DidPriceSign in
DidPrice
Privacy and data protection
DidPrice is operated by OFTALVET, Lda. — Rua da Boavista 44, 4050-102 Porto, Portugal (CAE 75000).
1. Controller and data subjects
OFTALVET, Lda. is the controller for DidPrice account and service data. You, the user, are the data subject for your account information. For privacy requests, contact alerts@didprice.com: this is our data protection contact, not a claim that a statutory Data Protection Officer has been appointed.
2. Data we process
We process your username, display name, email addresses, securely hashed password, account and subscription status, monitor URLs, captured page text, timestamps, comparisons and delivery records. Security and audit records document account activity; a short-lived IP-derived cache key limits registration and password reset requests. We do not receive or store full payment card details from Paddle.
3. Purposes and legal bases
We process account details and captures to perform our contract with you (GDPR Article 6(1)(b)). Our legitimate interests (Article 6(1)(f)) support proportionate monitoring of public pages, service security and abuse prevention. Public captures can incidentally include third-party text or personal data: we do not deliberately collect personal data about third parties or build profiles of them. Avoid selecting pages containing sensitive information and contact us to request review or removal of an inappropriate capture. Records required by tax or accounting law are processed to comply with legal obligations (Article 6(1)(c)).
4. EU hosting and providers
DidPrice application data is hosted by Hetzner on servers in Helsinki, Finland, within the European Union. We use Hetzner for hosting, Paddle for payments and dominios.pt for email delivery. These providers receive only data needed for their roles; Paddle may also act as an independent controller for payment and legal compliance purposes. Where a provider processes personal data outside the EEA, GDPR transfer safeguards must apply, such as an adequacy decision or standard contractual clauses.
5. Retention and deletion
We retain the 100 newest captures per monitor, plus the original and latest successful live evidence where these are outside that set. When your account is deleted, its associated service data is deleted from the live application; residual backup copies expire within 30 days. Legally required billing records may be retained separately for the statutory period. Contact alerts@didprice.com to request account deletion; cancelling a subscription alone does not delete your account.
6. Your GDPR rights
You may request access, rectification, erasure, restriction and portability of your personal data, and object to processing based on legitimate interests. These rights apply subject to the conditions in the GDPR. Write to alerts@didprice.com; we may need proportionate identity verification. We normally respond to rights requests within one month, with any lawful extension explained. You may complain to the Portuguese supervisory authority, CNPD, or your local supervisory authority. We do not make solely automated decisions producing legal or similarly significant effects on you.
7. Essential cookies only
DidPrice uses session and CSRF cookies for sign-in and request security. If you choose a language, an additional preference cookie remembers that choice. We do not use analytics, advertising or tracking cookies. Cookies are not used to follow you across other websites.