up for alerts we store:

• your email address, and your password as a salted PBKDF2 hash (the password itself is never stored);
• what you follow, with its trigger, and the date and prices of the last alert for each;
• for each device where you turn notifications on, the address your browser's push service (Google, Mozilla or Apple) gave it, and the keys to encrypt messages to it. The push service passes the message on but cannot read it;
• a sign-in cookie (vp_session, 60 days); the server keeps only a hash of it;
• a log of the alerts sent: when, for which price, and the old and new price.

Email (confirming your address, a new password, alerts) goes out from info@vmprices.com through Cloudflare Email Service. The site runs on Cloudflare (Workers and the D1 database).

Every alert has a link that stops it. Deleting your account on the alerts page removes your account, what you follow, your devices and your sign-ins at once. The log of alerts sent holds no email address and nothing that leads back to you.

Contact

Questions about your data, or anything else: info@vmprices.com.