Draft — pending counsel review. This text has not been approved as final and may change before DealRouter opens to the public.
Privacy Policy
Last updated September 25, 2026
This policy explains what DealRouter collects, why, which service providers handle it for us, how long we keep it, and the choices you have. DealRouter is operated by DealRouter ("we", "us"). DealRouter is offered in the United States, and address search is limited to US locations.
Summary
- We use your email address to sign you in, and the route and search details you submit to find listings along your trip.
- Routes and searches are deleted automatically 24 hours after you create them.
- We do not sell your personal information, share it for cross-context behavioral advertising, or use advertising or analytics trackers.
- You can delete your account at any time from the Account page.
Information we collect
Information you give us
- Email address, when you request a sign-in link.
- Route details: the start, destination, and stops you type, and the route we calculate from them. Addresses can reveal where you live or travel.
- Search details: search terms, price range, how far from the route to look, and the marketplaces you choose.
- Messages you send to support.
Information collected automatically
- Device location, only if you choose "Use my location" and your browser allows it. We send the coordinates to our mapping provider to look up the nearest address and do not store the coordinates. If you then plan a route, the address becomes part of that route.
- IP address and browser details. Our servers receive your IP address and browser type with each request. We store keyed hashes of IP addresses (for IPv6, the /64 network) and email addresses to limit sign-in and search requests. Our hosting provider keeps request logs that may include the time, requested page, response status, browser type, and network address.
- Usage counts of routes, searches, and location lookups, used to apply your plan's allowances.
- Cookies and browser storage, described below.
Information from others
- Listings from marketplaces, such as titles, prices, photos, the seller's stated location, and links. This describes items for sale, not you.
- Bot-check results from Cloudflare Turnstile, telling us whether a sign-in request passed.
How we use information
- To provide DealRouter: sign you in, plan routes, search marketplaces, and show results near your route.
- To apply plan allowances and prevent abuse, such as automated sign-up or repeated account deletion to reset limits.
- To keep the service secure and working, and to diagnose errors.
- To answer support requests.
- To comply with law and enforce our Terms.
We do not use your information for advertising, and we do not make decisions about you that have legal or similarly significant effects based on automated processing.
Service providers
These companies process information for us to run DealRouter. Each receives only what its job requires.
| Provider | What it does | What it receives |
|---|---|---|
| Fly.io | Hosts the application and database, and keeps request logs | Everything we store, and request logs |
| Geoapify | Address suggestions, address lookup, routing, and map images | Address text you type, route stops, and coordinates from "Use my location". Your browser loads map images directly from Geoapify, which sees your IP address and the map area shown. |
| Resend | Sends sign-in email | Your email address and the sign-in link |
| Cloudflare (Turnstile) | Checks that sign-in requests come from a person | Your IP address and the browser and device signals its script collects |
| eBay | Source of listings, through eBay's official Browse API | Search terms, price range, and US ZIP codes near your route. We do not send your email address or account identity. eBay handles that information under its User Privacy Notice. |
| Sentry | Error diagnostics | The type of error and where in our code it happened. Error messages, request data, and personal information are removed before sending. |
Listing photos may load from the marketplace's image servers, which then see your IP address. When you open a listing, you leave DealRouter, and that marketplace's own privacy policy applies. We add a marketplace only after reviewing it, and we will update this page before a new one is enabled.
We may also disclose information if required by law, to protect the safety or rights of people or DealRouter, or as part of a merger, acquisition, or sale of assets, subject to this policy.
Cookies and browser storage
DealRouter uses only cookies needed for sign-in and security. We do not use advertising or analytics cookies.
| Name | Purpose | Lasts up to |
|---|---|---|
dealrouter_session | Keeps you signed in. Scripts cannot read it. | 30 days |
dealrouter_csrf | Proves that account actions come from DealRouter's own pages. | 30 days |
dealrouter_auth_flow | Ties a sign-in link to the browser that requested it. Scripts cannot read it. | 15 minutes |
The sign-in page loads Cloudflare Turnstile, which may set or read its own cookies or similar storage to tell people from bots. Cloudflare's privacy policy governs that data; DealRouter does not receive it.
