Privacy Policy

Effective Date: May 28, 2026

Madealert ("the Service") is operated by HAM Technologies, LLC ("we", "us"). This policy explains what data we collect about you, how we use it, who we share it with, and what your rights are.

1. Who we are

Madealert is an independent deal-monitoring service that helps eBay buyers find listings matching their saved criteria. We are not owned by, operated by, or endorsed by eBay Inc. We participate in the eBay Partner Network and may earn commissions when users make qualifying purchases through links in our deal alerts (see Section 5 below).

For any privacy question or request, contact us at [email protected].

2. Information we collect

When you create an account

• Email address and name
• Notification email (which may differ from your account email)
• Timezone preference

When you use the Service

• Search criteria you create (keywords, eBay category, price range, condition, listing type, location filters)
• Push notification token (mobile app only) and basic device info (OS, app version)

When you subscribe

• Subscription plan tier, status, and source (Lemon Squeezy, Apple, or Google)
• External subscription ID from the payment processor
• We do not collect or store payment card details. All payment information is handled directly by Lemon Squeezy, Apple, or Google.

Automatic data

• Server access logs (IP address, request paths, timestamps), used for security and debugging, retained for 90 days
• Email delivery logs (whether alerts were delivered, opened)

3. How we use your information

• Deliver deal alerts that match your saved criteria, via email and push notification
• Manage your account and subscription
• Process subscription billing through Lemon Squeezy, Apple, or Google
• Improve the Service's reliability and accuracy
• