Skip to content
Shopahold
How it worksPricingFAQNederlandsOpen the app

Draft: this text is still being reviewed by a lawyer.

Privacy statement

Last updated

Shopahold is a wish list with a budget. We collect as little as possible: only what the app needs to work. Here you can read what we keep, why, where and for how long.

Who we are

Shopahold is a product of Tozun Solutions (Dutch Chamber of Commerce 42164824), TODO: vestigingsadres. We are responsible for processing your data. Questions? Email e.tozun@tozunsolutions.com.

Which data we keep

  • Your wishes: name, price, currency, picture, link, shop, how much you want it, the order, a deadline and whether you bought or dropped it.
  • Your budgets and settings, such as language, currency and time zone.
  • Your email address, only if you create an account. If you sign in with Google, Google gives us your email address and an ID of your Google account.
  • For a passkey, only the public key. The private key stays on your own device.
  • Your notification preferences and, if you turn notifications on, the push address of your browser.
  • If you have Pro: until when, and a customer number at Stripe. No card details.

We do not keep bank details and do not ask for your salary or your fixed costs.

What we use it for

  • To make the app work: your list, your budget, signing in and notifications. This is needed for our agreement with you.
  • To provide Pro. This is also needed for the agreement.
  • To see how the app is used and what can be better. We do this based on our legitimate interest, without tracking cookies (see below).
  • We only send push notifications if you allow them in your browser. You can turn them off any time.

We never sell your data and do not use it for advertising.

Reading a link

When you paste a link, our server fetches the product page to read the name, price and picture. The shop sees a request from our server, not from you.

If that does not work, the text of that page may go to an AI model by Anthropic to find the name and price. That is the text of a public product page: your name, email address and list are not included. Anthropic processes that text in the United States.

We keep product details we read for up to 7 days, so the same link is faster next time. We get exchange rates from the European Central Bank; nothing about you is sent.

Parties that help us

  • Microsoft Azure: the app and the database run in the EU (Sweden), with technical logs.
  • Scaleway (Paris): sending email, such as your sign-in code.
  • PostHog (EU): usage statistics.
  • Stripe: payments for Pro. Stripe sells Pro on our behalf and is itself responsible for your payment details.
  • Anthropic: AI when reading a link (see above).
  • Google: only if you choose to sign in with Google.
  • Your browser's push service (for example Apple, Google or Mozilla) delivers notifications. The content is encrypted.

We have agreements with these parties about what they may do with your data. TODO: check the data processing agreement for each party.

If you go to a shop through a link in the app, that shop or the affiliate network can see that you came through Shopahold. Their own rules and cookies apply on their site.

Usage statistics without tracking cookies

The app sets no tracking cookies and loads no third-party scripts. Events such as "wish added" go through our own server to PostHog in the EU, linked to a random ID and not to your name or email address.

The website shopahold.com uses no cookies and no statistics. The site is hosted by Cloudflare, which processes technical data such as your IP address to deliver the pages.

Cookies and storage in your browser

The app uses one cookie, shopahold.session, to keep you signed in, also as a guest. It is needed for the app to work, so we do not ask for consent. It expires after at most 400 days.

The app also keeps a few settings in your browser, such as which cards you have hidden.

How long we keep it

  • We keep your data as long as your account exists. If you delete your account, we erase it right away.
  • A guest list without wishes and without a budget is erased after 30 days without use. TODO: period for guest lists with wishes that are not used for a long time.
  • Sign-in codes are erased a day after they expire, sent notifications after 400 days.
  • TODO: retention period for usage statistics (PostHog) and technical logs (Azure).
  • TODO: legal retention period for payment records.

Your rights

  • Access and download: in the app you download all your data.
  • Delete: in the app you delete your account. This happens right away.
  • Correct: change anything that is wrong in the app.
  • Object, for example to usage statistics, or any other question: email e.tozun@tozunsolutions.com.

If you disagree with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the authority in your own country.

Security

All connections are encrypted. We have no passwords: you sign in with a code by email, with Google or with a passkey. There is no database password either; only our own app can reach the database.

Changes

If we change something important in this statement, we let you know in the app beforehand.