SCALPERSCALPER / LEGAL
Privacy Policy
For the ScalperScalper website and mobile app.
Last updated:
1. Who is responsible
Giuseppe Lo Forte is the controller for ScalperScalper. Contact info@scalperscalper.com for privacy questions, access requests or account deletion. This notice covers scalperscalper.com and the mobile app; the temporary website account area does not provide the mobile feed.
2. Data we use and why
We process account identifiers, email and profile information to provide account access; saved products, alert filters, notification settings, language and time zone to provide the features you choose. On mobile, device push tokens, platform information and delivery records support notifications. These activities are necessary to provide the requested service (GDPR Article 6(1)(b)). Technical logs, IP addresses and request information may be processed to protect and operate the service, based on legitimate interests in security and reliability (Article 6(1)(f)). Support correspondence is used to answer your request. Legal obligations may require processing under Article 6(1)(c).
3. Google sign-in
When you choose Google sign-in, Google and our authentication provider Supabase process the sign-in. We receive your Google account identifier, email and basic profile, such as name and picture where supplied. We use this information only to authenticate you and operate your account, not to access Gmail, Drive or contacts. We do not sell Google user data or use it for advertising. Authentication tokens are used for session management. Google data use and transfers must comply with the Google API Services User Data Policy, including its Limited Use requirements where applicable. You can revoke access in your Google Account connections; revoking access does not itself delete your ScalperScalper account.
4. Cookies and Google Analytics
Essential browser storage keeps your sign-in session in the current tab and records your cookie choice for up to six months. These functions do not require analytics consent. Google Analytics 4, when configured, loads only after you select “Accept analytics”. It can process page visits, browser and device information, approximate location and cookie identifiers. Consent is the legal basis (Article 6(1)(a)). We do not send your account email, OAuth callback parameters or a user ID to Analytics, and advertising signals and personalization are disabled. Analytics cookies are configured to expire after six months; retention of reports and event data also depends on the property settings. Use “Cookie preferences” in the footer to refuse or withdraw consent at any time. Withdrawal stops future collection and removes accessible Analytics cookies; it does not undo earlier lawful processing.
5. Who receives data
Vercel hosts the website; Supabase provides authentication and the app database. Google provides sign-in and, only with consent, website analytics. Mobile notifications use Expo Push Service and Apple or Google notification infrastructure. Providers receive data needed for their function. Retailers receive requests when you follow their links and operate under their own policies. Data may be disclosed when legally required. Provider processing may involve countries outside the EEA; where required, transfers rely on adequacy decisions or appropriate safeguards such as standard contractual clauses. Contact us for details of the applicable safeguards.
6. Retention and security
Account data, preferences and saved items are kept while needed for your account. You can remove saved products and alerts in the app and request account deletion by email. Technical logs, delivery records, support correspondence and backups are retained only as needed for operation, security, recovery and applicable legal requirements; backup copies may remain until their normal rotation. We assess retention according to purpose and necessity. Access controls and encrypted transport help protect data, but no service can promise absolute security.
7. Your rights and choices
Subject to applicable law, you may request access, correction, deletion, restriction and portability, object to processing based on legitimate interests, and withdraw consent without affecting earlier lawful processing. Contact info@scalperscalper.com; we may need to verify your identity and normally respond within one month, subject to lawful extensions. You may complain to your local supervisory authority, including Italy’s Garante. You can disable push notifications in device settings. Account information is required to provide account features; analytics is optional. We do not use your data for automated decisions producing legal or similarly significant effects. The service is intended for adults and is not directed to children. We update this notice when practices change and provide additional notice for material changes where required.
Google Privacy · Google API Services User Data Policy · Supabase Privacy · Vercel Privacy