Privacy notice

MyBagAlert is responsible for the personal information used by MyBagAlert. Use our privacy and account request form for questions, a copy of your information or account deletion.

What we collect and why

We use your email, hashed password, chosen coins, alert targets and preferences to run your account and send the emails you request. Quantities, purchase prices and planned sale amounts are optional. We also keep email contents and delivery records, security rate-limit records, and information you submit in a support request.

We do not need wallet access or private keys. Calculator inputs stay in your browser unless you choose to carry a target into an alert.

We use account information to provide the service under our agreement with you. We rely on legitimate interests to protect the service, investigate faults and prevent unwanted or undeliverable mail. Optional analytics relies on your consent.

Cookies and optional analytics

Necessary cookies support sign-in, security and your chosen actions. Optional analytics stays off unless you accept. A first-party cookie then keeps an approved source, campaign and public landing page for up to 30 days. If you sign up, we can link that information to your account for up to 90 days to measure verification, active monitoring and your first alert submitted to our email provider. Reports keep aggregate totals without direct account identifiers.

Analytics does not store IP addresses, raw referring URLs, full query strings or device fingerprints, and uses no external analytics vendor. It measures consenting browsers, so it does not count everyone.

Use Analytics preferences to withdraw consent. Turning it off stores an off preference for up to 30 days and removes account attribution if you are signed in. Use the request form if you also want earlier account attribution erased.

Service providers

Railway hosts the website and database. Resend receives your address and message contents to send email. Market-data requests use coin identifiers and currencies, without your account identity or holding figures. If enabled, Sentry receives restricted technical error details with request data and user identity removed. These providers can process information outside the UK, including in the United States. We do not sell your information.

Keeping and removing information

Account information remains while your account is open; we do not automatically erase inactive accounts. Archiving a bag does not delete it. You can turn figure sharing off in Settings to clear saved quantities, purchase prices and planned sale amounts. We cannot retract emails already sent.

Request account deletion when you want to leave. Some records may need to remain for security, delivery suppression or legal obligations, and copies may remain in backups until those backups expire or are replaced. We explain any information that needs to be retained when handling your request. Privacy requests stay until handled and are removed within 90 days after handling.

Your rights

You can ask to access, correct or delete personal information, restrict its use, receive a portable copy or object to use based on legitimate interests. These rights depend on the circumstances. We may verify your identity before acting. You can withdraw analytics consent at any time without affecting earlier lawful use.

Use the request form to contact MyBagAlert. You can also complain to the Information Commissioner’s Office.