Privacy notice

This notice describes the information used by the current public website. Browsing the catalog does not require an account or an email subscription.

Browsing and technical data

Requests can include your IP address, browser information, requested URL, and time of access. Hosting and security services may process this data to deliver the website, diagnose errors, and protect against abuse. Avoid putting private information in search queries.

Search abuse controls keep short-lived counters keyed by a protected representation of your IP address. The raw address is not stored in these counters, which expire within two minutes. People sharing a network can share a search allowance.

Cookies and local preferences

A language cookie remembers your selected language. A security cookie protects form submissions against cross-site request forgery. Your light or dark theme preference is stored locally in your browser. You can remove these preferences using your browser controls.

A local preference remembers that you dismissed the cookie notice. Security, administrator sessions, and temporary form confirmations also use Django's technical cookies. Dismissing the notice does not subscribe you to email or authorize future analytics.

Dates are displayed using your browser's timezone. This display does not create a registered visitor record.

Product statistics

Rapinfly stores daily counts of product page views, short normalized search terms and searches without results to improve discovery. These daily aggregates do not store IP addresses, visitor identifiers, cookies or browsing histories. URLs, email-like input and long numeric identifiers are excluded from stored search terms, but avoid entering private information. Only superadministrators can view the report.

To avoid counting product-page reloads, a temporary cache keeps a keyed, product-specific fingerprint of your IP address for 60 minutes after the first accepted view. The raw address is not stored in these markers. People sharing an IP address can be grouped together; changing addresses can count again. These are not unique-person counts. Search totals still count requests.

Advertising

The MVP does not display third-party advertising or embed third-party analytics scripts. Affiliate store links can still include tracking parameters used by those stores.

Weekly email subscription

If you subscribe, Rapinfly stores your email address, language, and confirmation or withdrawal history for your current consent cycle. Your address remains pending until you confirm it. The newsletter contains promotional product discoveries and may lead to affiliate store links.

Resend processes email addresses and message content to deliver these emails. Messages include an unsubscribe link that works without an account. You can also ask an authorized Rapinfly operator to withdraw your subscription. Delivery records track sending attempts and provider acceptance; acceptance does not prove inbox delivery.

Contact messages

The contact form uses Cloudflare Turnstile to help prevent automated abuse. When enabled, Cloudflare processes technical browser and connection information to perform this security check. Your message is sent to Rapinfly, not included in the verification request.

When you send the contact form, Rapinfly stores your name, email address, subject, and message as a private support ticket for authorized operators. We use these details to handle your request. Emailing us also shares the details you choose to provide. Contacting us does not subscribe you to marketing email. Do not send passwords, payment details, or unnecessary sensitive information.

To limit abusive submissions, short-lived counters use a keyed representation of your network address rather than storing the raw address in the counter. These records expire within 20 minutes. The form does not accept attachments or provide a public ticket lookup.

Stores and external images

Opening a store link takes you to a separate service with its own privacy practices. Store links may contain affiliate tracking parameters. Loading an externally hosted product image sends a request to that image host, which can receive technical connection data. Rapinfly requests images without sending the referring page URL.

Retention and your choices

Contact and technical information should be retained only as needed for the stated purposes, security, and applicable legal obligations. The operator must finalize hosting, email-provider, and retention arrangements before launch. No automatic deletion period is promised by this draft.

You can clear browser preferences, choose not to follow external links, and contact the operator about access, correction, or deletion of information you provided. Requests are handled according to applicable law and any necessary identity checks.

Contact Rapinfly about privacy.