Privacy Notice
What we collect today
- Visit statistics through Google Analytics 4: pages viewed and which store links are clicked.
- Your email address and a record of your consent, if you sign up for the weekly email or an alert (see Email below).
You can ask for the weekly email, or for an alert when the price of one pick drops or it comes back. We use your address only to send you what you asked for.
- Sign-up and welcome. Filling in the form and ticking the box signs you up at once. We then send one welcome email with a link to unsubscribe, at most 3 a day to any address, so a mistyped or unwanted address can stop it with one click.
- What we keep. Your email address (encrypted), the exact wording you agreed to and its version, the time, the page you were on, and a scrambled, one-way version of your IP address. This is our record that you said yes. When you unsubscribe we keep that record for 400 days and then delete it.
- Unsubscribing. Every email has an unsubscribe link and a preferences page where you can stop the weekly email, stop alerts, or stop all email. Stopping one never starts or stops anything else.
- Limits. At most 4 alert emails a month per person, and alerts are not sent on Shabbat or holidays.
- Opens and clicks. Our emails contain a tiny image that tells us a message was opened. This is only an estimate: some mail apps load images for everyone, so we count those apart. Links in our emails go through our own address first so we can count clicks per link. We count clicks per link, never per person, and we do not store IP addresses with them.
- Who handles it. Cloudflare runs our servers and sends the confirmation emails. Amazon Web Services sends the weekly email and the alerts.
- Bounces and complaints. If an address bounces, or someone marks an email as spam, we stop sending to it.
Picky
When you ask Picky something, we keep what you typed, with any email address or phone number removed first. We also keep what Picky understood from it (for example the kind of product, a budget, or that it was a question about the site), the kind of answer it gave, which picks it showed, any pick you tapped, and how long the answer took. Each conversation gets a random ID. We store only a scrambled (hashed) version of it with your questions, so we can group them, and we delete the conversation itself after a day. We don't store your IP address: Picky turns it into a scrambled code to limit how many questions one connection can send, and that code is gone within minutes. We keep the question log for 12 months to learn what people ask for and what we're missing, then delete it. To read some requests and to word answers about our pages, Picky sends the question (without email addresses or phone numbers) to Anthropic, the company that makes the AI model Picky uses. For a product we don't have, it sends only the product words to AliExpress to search. Your conversation also stays in your browser for the visit so you can scroll back, and closing the tab clears it. Cloudflare Turnstile checks that a person, not a bot, is using Picky.
- Telling you when we add a pick. If you ask us to, we keep your email address or WhatsApp number (encrypted), the time and the exact wording you agreed to, and what you were looking for. We use it to tell you once when we add a pick for that request, and for updates only if you ticked the second box. We keep it until we have told you, you delete the request, or 12 months pass. Every request comes with a link to delete it.
- Cloudflare Turnstile. The check runs invisibly in your browser when you open Picky, without a puzzle for you to solve. Cloudflare may collect technical signals from your browser to tell people from bots, and its use of that data is covered by the Cloudflare Turnstile Privacy Addendum.
Send Feedback
If you click Send Feedback, the feedback tool Userback loads on the page. Your name, your email address, what you write, and any screenshot, short screen recording or file you add go to Userback, with the page address, your browser and your device type. We use it only to answer you and to fix and improve the site. Userback is not loaded until you click.
The contact form
- What we keep. The name, email address and message you type, and the page you sent it from. We do not save your IP address with your message.
- Why. Only to read your message and answer it. We do not add you to any list, and we send you nothing else.
- Who sees it. Only the people who run 972 picks. Your message is saved on our Cloudflare server, with your email address encrypted, and a copy goes to our own inbox in ClickUp, the task tool we use to keep track of messages. We reply from our own email account, to the address you gave us.
- How long. We delete the copy on our server after 12 months. The ClickUp copy stays until we delete it. To have your message deleted sooner, write to us through this form and say so.
- Cloudflare Turnstile. The form uses Cloudflare Turnstile to check that you are a person, as described under Picky above.