Privacy policy

StockRadar UK (“we”, “us”) is a small, independent restock-alert service for UK collectors of Pokémon, One Piece, Lorcana, Riftbound, Palworld, Magic and Gundam cards at stocksradar.uk. We’re not affiliated with Nintendo, The Pokémon Company, Bandai, Disney, Ravensburger, Riot Games, Pocketpair, Bushiroad, Wizards of the Coast, Bandai, Sotsu, Sunrise, The LEGO Group, Sony Interactive Entertainment, Rockstar Games or any shop. For anything about your data, email [email protected].

• Your watchlist: a cookie keeps your watchlist in this browser, so you don’t need an account. We store the products you watch and your alert settings (price limits, quiet hours, snoozes).
• Account (optional): if you add one: your email, an optional name and a hashed password. We never store plain passwords.
• Telegram (optional): your chat ID when you link our bot, so it can message you.
• Discord (optional): your Discord user ID when you link, so our bot can send you direct messages.
• Alert email (optional): the address you give us for pings. We send a confirm link first and only email you after you’ve clicked it. The email you enter at Stripe checkout also becomes your alert email.
• Browser notifications (optional): if you turn them on, your browser gives us a push address run by its maker (Google, Apple, Mozilla or Microsoft). Each ping goes through it encrypted, so they can’t read it. We also note the kind of device (like iPhone or Windows), never more. Turn them off, or remove the site’s permission, and we delete the address.
• Alerts: a record of the pings we send you (product, shop, time) and whether the shop link in them was opened, so we can stop duplicates and see what’s useful.
• Postcode (Plus, optional): for nearby Smyths stores. We store it with its approximate location.
• Plus billing: Stripe handles your card. We store your Stripe customer and subscription IDs, your plan and its status, never your full card number.
• Shop orders: if you buy from our merch shop: your name, email, phone number if you give one, shipping address, what you ordered and its tracking number, plus any messages you send us about the order.
• Site usage: which pages are visited, for how long and where visitors came from, tied to a random ID kept in your browser’s local storage (not your name or email). We also use Plausible Analytics, which doesn’t use cookies.
• Technical: basic server logs (times, errors) needed to run and secure the service.

• To run your watchlist and send the pings you asked for.
• To run the free Plus week and paid Plus, and to handle cancellations and refunds.
• To post and support shop orders.
• To keep the service secure and reliable, and to improve it.

Our legal bases under UK GDPR are contract (providing what you signed up for), legitimate interests (security, fixing and improving the service) and, where we ask for it, your consent.

Only the services we need to run StockRadar:

• Stripe: payments, subscriptions and the billing portal.
• Resend: sends our emails: alert emails, confirm links, free-week reminders and order emails.
• Telegram and Discord: deliver pings, only if you connect them.
• Google, Apple, Mozilla and Microsoft: deliver browser notifications through your browser’s push service, only if you turn them on. They can’t read the pings.
• Plausible Analytics: cookie-free page statistics.
• Postcodes.io: turns a postcode into an approximate location for nearby Smyths stores.
• Royal Mail: delivers shop orders.
• Cloudflare: routes traffic to our server.

Some shop links go through affiliate networks, which may set their own cookies when you click through to a shop. We don’t sell your data or your email address to anyone.

• Watchlist cookie: keeps your watchlist in this browser.
• Sign-in cookie: keeps you signed in if you have an account.
• Preference cookies: remember your UK or US choice, and an invite code if you arrived through a friend’s link.
• Local storage: a random ID for our page statistics, pop-ups you’ve dismissed, and a backup sign-in token on browsers that block cookies.

We don't use advertising cookies or ad pixels.

We keep your watchlist and alert history while you use StockRadar. To delete it, go to your watchlist, then Settings, then Delete this watchlist (Delete account if you’ve set a password). If you pay for Plus, cancel it first with Manage billing in Settings. Or email us and we’ll delete it for you.

Stripe keeps payment records, and we keep shop order records, for as long as the law requires for tax and accounting.

Under UK GDPR you can ask to see, correct, delete or export your personal data, and object to some uses of it. Email us to do any of these. You can also complain to the Information Commissioner’s Office (ICO).

Passwords are hashed and the site uses HTTPS. Stock information comes from public shop pages and is best-effort, never a guarantee you can buy something.

StockRadar is meant for adults and collectors who can agree to a contract. If you’re under 16, please use it with a parent or guardian.

Email [email protected] or use the feedback form. See also our Terms of use.