Privacy policy
Last updated 10 October 2026
This policy explains what personal information Yellowtag (yellowtag.io) collects, why, who we share it with, and the choices you have. We are the controller of your personal information under UK data protection law. We are based in the United Kingdom and you can contact us at hello@yellowtag.io.
1. What we collect
Information you give us
- Account details: your name, email address and password (stored only as a one-way hash, so we cannot read it).
- Location: your postcode and how far you will travel to collect. We turn your postcode into approximate map coordinates and a postcode district and sector so we can find listings near you.
- Your choices: the categories you flip, the deals you save or track, and your alert settings (the ntfy topic or Discord webhook address you give us, your minimum rating and quiet hours).
- Agreement to our terms: the date and time you agreed, and which version of the terms and this policy.
Information from our payment provider
When you subscribe, Stripe handles your card details and billing address. We receive a customer reference, your subscription status and renewal dates, and invoice records. We never see or store your full card number.
Information collected automatically
- Technical data: your IP address, browser and device type, and the pages and requests you make, held in our server logs.
- Error reports: when something breaks, our monitoring tool records what went wrong, the page you were on and basic technical details.
- Page speed measurements: only if you accept them in the cookie banner (see our Cookies Policy).
What we do not collect
We never ask for your Facebook or eBay login. The Marketplace listings and eBay sold prices we process are public: item titles, descriptions, prices, the general area, photos and links. We do not store sellers’ names or profiles.
2. Why we use it, and our lawful basis
| What we do | Lawful basis |
|---|---|
| Create and run your account, find deals near your postcode, show your dashboard and send alerts | Contract: it is what you signed up for |
| Take payment, keep billing records, meet tax and accounting rules | Contract and legal obligation |
| Send emails you need: confirming your address, resetting your password | Contract |
| Keep the service secure, prevent abuse, find and fix errors | Legitimate interests: running a safe, reliable service |
| Measure how fast pages load, to improve them | Consent, only if you accept it in the cookie banner |
| Record that you agreed to our terms | Legitimate interests and legal obligation: proof of what you agreed |
We do not sell your personal information, we do not use it for advertising, and we do not send marketing emails.
3. Who we share it with
We use these companies to run the service. They act on our instructions and only receive what they need:
| Company | What for | What they receive |
|---|---|---|
| Hetzner (Germany) | Hosting our servers and database | All data we hold, stored on their servers |
| Stripe | Payments and the billing portal | Your name, email, card and billing details |
| MailerSend | Sending our emails | Your name, email address and the email content |
| Sentry (EU data region) | Error reports and, if you accept, page speed | Technical details, your IP address and the page you were on |
| postcodes.io | Turning your postcode into map coordinates | Your postcode only |
| Google (Gemini) and TypeSafe | Working out whether a listing and a sold item are the same product | Item titles and descriptions only, never your personal details |
| ntfy or Discord | Delivering the alerts you choose | The alert text, sent to the topic or webhook you gave us |
We may also share information if the law requires it, or to protect our rights or other people’s safety. If we ever sell or merge the business, your information may move to the new owner, who must follow this policy.
4. Where your data is held
Our servers are in Germany, and our monitoring data is held in the EU. Some providers (such as Stripe and Google) may process information outside the UK. Where they do, we rely on safeguards the law recognises, such as the UK’s adequacy regulations for the EU and approved standard contractual clauses.
5. How long we keep it
- Account information: for as long as you have an account. If you ask us to close it, we delete or anonymise your personal information within 30 days.
- Billing records: up to 6 years, because tax and accounting law requires it.
- Backups: nightly database copies are kept for 14 days, and server backups for 7, so deleted data can remain in a backup for a short time before it is overwritten.
- Logs and error reports: a few weeks to a few months.
6. Your rights
Under UK data protection law you can ask us to: tell you what we hold about you and give you a copy; correct anything wrong; delete your information; restrict or object to how we use it; and give you your information in a portable format. Where we rely on consent (page speed measurement) you can withdraw it at any time with “Cookie settings” in the page footer. To use any of these rights, email hello@yellowtag.io. We will reply within one month.
If you are unhappy with how we handle your information, please tell us first. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
7. Security
Connections to Yellowtag are encrypted. Passwords are hashed, Discord webhook addresses are encrypted at rest, and access to our servers is restricted to authorised people using keys. No system is perfectly secure, so please use a strong, unique password.
8. Children
Yellowtag is for people aged 18 and over. We do not knowingly collect information from children, and will delete it if we find we have.
9. Cookies
We use a small number of cookies to keep you signed in and keep forms secure, and, only if you agree, to measure page speed. The details are in our Cookies Policy.
10. Changes to this policy
We may update this policy, and will post the new version here with a new date. If a change is important, we will tell members by email.
11. Contact
Questions or requests? Email hello@yellowtag.io.