Privacy Policy

This Privacy Policy explains how AffiStack (“we”, “us”, “our”) collects, uses, stores, and shares personal data when you visit https://affistack.store, create an account, subscribe to emails, or otherwise interact with our services.

We process personal data in accordance with the UK GDPR, the EU GDPR, and the UK Data Protection Act 2018, as applicable. This notice is provided for transparency. It is not legal advice.

1. Who is the controller

AffiStack is the data controller for personal data processed through this website.

Contact for privacy requests: [email protected]

If you prefer, you may also use our contact form.

2. Personal data we collect

We collect only what we need to operate the site, provide features you request, and (where you agree) understand how the site is used.

Account information. If you register, we collect your email address, name (if you provide one), password (stored as a one-way hash — we cannot read your password), preferred locale, and region profile.

Session information. When you sign in, we create a session and set an HTTP-only cookie named affistack_session (typically 30 days). We may store the IP address and browser user agent associated with that session to keep the account secure.

Wishlist and price alerts. If you save products or set a price alert while logged in, we store the product, your target price, currency, and alert status so we can notify you.

Newsletter. If you subscribe, we store your email address, locale, and subscription status until you unsubscribe.

Contact messages. If you write to us, we collect your name, email address, subject, message, and locale. We deliver that message to our team using Telegram’s messaging API so we can reply. Telegram processes that content under its own terms and privacy policy.

Search queries. When you submit a search, we log the query text, locale, and number of results so we can operate and improve search. Empty catalogue browsing is not logged as a search.

Analytics events (only with consent). If you accept analytics cookies, we may record events such as page views, product views, searches, affiliate clicks, sign-up, and wishlist actions. Those records may include a random session identifier, path, locale, referrer, user agent, and a hashed (not raw) IP address.

Information stored on your device. We store your cookie choice (affistack_consent) and recently viewed product identifiers in local storage on your device. A short-lived session identifier (affistack_sid) may be kept in session storage for analytics after you consent.

Automatically collected technical data. Our servers and hosting providers may process standard request logs (IP address, timestamps, requested URL, user agent) as part of operating, securing, and debugging the site.

We do not ask for payment card numbers, government ID numbers, or precise geolocation. Purchases happen on retailer sites (for example Amazon), not on AffiStack.

3. Why we use your data and legal bases

We process personal data only where we have a lawful basis under Article 6 GDPR:

• Contract (Art. 6(1)(b)) — to create and maintain your account, keep you signed in, save wishlists, send price alerts you requested, and respond to support messages.
• Consent (Art. 6(1)(a)) — optional analytics and measurement cookies (including Google tags, if configured); newsletter subscription. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.
• Legitimate interests (Art. 6(1)(f)) — to keep the site secure, prevent abuse and spam (including a hidden field on the contact form), operate search, understand aggregate product interest, and improve content. We balance these interests against your rights.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information to comply with law.

4. Cookies and similar technologies

Essential cookies and similar storage are required for the site to function (session, security, and remembering your cookie choice). These are not optional.

Analytics and advertising storage are off by default. Google Consent Mode v2 defaults ad storage, ad user data, ad personalisation, and analytics storage to denied. We only enable them if you choose Accept analytics on the cookie banner.

Retailer sites set their own cookies when you follow an affiliate link. See our Cookie Policy.

5. Who we share data with

We do not sell your personal data. We share it only as needed to run AffiStack:

• Hosting and infrastructure providers that store the website, database, and backups.
• Google (Google Analytics and, if configured, Google Ads tags), only after analytics consent. Google may process data in the United States. See Google’s privacy policy.
• Telegram for delivering contact-form messages to our team. See Telegram’s privacy policy.
• Retailers such as Amazon when you click an affiliate or product link. We do not send your account email to Amazon; the retailer receives whatever data you provide on their site, plus standard referral information. Amazon is a separate controller. See Amazon’s privacy notice and our affiliate disclosure.
• Professional advisers or authorities if required by law, to protect our rights, or in connection with a business transfer.

6. International transfers

Our service providers may process data outside the UK and European Economic Area (including the United States). Where we transfer personal data internationally, we rely on the safeguards those providers make available (such as Standard Contractual Clauses or an adequacy decision) and limit the data we send.

7. How long we keep data

• Account and profile — until you ask us to delete the account, or it is closed for inactivity or abuse.
• Sessions — until you sign out or the session expires (about 30 days).
• Wishlist and price alerts — while the account exists and the alert is active; we remove them if you delete the account.
• Newsletter — until you unsubscribe or we receive a deletion request.
• Contact messages — for as long as needed to handle your enquiry and keep a limited record of correspondence.
• Search logs and consented analytics — for as long as needed to operate, secure, and improve the service, then deleted or aggregated.
• Server logs — for a short operational period unless needed to investigate security incidents.

8. Your rights

Depending on where you live, you may have the right to:

• access a copy of your personal data
• rectify inaccurate data
• erase data (“right to be forgotten”)
• restrict or object to certain processing
• data portability (for data you provided, where processing is based on consent or contract)
• withdraw consent at any time
• lodge a complaint with a supervisory authority

To exercise these rights, email [email protected] from the address associated with your account where possible. We may need to verify your identity before fulfilling a request.

You can also sign out, update account details in the product, unsubscribe from the newsletter, and reject analytics cookies via the banner (clear site data in your browser if you need to see the banner again).

Supervisory authority. You have the right to complain to the data protection authority in your country of residence, place of work, or place of the alleged infringement. In the UK this is the Information Commissioner’s Office (ICO). In the EU, see the European Data Protection Board list of authorities.

9. Children

AffiStack is not directed at children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided data, contact us and we will delete it.

10. Automated decision-making

We do not use your personal data for automated decisions that produce legal or similarly significant effects (GDPR Article 22). Product rankings and deal highlighting are editorial and catalogue-based, not profiling of you as an individual.

11. Third-party websites

Product pages and outbound links lead to retailers and other sites we do not control. Their privacy policies govern any data they collect. Review those policies before you buy or create an account with them.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page will change. Material changes may also be highlighted on the site. Continued use after an update constitutes notice of the revised policy.

13. Contact

Privacy and data-protection requests: [email protected]

General enquiries: Contact us

Related documents: Cookie Policy · Terms of Use · Affiliate disclosure