Skip to main content

Privacy Policy

Last updated: 2026-04-13

Who we are

KeepaVault is a browser extension and associated cloud service that saves and loads filter preset configurations for Keepa Product Finder.

Data controller: WhiteKnight Software Ltd, registered in England and Wales (company number 14607486).

For data protection enquiries, email [email protected].

We do not have a Data Protection Officer because we are a small organisation that does not carry out large-scale processing of special category data. You can contact us directly at the address above.

Data we collect and why

Account data

  • Email address — used for registration, login, email verification, and account-related communications (verification codes, security notices). Lawful basis: contractual necessity (Art. 6(1)(b)).
  • Password — stored as a one-way PBKDF2 cryptographic hash with random salt. We never store or see your password in plaintext. Lawful basis: contractual necessity.
  • First name, last name — displayed to other users when you share presets (e.g. "From Bob Dinger"). Lawful basis: contractual necessity.

Preset data

  • Filter preset configurations you choose to save — names, descriptions, and filter field values.
  • Metadata about your presets — filter count, Keepa locale, timestamps.

Lawful basis: contractual necessity (Art. 6(1)(b)).

Sharing data

When you share a preset with another user, the recipient sees your first name, last name, and email address. Shared presets include a snapshot of the preset name, description, and filter values.

Bug reports

When you submit a bug report through the extension, we collect the details you enter and the preset name (if applicable). This data is forwarded to a private Discord channel for our support team. Your email address is included so we can follow up. Lawful basis: legitimate interest in maintaining and improving the service (Art. 6(1)(f)).

Newsletter (optional)

If you sign up for our newsletter on the website, we collect your email address. This is sent to Kit (formerly ConvertKit), our email marketing provider, to manage the mailing list. Lawful basis: consent (Art. 6(1)(a)). You can unsubscribe at any time.

Payment data (future)

Strategy Pack purchases will be processed by Stripe. We will store your Stripe customer ID to link purchases to your account. We will not store card numbers, bank details, or other financial information. See Stripe's privacy policy.

Data we do NOT collect

  • Browsing history or web activity outside of Keepa Product Finder.
  • Your Keepa account credentials.
  • Amazon account data or purchase history.
  • Data from pages other than keepa.com.
  • Analytics, tracking, or advertising identifiers.
  • Device fingerprints or IP addresses (beyond what Cloudflare processes as our hosting provider).

How we use your data

  • To authenticate you and provide the extension's core functionality.
  • To store and retrieve your saved filter presets.
  • To send you email verification codes when you create an account.
  • To display your name to recipients when you share presets.
  • To process bug reports you submit.
  • To send you service announcements or security notices when necessary.

We do not sell, rent, or transfer your personal data to third parties for advertising, marketing, or any unrelated purpose.

Third-party services

We share your data with the following third parties, solely to operate the service:

  • Cloudflare (Workers, D1) — hosting, database, and API infrastructure. All account and preset data is stored here. Privacy policy.
  • Brevo (formerly Sendinblue) — sends email verification codes. Receives your email address only. Privacy policy.
  • Discord (webhook) — receives bug reports you submit, including your email address. Privacy policy.
  • Kit (formerly ConvertKit) — manages newsletter subscriptions. Receives your email if you opt in. Privacy policy.
  • Stripe (future) — will process Strategy Pack payments. Will receive your email and a customer ID. Privacy policy.

International data transfers

Your data is stored on Cloudflare's global infrastructure. Cloudflare may process data in locations outside the United Kingdom, including the United States. These transfers are protected by Cloudflare's Data Processing Addendum, which incorporates Standard Contractual Clauses approved by the UK Information Commissioner's Office.

Brevo processes data in the EU. Kit and Discord are US-based; transfers are covered by their respective data processing agreements and Standard Contractual Clauses.

Data retention and deletion

  • Account data and presets: Retained for as long as your account is active. When you delete your account (Settings > Danger zone in the extension), all data is permanently removed.
  • Email verification tokens: Automatically expire after 30 minutes and are deleted on successful verification.
  • Bug reports: Retained in our Discord channel indefinitely. Contact us to request removal.
  • Newsletter subscribers: Retained until you unsubscribe or request removal.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate or incomplete data.
  • Delete your account and all associated data (Settings > Danger zone, or email us).
  • Export your preset data in a portable format (contact us).
  • Restrict processing in certain circumstances.
  • Object to processing based on legitimate interest.
  • Withdraw consent for any processing based on consent (e.g. newsletter).
  • Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email [email protected]. We will respond within one month.

Right to complain

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Automated decision-making

We do not use automated decision-making or profiling that produces legal effects or similarly significant effects on you.

Children

KeepaVault is not intended for use by anyone under the age of 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

Chrome extension permissions

The extension requests the following browser permissions:

  • storage — to cache your authentication token and preset data locally for performance.
  • sidePanel — to provide the side panel interface on Keepa pages.
  • tabs — to detect when you navigate to or away from Keepa, so the side panel can open and close automatically.
  • Host permission (keepa.com) — to read and write filter values on the Keepa Product Finder page.

The extension does not access data on any other website.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the extension or our website. The "last updated" date at the top reflects the most recent revision.

Contact

For privacy enquiries, data subject requests, or any question about your data, email [email protected].

KeepaVault is a product of WhiteKnight Software Ltd, registered in England and Wales (company number 14607486). For data protection and legal enquiries, contact [email protected].