Privacy

Your email address is not stored

Registering computes a keyed one-way digest of your address and keeps that. The address itself is never written down, which is why ACIE cannot email you and cannot tell anyone whether a given address has an account. Your password is stored as a salted scrypt digest, never in a form that can be read back.

What is kept while you have an account

• Your searches, so the account page can show them back to you.
• Favourites and price watches, including the price a watch was created at.
• Notifications generated for you, such as a price drop on something you watch.
• Your language and currency preference.

Following an outbound link records the click, but not you: the log holds the offer, the time, a device class and a country, and it has no column that points back at an account. No IP address and no user agent are stored.

Browsing without an account writes no search history and no favourites. A session is a signed cookie, marked HttpOnly and SameSite, sent over HTTPS only, and it expires; signing out ends it immediately.

Erasure

Erasure destroys the key that seals anything held about you, then deletes the account, its password, its searches, its favourites and price watches, and its notifications. The click log is left alone because there is nothing of yours in it.

This deployment publishes no contact address, so erasure has to be requested from whoever operates it.