Privacy

Ebbwatch has no passwords, no ads and no tracking cookies. This page says what is recorded and by whom. Last updated 2 November 2026.

Visiting the site

• The site is served by Cloudflare, which keeps standard request logs (IP address, page, browser) to run and protect the service. We don't use them to identify anyone.
• Visitor counts come from Cloudflare Web Analytics, which sets no cookies and doesn't follow you across sites.
• Your currency choice is kept in your own browser (local storage), not sent to us. The first guess comes from your device's time zone, worked out in your browser.
• Searches are matched in your browser, and we don't keep them.

Store links

Some store links are affiliate links: if you buy after following one, the store may pay us a commission. The store, or the affiliate network it uses, then records the visit with its own cookies, under its own privacy policy. We get sales totals, not your name or what else you bought.

Price alerts and the newsletter

What we keep, only once you ask for an alert:

• your email address and the currency you chose;
• each alert: the product or developer, your target prices, whether you asked about new lows, and when you set it;
• whether you want the weekly newsletter, and when you confirmed;
• a list of the emails we've sent you: which kind, when, and whether it went out. Not copies of them.

We use your address only to send the alerts and newsletter you asked for. We never sell it, share it or use it for anything else. We may later show anonymous totals, such as how many people watch a product, never tied to anyone.

How it works:

• Nothing is sent until you confirm by clicking the link we email you. An address that's never confirmed, and any alert that isn't, is deleted after 2 days.
• There's no password. To open My alerts we email you a sign-in link that works once, for 30 minutes; we keep only a scrambled (hashed) copy of its code. Signing in sets one cookie on alerts.ebbwatch.com that keeps you signed in for an hour, and nothing else.
• The forms use Cloudflare Turnstile, a check that tells people from bots by looking at your browser and connection, under Cloudflare's privacy policy. It sets no tracking cookies.
• The alert server doesn't log visitors' IP addresses. To stop abuse it counts requests per address in memory and forgets them within an hour.
• Our emails are delivered by Amazon Simple Email Service (Amazon Web Services, Sydney region), which handles your address and the message to deliver them. If an address bounces for good, or you mark one of our emails as spam, Amazon tells us and we stop emailing that address.
• Our emails contain no tracking pixels, and their links aren't rewritten to track clicks.

Where it's stored: on our own server (OVHcloud, United States), with backups in Cloudflare's R2 storage that are kept for 30 days.

Deleting it: "Unsubscribe" at the foot of any of our emails, or "Remove all and delete my email" on My alerts, deletes your address, your alerts and the list of emails sent to you at once. They drop out of the backups within 30 days. "Stop watching this" beside an alert removes just that one.

Writing to us

If you write to us, we keep your message and address to reply, in our mailbox (Zoho Mail).

Used-license listings

Our bot reads public forum feeds where people sell used licenses, to find what is for sale and at what price. We keep a post's text privately only until it is read into product and price, and never store the poster's name: only a scrambled code that tells us whether a later reply came from the same person. The text is read by an AI service (Anthropic's Claude) that we pay for this; it doesn't train on what we send.

Your rights

You can see and delete your alerts yourself on My alerts at any time. Ask what else we hold about you, or ask us to delete it, at [email protected]. We answer within 30 days.