Privacy policy
This policy describes what this site really does. There is no advertising network here, no third-party analytics script, no tracking pixel and no data sold to anyone.
Last updated on 2026-07-31
Who is responsible
The controller for the processing described below is the publisher named in the legal notice.
What is stored, and why
Everything below is stored in a single SQLite database on our own server. Nothing else is collected.
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Account: name, email, password hash — or the identifier returned by Google/GitHub if you sign in that way. | To let you sign in and to attach your favourites and projects to you. | Performance of the service you asked for | Until you delete your account |
| Session: a session token, its expiry date, your IP address and your browser's user-agent. | To keep you signed in and to be able to spot a stolen session. | Performance of the service, and our interest in securing it | Until the session expires or you sign out |
| Favourites, lists and projects: the products you save, the quantities, your notes, and the references extracted from any bill of materials or CAD file you import. | They are the content you create — a project is a document you edit over weeks. | Performance of the service you asked for | Until you delete them, or your account |
| Searches (search_logs): the text you typed, how the AI interpreted it, the number of results, and your account identifier if you were signed in. | To find the queries that return nothing — that is how we decide which suppliers and keywords to add. | Your consent | 13 months |
| Product views (product_views): the product identifier, the page you came from, and your account identifier if you were signed in. | To measure how many views turn into a click to the seller. | Your consent | 13 months |
| Outbound clicks (outbound_clicks): the product, the seller, whether the link was an affiliate link, the page and the query that led to the click, and your account identifier if you were signed in. | To check commissions, and to rank better the products people actually click on for a given query. | Your consent | 13 months |
If you are not signed in, the three measurement records above carry no account identifier and no visitor identifier: we cannot link two visits to the same person. If you are signed in, they do carry your account identifier — which is exactly why we ask before recording them.
We do not collect: payment details, postal addresses, phone numbers, date of birth, or any special-category data. We never see your card: you pay on the seller's site.
Who else receives data
| Recipient | What reaches them | Where |
|---|---|---|
| The sellers you click through to (RobotShop, Adafruit, Pololu, DigiKey, Farnell, TME, Mouser, Welectron) | By following an outbound link you land on their site with the affiliate identifier in the URL. From that point their own privacy policy applies, and we no longer know what you do. | EU and United States |
| OpenRouter and/or Anthropic (language models) | Only when you use free-text search or the assistant: the sentence you typed, or your answers to the questionnaire, are sent to be turned into search filters. Nothing else — no account, no email, no history. | United States |
| Voyage AI, or OpenAI (embeddings) | The catalogue text we index, and the text of your search query when semantic search is enabled, so they can be compared as vectors. | United States |
| Our email delivery provider | Your email address and the link itself, and only when the site actually has to send you something: an address verification or a password reset. No newsletter, no marketing email — we have none. | European Union / United States |
| Our hosting provider | The server holding the database and its backups, plus the standard web server logs (IP address, requested URL, timestamp) kept for security. | European Union |
Transfers to the United States rest on the European Commission's standard contractual clauses, or on the EU–US Data Privacy Framework where the provider is certified. Practical consequence you should know: do not type personal information into the search box — it leaves for a language model.
Cookies
Four cookies, none of them advertising. Note what is not in this list: audience measurement uses no cookie at all here — it is recorded server-side, which is why it is governed by the banner rather than by a cookie setting.
| Cookie | Purpose | Kept for | Consent |
|---|---|---|---|
better-auth.session_token | Keeps you signed in. | Session duration | Strictly necessary or requested by you |
locale | Remembers whether you read the site in English or French. | 1 year | Strictly necessary or requested by you |
currency | Remembers the currency prices are displayed in. | 1 year | Strictly necessary or requested by you |
consent | Remembers your answer to the measurement question — nothing else, no identifier. | 6 months | Strictly necessary or requested by you |
Your rights
Under the GDPR you can ask for access to your data, its correction, its erasure, a restriction of its use, a copy in a portable format, and you can object to processing based on our legitimate interest.
- Withdraw or change your consent to measurement: use the button below, at any time, in one click. Withdrawal stops any further recording immediately.
- Delete your account and everything attached to it (favourites, lists, projects): email us and we will do it, and confirm when it is done.
- Get a copy of your data: email us; we answer within one month.
- Have your past measurement records deleted even though they are already anonymous when you are not signed in: if you were signed in, ask and we will remove the rows carrying your account identifier.
TO BE COMPLETEDe-mail des demandes RGPD (peut être le même que le général)
If our answer does not satisfy you, you can lodge a complaint with the CNIL (cnil.fr) or with the supervisory authority of your country of residence.
Security
The site is served over HTTPS. Passwords are stored hashed, never in clear text. The database sits on a single server in the European Union with encrypted backups. We collect no payment data, so there is none to lose.
Changes
If we start collecting something new or call a new third party, we update this page and reset the consent version — you will be asked again rather than silently carried over.