Privacy policy

1. Who we are

Pounce (“we”, “us”, “our”) is a price drop tracking service available at pounce.deals, as a Chrome browser extension, and through our iOS and Android apps. The data controller is Pounce (contact: privacy@pounce.deals).

If you are located in the United Kingdom or European Economic Area, this policy is written to satisfy the requirements of the UK GDPR and EU GDPR respectively.

2. What data we collect and why

2.1 Account information

When you sign in with Google, Apple, or email, we receive:

We do not receive your Google or Apple password. Email sign-in is passwordless, so we do not store a Pounce password either.

2.2 Products, brands, and lists you save

When you add a product URL:

We store the product URL exactly as you provide it. If a URL contains personal identifiers (e.g. referral codes with your email), we store those too — do not paste URLs containing sensitive personal data.

2.3 Notification preferences and push delivery

We store your email and push-notification preferences. If you enable push notifications in an iOS or Android app, we store a device push token and related installation information so Apple Push Notification service or Firebase Cloud Messaging can deliver alerts to that device. You can change Pounce notification preferences in Settings and disable push notifications in your device settings.

2.4 Chrome extension

The extension:

• Reads the URL of your active tab only when you click the extension icon or when it checks whether the current page is already tracked. It does not monitor your browsing in the background.
• Reads the content of the active product page when you click “Track this product”, solely to identify the product name, price, and image on your behalf.
• Stores your session token locally on your device so you remain signed in across browser restarts.

The extension does not log which websites you visit, track navigation events, or share browsing data with third parties.

2.5 Usage analytics

We use Vercel Analytics on the website and PostHog on the website and in our apps to understand page views, feature use, and app performance. This may include event names, an analytics installation identifier, app version, device and operating-system information, referring campaign information, and the network IP address used to send the request. Analytics and measurement providers may use the IP address to infer an approximate city or region; Pounce does not request device location permission or collect GPS location. When you are signed in, PostHog also receives your internal Pounce user ID, email address, and optional display name so activity can be associated with the correct account.

With consent, the website uses the Meta Pixel for page-view and sign-up measurement. The mobile apps also send limited registration and first-activation events to Meta. Mobile events do not include your email, name, or Pounce account ID. The Android app is configured not to collect the Android advertising ID.

2.6 Diagnostics

We use Sentry to receive crash reports and diagnostics such as app version, device model, operating-system version, error details, and runtime context. In the mobile apps, default personally identifiable information, screenshots, and view hierarchy capture are disabled.

2.7 Subscriptions and purchases

If you buy Pounce Premium, we process the subscription product, status, renewal or expiry date, and the identifiers needed to verify and restore the purchase. For Android purchases this includes the Google Play product ID and purchase token. For iOS purchases it includes App Store transaction information. Website subscriptions are processed by Stripe. Pounce does not receive your payment-card or bank details from Google Play, the App Store, or Stripe.

3. Third-party services

We use the following service providers to operate Pounce:

• Supabase — database and authentication, with our project hosted in the London region
• Google and Firebase — Google sign-in, Android push delivery, and Google Play purchase processing
• Apple — Apple sign-in, iOS push delivery, and App Store purchase processing
• PostHog — product analytics
• Sentry — crash reporting and diagnostics
• Meta — limited mobile registration and activation measurement
• Stripe — website subscription payments
• Resend — email delivery
• Vercel — website hosting and analytics
• Additional third-party services to assist with retrieving and processing publicly available product information on your behalf

These providers process information only for the purposes described above. Some providers may process data outside the UK or EEA. Where required, we rely on an adequacy decision, the UK International Data Transfer Addendum, or approved standard contractual clauses and related safeguards.

4. Email and push notifications

If you enable email notifications, we send price drop alerts from notifications@pounce.deals containing the product name, image, old and new price, and a link to the product page. You can disable these emails at any time in Settings.

If you enable push notifications, Pounce may send price-drop, price-restored, brand-sale, and service messages through Apple or Firebase. Push messages may include a product or brand name, price information, and an image. You can turn off categories in Pounce Settings or disable all push notifications in your device settings.

5. Data storage and security

• All data is stored in Supabase's EU (London) region, encrypted at rest and in transit.
• Authentication is managed by Supabase Auth — we never see or store your Google or Apple password.
• Mobile session credentials are protected using the operating system's secure credential storage.
• Database-level security policies ensure each user can only access their own data.

6. Data retention

When you delete a product, all associated price history is permanently deleted. When you delete your account, Pounce removes your active profile, saved products, target prices, wishlists, followed brands, notification registrations, and service entitlement. Deletion from active systems is normally immediate. Limited records may be retained where required for security, fraud prevention, legal, or accounting obligations, and data may remain for a limited period in access-restricted routine backups.

7. Your rights (UK and EU residents)

Under UK GDPR and EU GDPR, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to its processing. To exercise any of these rights, email us at privacy@pounce.deals. We will respond within 30 days.

You can delete your account in the Pounce app or follow the instructions on our account deletion page. Google Play and App Store subscriptions can also be reviewed in your store account settings.

UK residents may lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk. EEA residents may contact their local supervisory authority.

8. Cookies

The web app uses strictly necessary Supabase cookies to maintain your authenticated session. If you choose Accept all in our cookie banner, PostHog and Meta may also use cookies or similar browser storage for analytics and measurement. If you choose Essential only, those optional browser tools are not loaded. You can clear your choice in your browser storage and choose again.

The Chrome extension does not use cookies.

The iOS and Android apps do not use browser cookies for analytics or advertising.

9. Children

Pounce is not directed at children under 13 (or under 16 where applicable under local law). We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page will always reflect the most recent revision. We encourage you to review it periodically.

11. Contact

Pounce
Email: privacy@pounce.deals
Website: pounce.deals