Legal

Privacy Policy

Last updated 25 August 2026

This describes what SparePartsAlert actually collects, where it goes, and how long it is kept. It is written against how the service is really built, not from a template — if something here stops being true, the policy is wrong and should be corrected.

Who we are

SparePartsAlert is operated by Spare Parts Alert LLC. For any privacy question, or to request access to or deletion of your data, email sparepartsalert@gmail.com.

What we collect

If you create an account

• Email address — to identify your account and send alerts.
• Password — stored only as a salted hash by our authentication provider. We never see or store your actual password.
• Company or role — optional, only if you enter it at signup.
• Your watchlist — the part numbers you add, plus any max price, condition preference, or notes you set.
• Billing identifiers — if you subscribe, we store your Stripe customer and subscription IDs and whether the subscription is active. We never receive or store your card details; payment happens on Stripe's own hosted checkout page.

If you use the public search without an account

• The part number you searched.
• Your IP address — used only to enforce the free search limit and prevent abuse of a feature that costs us money on every use.

Searches are cached and shared between customers

This one deserves to be stated plainly. When any part number is researched — by you, by another customer, or by an anonymous visitor — the results (what the part is, its equivalents, the listings found, and observed prices) are cached against a normalized form of that part number and reused for everyone.

That cache is not linked to the person who searched. It records that a part number was researched and what was found, never who looked it up. But it does mean a part number you search may be served from cache to a different customer later, and that your search contributes to a shared record. If a part number is itself sensitive to your business, that is worth knowing before you enter it.

Who we send data to

We use these processors, and only for the purposes listed:

• Supabase — database, authentication, and application hosting. Holds your account and watchlist. Data is stored in the United States.
• Anthropic — the AI research that identifies parts and finds listings. The part numbers you search or watch are sent to Anthropic's API. Your email address, account details, and billing information are not.
• Resend — sends account and alert emails. Receives your email address and the message contents.
• Stripe — payment processing. Handles card data directly under its own privacy policy.
• Vercel — serves this website.
• eBay — where enabled, we query eBay's Browse API for current listings. We send part numbers as search terms; we do not send any information about you.

We do not sell your data, share it with advertisers, or use it to build profiles for marketing. We have no analytics, advertising, or third-party tracking scripts on this site.

Cookies and browser storage

We do not use advertising or analytics cookies. We use your browser's local storage for three things: keeping you signed in, briefly holding a search result so it can be carried onto your watchlist after you sign up, and remembering whether you prefer listings as cards or as a list. All three are part of the service working, and none is used for tracking.

Product images

Where a listing has a product photo, that image is loaded directly from the retailer or marketplace hosting it, not copied onto our servers. That means the site you are being linked to can see the request, including your IP address and browser, the same as if you had opened the listing yourself. We do this so the picture you see is the current one for that listing rather than a stale copy.

Listings without a photo get a placeholder we draw in your browser — no outside request is made for those.

How long we keep things

• Account and watchlist — until you delete your account, then removed.
• Search IP addresses — automatically deleted after 30 days. The rate limit itself only looks back 24 hours; the rest is slack for investigating abuse.
• Cached part research and price history — kept indefinitely, since it is not linked to any person and its value is precisely that it accumulates over time.
• eBay listing data — deleted once eBay no longer lists the item publicly, as eBay's API terms require.

Your rights

You can view and edit your watchlist at any time from your dashboard. Email sparepartsalert@gmail.com to request a copy of your data, correct it, or delete your account entirely. Deleting your account removes your email, watchlist, and stored matches. It does not remove entries from the shared, non-personal research cache described above, because those are not associated with you.

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. We apply the rights above to everyone regardless of location.

Security

Access to your watchlist and matches is enforced at the database level, not merely in the interface, so one customer cannot read another's data. Passwords are hashed by our authentication provider and card details never reach our servers. No system is perfectly secure, but we do not store what we do not need.

Children

This is a tool for sourcing parts and is not directed at children. We do not knowingly collect data from anyone under 16.

Changes

If we change what we collect or who we share it with, we will update this page and the date at the top. Material changes affecting existing accounts will be sent by email.