Privacy policy

Who we are

The Sendicate operates this site. For anything in this policy, write to privacy@thesendicate.com.

If you don't have an account

Cloudflare adds a browser analytics beacon to measure page views and performance. It is separate from your rider account. See Cloudflare's explanation of Web Analytics. We do not use advertising pixels on this site.

Your browser also stores local preferences and saved items:

• Region choice — so the board opens on your currency next time.
• Taste profile — a rough count of which categories and brands you have opened, used to order the "For you" feed. It decays over about three weeks.
• Saved bikes and watchlist — when you use those features signed out.
• Session hint — whether to reconnect an existing Firebase sign-in. It is not your password.

Guest saves stay in this browser until you remove them or clear browser storage. If you deliberately sign in or create an account, saved items can be copied into your private account for syncing and your requested alert settings. Clearing local browser storage does not delete a cloud account.

If you create an account

We store, in Google Firebase:

• Your email address and the display name you choose. Your password is handled entirely by Firebase Authentication — it never reaches us and we cannot see it.
• Your watchlist — which retailer listings you track, your alert preferences, any target price, and the price history recorded for those listings.
• Your saved bike builds — the components you enter, used to match compatible parts.
• Whether you opted in to marketing email, with the date and the wording you agreed to, so we can prove consent was given and when.

Why we are allowed to hold it

Your account, watchlist and price alerts exist because you asked for them — that is the contract between us, and price-drop email for a product you chose to track is part of the service, not marketing. Marketing email is separate, optional, and sent only on consent you can withdraw at any time without affecting your account.

Who else processes it

• Google (Firebase Authentication and Cloud Firestore) — stores your account and watchlist.
• Cloudflare (Pages and Web Analytics) — serves this site and processes request and aggregate performance information.
• Resend, our alert email provider — processes the address and message when sending an alert you requested.

We do not sell your data, share it with advertisers, or hand it to the retailers we link to. Clicking through to a shop takes you into that shop's own privacy policy, which we do not control.

Affiliate links

Some outbound links may earn us a commission. Clicking an external link sends you to that retailer, whose own cookies, attribution and privacy practices apply. We do not include your rider-account email or saved bike details in those links. Commission arrangements do not affect the deal score.

How long we keep it

Your account data is kept while the account exists. Account deletion requests remove the account and associated records through our application; provider security logs and retention are subject to the providers' policies. If deletion fails, the dashboard explains the error and you can contact us for help.

Your rights

Two of them are self-service from your dashboard:

• Download my data — the account data available through this service, as a JSON file. Browser-only preferences and provider logs are not included.
• Delete my account — delete your account and associated application records, subject to the provider retention noted above.

If either control tells you it is not available, email privacy@thesendicate.com and we will do it for you. Your rights do not depend on our buttons working.

You can correct your name at any time, withdraw marketing consent at any time, and — if you are in the UK or EU — object to processing, ask us to restrict it, or complain to your data protection authority (in the UK, the ICO). Email privacy@thesendicate.com and we will answer within 30 days.

Children

This site is not intended for under-16s and we do not knowingly create accounts for them.

Changes

If this policy changes materially we will update the date above and, for anything affecting how we use your data, email account holders before it takes effect.