Privacy

DipCatch is a price-tracking service of Scode, Slinge 26, 9406 EC Assen, the Netherlands, KvK 61360511. Scode is responsible for the personal data on this page.

This page says what we store about you, why, and how to get rid of it. We keep it short on purpose; if something is unclear, ask.

What we store

• Account: your name, email address, a hashed password, your timezone and default currency, and your notification preferences. Optional: two-factor secrets, passkeys, browser-push subscriptions, and a link to your Google or Apple account — all of which you turn on yourself.
• Pro: your plan, the state of your subscription, Stripe’s reference for you, and a record of each payment: the amount and the date. Your card details go to Stripe, never to us.
• Tracked products: the product links you paste, the titles, images and prices we read from those pages, the price history, and any private notes you add.
• Alerts: which price drops we told you about, and when.
• Hidden shops: the shops you chose not to have suggested.
• Pages we could not read: when you try to add a shop page DipCatch cannot read, its web address, why it failed and who tried it last, so we can make that shop work. We keep it for six months after the last try.
• Searches without results: when a search in the app finds nothing, the words you searched for and how often, so we can see what is missing. We keep them for six months after the last such search.
• Technical: a session cookie to keep you signed in, and short-lived rate-limit counters keyed on your IP address to protect the shops we read prices from and this service.

What we do with it

Run the service: check the prices of the products you track, work out the cheapest shop, and send you the alerts you asked for. Now and then we also email you about DipCatch itself, such as a new feature. Every such email has a link to stop them. We do not sell data, we do not build advertising profiles, and we do not use tracking cookies or analytics scripts on this site.

Why we may use it

• To give you the service you signed up for: your account, the products you track, your alerts and your payments.
• Because you switched it on: browser push, an AI feature, or a connected assistant. Switch it off and that use stops.
• Because we need a working and safe service: rate limits, error reports, and the lists of pages we could not read and of searches without results.
• Because the law requires it: payment records for the tax authorities.

Who else sees it

• Laravel Cloud: hosts the application and database.
• Stripe: takes Pro payments and makes the invoices. It receives your name, email address and payment details.
• Sentry: stores error reports so we can fix bugs. A report shows what the app was doing when it failed, and can contain a product link or your email address.
• Resend: delivers our email (verification, password reset, the daily digest).
• Your browser’s push service: only if you turn on browser push; it receives the alert payloads.
• Google: shop logos on this site are loaded from Google’s favicon service by your browser, which sees the shop domain and your IP address. That request carries no account data. Separately, if you sign in with Google, Google sees that you signed in to DipCatch and sends us your Google profile. We keep your name, email address and Google account id from it.
• Apple: if you sign in with Apple, Apple sees that you signed in to DipCatch and sends us your Apple account id and an email address — your own, or a relay address Apple forwards from if you asked Apple to hide yours. It sends your name the first time you sign in, and never again.
• TypeSafe: our AI provider, only if you switch on an AI feature in your settings (automatic categories, or the check on a new shop, which also suggests an alert for a new product). It receives the product name, its shops and their web addresses, the pack size, barcode and price, any offer a shop shows, and the category of the product. Nothing that identifies you or your account.
• Serper: only if you have Pro with the AI check on a new shop switched on. It receives the names of the products you track, and searches Google for other shops that sell them. Nothing that identifies you or your account. We then read the product pages it finds from our servers, as we do for the shops you track.
• bol.com: to suggest bol.com as a shop, we ask bol.com whether it sells the products you track, by their name and barcode. Nothing that identifies you or your account. A bol.com link in the app goes through bol.com’s partner link, so bol.com can credit DipCatch with a sale. bol.com then sets its own cookie in your browser, under its own privacy statement. We send it nothing about you.
• Amazon: a link to amazon.nl in the app carries DipCatch’s partner tag, so Amazon can credit DipCatch with a sale. Amazon then sets its own cookie in your browser, under its own privacy statement. We send it nothing about you.
• The shops: we fetch product pages from the shops you track. Those requests come from our servers, not from you, and carry nothing about you.
• An assistant you connect: If you connect Claude, ChatGPT, or another assistant on Connections, DipCatch sends that assistant the product data and tool results it asks for, and the assistant can change the products you track. Disconnect it on Connections to stop new access. That does not delete chats or other copies the assistant’s provider already stored. DipCatch does not send your password to the assistant.

Some of these companies process data outside the European Economic Area, for example in the United States. Such a transfer rests on the EU–US Data Privacy Framework or on the EU standard contractual clauses.

If you share a product page, anyone with that link can see the product, its prices and the shops. It says nothing about your account.

Product images on a shared page are loaded straight from the shop’s own servers by the viewer’s browser, so that shop sees the viewer’s IP address. We do not copy or store the images.

How long

As long as you have an account. Price-check history older than a year is pruned, keeping the most recent points so your charts keep working. Delete a product and its history goes with it. Delete your account (Settings → Profile) and everything goes.

Payment records are the exception. They stay after you delete your account, without your name, because Dutch tax law requires us to keep them for seven years. Stripe keeps its own records under the same kind of rules.

Your rights

Under the GDPR you can ask for a copy of your data, also as a file you can take elsewhere. You can have it corrected or deleted, limit its use, or object to its use. You can already change or delete most of it yourself in the app. We answer a request within a month, or tell you within that month why it takes longer.

If you think we handle your data wrongly, you can complain to the Dutch data protection authority, Autoriteit Persoonsgegevens.

Security

The site only works over HTTPS. Passwords are stored hashed, and you can add two-factor sign-in or a passkey. If a data breach puts you at high risk, we tell you, as the law requires.

Changes

When this page changes, so does the date at the top. We email you about a big change.