🔐 Readable summary for everyone (aka TL;DR)

  • We store your email address for logins, password resets, and optional price drop alerts.
  • We do not store your IP address for analytics or tracking.
  • We never share your personal data unless required by law or to protect our rights.
  • We do not collect or process any sensitive personal data.
  • We do not engage in targeted advertising.
  • We have never sold your personal data, and never will.
  • We always ask for your consent whenever the law requires it.
  • You can modify or withdraw your consent at any time.

Cookie settings

We use cookies to enhance your experience on DropReference. You can modify these choices later.

1. Introduction

This privacy policy applies to DropReference, a French-registered SAS operating the site https://dropreference.com. We are committed to protecting the privacy of our visitors and users in accordance with the General Data Protection Regulation (GDPR).

This policy outlines how we collect, use, store, and protect your personal data.

2. Data We Collect

  • Account data: email for account creation, logins, price alerts. Authentication via Supertokens.
  • Profile data: profile picture, user preferences.
  • Activity data: outbound clicks, browsing history (Google Analytics).
  • Cookies: authentication, personalization, analytics, consent (GDPR banner).

3. Purposes of processing

Your personal data is used for:

  • Provide and secure our services
  • Manage your preferences and alerts
  • Analyze site usage
  • Send notifications (opt-in only)
  • Ensure our legal compliance

4. Legal basis for processing

We process your data on the basis of your consent, our legitimate interest, or our legal obligations.

5. Data Retention Period

Data is retained until the account is deleted or for 30 days afterward. Analytical data is anonymized.

6. Security

Data is stored in France on secure AWS and MongoDB servers. Your passwords are encrypted and access is strictly controlled.

7. Your Rights

You can exercise your rights of access, rectification, objection, erasure, or withdrawal of consent by writing to [email protected].

8. International Transfers

No data transfers outside the EEA are performed, except when necessary, with appropriate safeguards.

9. Minors' Data

Our site is reserved for individuals aged 13 and older.

10. Third-party sites

Links to partner sites are provided. Their privacy policy may differ from ours.

11. Policy Update

We may update this policy at any time. You will be notified by email or via the site in the event of any significant changes.