Privacy notice
Version 2026-09-11
PriceFind sells nothing and has nothing to gain from knowing who you are. This notice says what is recorded, why, how long it is kept, who else sees it, and how to have it deleted. It took effect on 11 September 2026.
What is recorded, and why
| What | Why | How long |
|---|---|---|
| Your email address | To sign you in, verify the address, reset a password and send the price alerts you ask for. | Until you delete the account. |
| Your password, as a hash | To sign you in. The password itself is never stored and cannot be read back. | Until you delete the account. |
| The terms version you accepted, the time, and the IP address you accepted from | POPIA requires proof that consent was given. This is that proof, and it is used for nothing else. | Until you delete the account. |
| Your watchlist and the alerts sent to you | To watch the prices you chose and to avoid alerting you twice about one drop. | Until you delete the account or remove the item. |
| Links you submit | To index the product and to hold you to the daily submission limit. | Until you delete the account. |
| Whether an email to you was delivered, bounced or was marked as spam | To stop sending mail that fails, which is what keeps PriceFind able to send mail at all. | Delivery records go when the account goes. An address that bounced or complained stays on a suppression list, so nothing is sent to it again. |
| Clicks through to a retailer: which listing, which retailer, where on the site, when, and a random session identifier as a hash | To learn which comparisons readers actually use. Retailers already see this traffic; without this record PriceFind is the only party that cannot. | Kept as traffic history. It carries no name, no email address, no IP address and no user agent. |
| Page views, counted by Cloudflare Web Analytics | To know which pages readers reach and where they came from. | Held by Cloudflare in aggregate. It sets no cookie and builds no profile. |
Who is responsible
PriceFind, at pricefind.co.za, decides what is recorded here and why. Under the Protection of Personal Information Act 4 of 2013, that makes PriceFind the responsible party.
Who else sees it
Nobody buys this data, because none of it is for sale. PriceFind runs no advertising, sets no advertising cookie and carries no affiliate tag.
Two suppliers process data to make the site work: Mailjet sends the email, and so handles your address and the subject line; Cloudflare serves the site and counts the page views. Both act on PriceFind’s instructions only.
A link to a retailer carries a campaign tag that names PriceFind as the source. That tells the retailer the visit came from here. It carries nothing about you, and the browser is told to send the referrer only to sites at least as secure as this one.
Data is handed over otherwise only when the law requires it.
Cookies
Signing in sets two cookies: one session cookie and one cross-site request forgery token. Both are scoped to the API path, both are needed for a signed-in session to work at all, and neither follows you anywhere.
There are no advertising cookies and no third-party trackers. The page-view count is cookieless, which is why this site shows no consent banner: there is nothing to consent to beyond the cookies that sign you in.
Your browser also holds a random identifier for the current browsing session, used to group clicks from one visit. It lives in session storage, is never linked to your account, and is gone when you close the tab.
Where it is kept, and how it is protected
The database sits behind an authenticated API. Passwords are hashed. Session and token cookies are marked secure and HTTP-only. Public API responses are anonymous and carry no account data.
If a breach ever puts personal information at risk, POPIA requires PriceFind to tell you and the Information Regulator. That is what will happen.
Children
An account is for someone able to enter a contract. PriceFind does not knowingly hold an account for a child under 18 without the consent of a guardian, and will delete one on being told of it.
Changes to this notice
This notice carries the same version as the terms. When it changes, the version and the effective date at the top change with it, and account holders are told before a change that affects them takes effect.
Ask, correct, delete
Delete everything yourself from the account page. Deleting the account removes the account, the watchlist, the alert history and any links you submitted, at once and for good.
For a copy of what is held, a correction, an objection, or a complaint, write to [email protected]. A complaint can also go to the Information Regulator of South Africa, which supervises POPIA.