1. Scope and privacy choices
Guest use is not necessarily anonymous: requests and interactions can involve technical or session information. This policy is a notice, not blanket consent to all processing. Where consent is required, it must be obtained separately. Third-party retailers, sign-in providers, and platforms have their own privacy practices.
2. Information we collect
- Account information: email address, username, authentication records, and information received from an authorized Google or Apple sign-in. Sign-in providers may supply a name, email or relay email, and provider identifier. We do not receive your Google or Apple password.
- Optional profile information: display name, uploaded avatar, and language. Older or mobile interfaces may also permit names, birthday, gender, phone, country, state, city, address, postal code, and biography. These details are not needed for ordinary product search. The web Privacy screen provides a way to clear the additional optional profile details.
- Shopping activity: search text, filters, listing interactions, saved products or searches, share actions, and associated event times and product references.
- Technical information: IP addresses received by infrastructure, browser/device information, request paths, referrers, session or quota identifiers, diagnostic records, and account/session associations where available.
- Communications: information you send to support, including privacy, security, and account requests.
- Source and referral information: product information from retailer APIs and referral reporting made available through participating affiliate programs.
Do not put passwords, financial account numbers, medical records, or other unnecessary sensitive information into searches or support messages.
3. Purposes and external requests
We use relevant information to run searches and comparisons, authenticate users, maintain shortlists and preferences, create requested listing links, respond to support, measure use and reliability, improve product intelligence, prevent abuse, enforce limits, and meet legal obligations.
Search terms are sent to participating product-search sources as necessary to retrieve results. Our internal analytics can record searches and interactions with an account or session reference. We use Google Search Console to understand how the website appears in Google Search; this is separate from installing Google Analytics on the website.
Recommendations use available product and price information. They are shopping suggestions, not decisions about credit, employment, insurance, or similar significant eligibility matters.
4. Saved products and public listing references
Your saved-products list and the association between you and a saved item are private account records. Saving or sharing can create a separate product snapshot, containing retailer information such as a title, image link, offer URL, displayed price, source, and capture time.
Anyone who obtains a public listing URL can view and forward that product snapshot without signing in. It is not a confidential link. Public listing responses are designed to exclude your account name, private shortlist, and search query. Removing a save removes your shortlist association, not necessarily the separate retailer snapshot or copies held by recipients. Contact us if a public listing includes personal information.
5. Cookies, analytics, and communications
Cookies and similar browser storage support sessions, authentication, security, and preferences. Server-side analytics and infrastructure logging can occur without a Google Analytics cookie. Browser controls may restrict storage but can affect sign-in and do not stop every server request.
We currently use internal analytics and Google Search Console, rather than an advertising-pixel or third-party behavioral-analytics program. We do not currently offer personalized advertising or promotional email subscriptions. Essential account and security emails may still be sent.
We do not currently use a separate Do Not Track signal to disable all server-side operational logging. Global Privacy Control is distinct from Do Not Track. We do not currently sell personal information or share it for cross-context behavioral advertising. If practices change, we will update this notice and provide required choices, including recognition of legally applicable opt-out signals, before starting the relevant activity. Required consent will not be inferred merely from a policy update.
6. Recipients and service providers
Relevant information is processed through hosting, database, delivery, email, authentication, and security services. Our operations include Render hosting and Cloudflare services; support@binaby.com is routed through Cloudflare to a monitored Gmail inbox. Google and Apple process information when you choose their sign-in options.
Product APIs receive requests needed to answer searches. Opening an externally hosted product image or retailer link can expose technical request information to that provider. Affiliate links may include referral identifiers or use redirects. The relevant retailer, marketplace, or affiliate network may process referral and transaction information and use cookies or similar technology to attribute qualifying purchases, under its privacy practices and applicable requirements. We do not intentionally include your private shortlist or account email in public share links.
We may disclose information when reasonably necessary to comply with law, respond to legal process, protect users or the service, investigate abuse, or complete a business transfer subject to applicable protections. We do not sell your private shortlist or search history as a data product.
7. Retention, deactivation, and deletion
Account information is retained while needed to provide the account. Deactivation retains information for possible reactivation. Permanent deletion is different: it removes the profile, avatar, saved-product/search associations, linked activity records identifiable through the account and known sessions, and local authentication and email-action records. A minimal disabled account record and completion status remain to prevent reactivation of a deleted account.
Public product snapshots can remain independently of an account where they contain retailer information rather than the private saved association. Earlier guest activity we cannot reliably connect to your account may not be identifiable through an account-deletion request. Copies held by recipients are outside our control.
Retention for technical logs, support communications, backups, and security records depends on operational need, provider retention cycles, dispute handling, and applicable law. These records are not necessarily erased immediately with the live account. We restrict retained information to the relevant purpose and address applicable deletion requests and legal retention exceptions. We do not promise indefinite recoverability after permanent deletion.
Use Account actions to request deletion or email support@binaby.com. When Apple provides the required authorization token, deletion also requests revocation of that connection. Older connections without a usable token may require assistance; the deletion response identifies that limitation.
8. Requests and applicable rights
Depending on your location and applicable law, you may have rights to access or obtain a copy of information, correct it, request deletion, withdraw consent, object to or restrict processing, opt out of sale/sharing or targeted advertising, and appeal certain denied requests. Mandatory rights are not waived by using Binaby.
Email support@binaby.com with “Privacy request.” You do not need to create an account. We may reasonably verify identity before disclosing, changing, or deleting personal information. Where law permits authorized agents, we will accept appropriate evidence of their authority. We will not impose verification requirements prohibited for opt-out requests.
We respond within applicable legal deadlines, explain lawful extensions or denials, and do not unlawfully discriminate for exercising rights. Where a statutory appeal right applies, reply with “Privacy appeal.” You can also complain to an appropriate privacy regulator.
9. California and international users
California privacy rights depend on which laws apply to our operations. Where applicable, rights include access, correction, deletion, and opt-outs from sale or sharing. We do not claim that a particular business-size threshold eliminates every privacy obligation.
Binaby is operated from the United States; providers may process information in the United States or other countries. Access from another country does not waive mandatory local rights. Where EEA or UK data-protection law applies, processing must have an appropriate legal basis: providing a requested contractual service where applicable; legitimate interests such as proportionate security and service improvement where not overridden by your rights; legal obligations; or consent where required. You may have rights to object, restrict processing, portability, withdraw consent, and complain to your supervisory authority. Applicable international-transfer safeguards must be used where required.
10. Age and security
The Services are intended for adults aged at least 18 and the age of majority where they live. They are not directed to children under 13. If you believe a child has supplied personal information, contact support@binaby.com so we can investigate and take appropriate action. A store content rating is not a substitute for service eligibility requirements.
We use safeguards intended to protect information, but no system is completely secure. Report suspected compromise privately to support@binaby.com without sending passwords or unnecessary personal data.
11. Changes and contact
We will identify policy updates by their date/version and provide additional notice and obtain consent where required for material changes. Changes do not retroactively authorize incompatible uses where prohibited by law.
Contact: support@binaby.com. Binaby operates from San Diego, California, United States.