Your browser's local storage keeps your shortlist of starred listings and a display preference. They stay on your device and are not sent to us. Clearing site data removes them.
Because we do not track you across other websites, there is no cross-site tracking for Do Not Track or Global Privacy Control signals to turn off.
How long we keep information
An automatic background process deletes data when its window ends. It works in small batches; if the service is down, deletion catches up when it returns.
| Information | How long |
|---|---|
| Account: email address, verification time, and plan | Until you delete your account Deletion erases the email address at once. A record with no email address or contact details remains so that usage and any billing records stay consistent. |
| Routes: the start, destination, and stops you enter and the route we calculate | 24 hours after the route is planned |
| Searches: search terms, price and distance filters, the listings found, and search progress | 24 hours after the search starts A search is kept past this window only until its usage count is settled. |
| eBay listings found by a search | Deleted within 6 hours of being fetched eBay's terms allow its listings to be shown only while they are this fresh, so they leave your results and our database at that point. |
| Sign-in requests: the email address entered and one-way hashes of the sign-in link and the requesting browser | Deleted when the link expires, 15 minutes after the request |
| Sign-in sessions: one-way hashes of your session and security tokens and the time of your last activity | Deleted 30 days after sign-in A session also ends after 7 days without activity, when you sign out, or when you delete your account. |
| Abuse-prevention counters: keyed hashes of the email address or IP address (for IPv6, the /64 network) behind recent sign-in and search requests | Up to 2 hours |
| Usage records: counts of routes, searches, and location lookups against your allowance | Up to 90 days after the allowance period ends |
| Security and account events, such as an account deletion | 90 days |
| Deletion marker: a keyed, non-reversible hash of a deleted account's email address | 90 days after the account is deleted It lets us keep current allowances in place if the same address signs up again. It cannot be read back into an email address. |
Hosting logs and error reports are kept for the periods set by those providers' services. Database backups can hold deleted information until they age out; if we ever restore one, we apply recorded deletions before the service reopens. We cannot withdraw files you download or pages you open on a marketplace.
Your choices and rights
Delete your account
Choose Delete account on the Account page. For security, you must have signed in within the last 15 minutes; if not, request a new sign-in link first. Deletion takes effect immediately. It signs you out everywhere, deletes your routes, searches, results, and pending sign-in links, and erases your email address. What remains is listed in the table above: usage counts and the record of the deletion for 90 days, a deletion marker for 90 days.
If you cannot sign in, email us from the address on the account and we will help.
Access, copies, and corrections
You can download the results of a search as a CSV file. To request a copy of other information linked to your account, or to correct it, email us from the address on the account. Changing an account's email address is not available during the beta; you can delete the account and sign up with the new address.
US state privacy rights
Depending on where you live, including California, you may have the right to know what personal information we collect, use, and disclose; to get a copy of it; to correct it; to delete it; and not to be treated differently for using these rights. We honor these requests from all users. We verify a request by confirming it from the email address on the account. You may use an authorized agent; we may ask the agent for your signed permission and confirm the request with you directly. If we deny a request, you may reply to ask us to reconsider.
In the past 12 months we have collected these categories of personal information, from you, your device, and the service providers above, for the purposes described in this policy:
- Identifiers: email address and IP address.
- Internet or network activity: request logs and usage counts.
- Geolocation data: addresses in your routes and, if you choose, your device's location. We use this only to provide the route and search you ask for.
We disclose these categories to the service providers listed above for business purposes. We have not sold or shared personal information for cross-context behavioral advertising, and we do not knowingly sell or share the information of anyone under 16.
Children
DealRouter is for adults and is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.
Security
Sign-in links work once and expire after 15 minutes. We store only one-way hashes of sign-in links and session tokens, connections use HTTPS, and error reports have personal details removed. No system is perfectly secure; if we learn of a breach that affects you, we will notify you as the law requires.
Where information is processed
DealRouter is intended for people in the United States. We store data in the United States. Our service providers may process it in other countries under their own safeguards.
Changes to this policy
We will post any change here and update the date above. If a change materially affects how we use information we already hold, we will tell you by email or in the app before it takes effect.
Contact
Questions or requests: support@plotlight.app.