Privacy & research notice
This site is also a security research project studying automated traffic (bots) on the web. It is run by Ed Conolly, who is the data controller. Contact: privacy@isramcheapyet.co.uk
What we collect
- Network and connection data for every visit: your IP address, timing and protocol details of your connection (TCP, TLS, HTTP), and the request headers your browser sends.
- A short security check on your first visit: a brief page that measures your connection and reads some browser characteristics to check you're not a bot, then sets a cookie so it isn't repeated.
- A one-question quiz on your first visit (a guess at a price, or which of two parts costs more): we record your answer and how you gave it (timing, mouse or touch movement, and key timing and type as below).
- Browser data: technical characteristics of your browser and device, and how you interact with the page (for example mouse movement and scrolling timing). We record keystrokes only as timing and type (letter, digit, space), never the keys themselves, and we don't record the text of fields other than the forms below. If you arrived from a link someone shared, this is collected only after you agree in the banner.
- Cookies: one for the security check, and, if you arrived from a shared link, one that records which link (for example a subreddit) so later visits from the same browser are counted together. Your answer to the banner is stored in your browser.
- What you send us: your email address and alert settings if you set a price alert, and the details of any price you report. If you try to sign in, we keep only the lengths of what you typed and your email's domain, never the password or the rest of the address.
Why, and the legal basis
To run the site and keep it secure, to send the alerts you ask for, and to research how to tell automated traffic apart from real people. The legal basis is our legitimate interests in running a secure site and doing that research, and your consent for the alerts and, for shared-link visitors, for the browser measurements. Interaction data is used only to tell people from bots, never to identify you or to target you.
Who else sees it
The site is hosted by OVHcloud, whose servers process the data on our behalf. We don't sell or share your data with anyone else, and there are no ads or trackers from other companies.
How long
Raw connection captures are deleted after 90 days. Derived, aggregated research data may be kept longer. Alert emails are kept until you unsubscribe or ask us to delete them.
Your rights
Under UK GDPR you can ask for a copy of your data, or for it to be corrected or deleted, and you can object to its use. You can withdraw consent at any time by clearing this site's data in your browser or by emailing privacy@isramcheapyet.co.uk. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.