Privacy Policy

What we collect

• Your searches. The text you search for is sent to the stores' product search services to find offers. Results are cached for up to 24 hours by the search text, not by who searched, so the next shopper gets them faster.
• Technical data. Our hosting provider receives your IP address and browser details with every request, as any website does. We use your IP address to limit how many searches one connection can run (to protect the stores' services from automated traffic); those counters expire within a day.
• Saved items and price alerts. If you save a product or set a price alert, we create an anonymous account for your browser (no name, email or password) and store the products and target prices you chose. A cookie keeps you signed in to that anonymous account.
• Price-alert notifications. If you turn them on, we store your browser's push subscription with your anonymous account: an address at your browser's push service and the keys that encrypt each message to you. We use it only to tell you when a price you're watching hits your target. You can turn notifications off on the Alerts page or in your browser's settings.
• Store visits. When you follow a link to a store, we record which product and store it was, whether it carried our affiliate identifier, and when, without anything that identifies you, to understand which comparisons are useful. This is counted on our server when the link is followed; no cookies or tracking scripts are involved, and no IP address, account or session is stored with it.
• Page views. We count visits with Vercel Web Analytics: the page address, the referring site, and your country, browser and device type. It uses no cookies and stores no IP address; a visitor is recognized only within one day, by an anonymous code that resets daily, so visits can't be linked over time or across sites. The same way, we count a few actions: a search (with its text), opening a comparison, following a link to a store, saving a product and setting a price alert, with the product's name, store and price, and the site's language. These are never linked to your saved items, alerts or anonymous account.
• Preferences. Your light or dark theme choice is kept in your browser's local storage and never sent to us.

We don't sell personal data, and we don't use advertising or analytics cookies.

Affiliate links and the stores you visit

OneCart participates in affiliate programs, including the eBay Partner Network, Amazon Associates and the AliExpress Affiliate Program. Links to stores pass through our redirect, which adds our affiliate identifier so the store can credit us if you buy; this costs you nothing. Once you reach a store, its own privacy policy and cookies apply, including cookies the store or its affiliate program uses to attribute your purchase. We don't receive your purchase or payment details.

Who processes data for us

• Vercel, which hosts the site and counts page views (Web Analytics).
• Upstash, which stores the search cache and the rate-limit counters.
• Supabase, which stores anonymous accounts, saved items, price alerts and the store-visit counts.
• eBay (Browse API), SerpApi (for Amazon results) and AliExpress (Affiliate API), which receive your search text to return products. When you follow a link to AliExpress, its Affiliate API also receives that product's address to create our tracked link.
• DeepL, which receives Hebrew search text our built-in dictionary can't translate (brand names and model numbers are marked to be left as they are).
• Your browser's push service (Google, Mozilla, Apple or Microsoft), which delivers price-alert notifications you turned on. Messages are encrypted for your browser.
• Frankfurter (European Central Bank rates), for exchange rates; no personal data is sent.

How long we keep it

• Cached search results: up to 24 hours.
• Rate-limit counters: up to one day.
• Store-visit records: kept to follow trends over time; they contain no personal data.
• Saved items and price alerts: until you delete them, which you can do on those pages.
• Notification subscriptions: until you turn notifications off, the browser ends the subscription, or deliveries keep failing.
• Hosting logs: as long as our hosting provider retains them.

Your choices and rights

You can use OneCart without saving anything. You can delete saved items and alerts at any time from Saved and Alerts, and clear our cookie in your browser settings. Depending on where you live, including under Israel's Protection of Privacy Law, you may have the right to access, correct or delete personal data we hold about you.

For privacy questions or requests, write to us at barackv95@gmail.com.

Children

OneCart is not directed at children under 16, and we don't knowingly collect their data.

Changes

If we change this policy, we'll update it here and change the date above. Material changes will be highlighted on the site.