Privacy & GDPR — Drop Radar

This notice explains how Drop Radar ("we", "us") handles personal data under the EU/UK General Data Protection Regulation (GDPR).

1. Data controller

Drop Radar, contact: sarah [at] sarahlouisedesigns [dot] com.

2. What we collect

Subscription email — only if you opt-in via the subscribe dialog. Used to send product updates.
Approximate location (country/region) — derived from your IP via a third-party geolocation API to set a default currency. Not stored.
Analytics — Google Analytics (GA4) cookies, only after you accept analytics cookies. Includes pseudonymous identifiers, page views, device and approximate location.
Session cookie — an encrypted, httpOnly cookie set after you enter the shared site password, valid 7 days.

3. Legal bases

Consent (Art. 6(1)(a)) — analytics cookies, marketing emails.
Legitimate interests (Art. 6(1)(f)) — site security, gating access, fraud prevention.

4. Sharing

We use the following processors: Google (Analytics), ipapi.co (geolocation), Finnhub (share prices), SerpApi (Google Trends & Shopping), Lovable Cloud (hosting). No data is sold.

5. Retention

Subscription emails are kept until you unsubscribe. Analytics data follows Google's default retention (14 months). Session cookies expire after 7 days.

6. Your GDPR rights

You have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to withdraw consent at any time. Email sarah [at] sarahlouisedesigns [dot] com to exercise any right. You may also lodge a complaint with your local supervisory authority.

7. International transfers

Some processors are based outside the EEA/UK. Where required, transfers rely on Standard Contractual Clauses or equivalent safeguards.

8. Data accuracy disclaimer

Data displayed on the dashboard is aggregated from third-party sources and synthetic demonstration data. It may be incomplete or incorrect at any given time and must not be relied upon for any decision. See the Terms.

Privacy Notice & GDPR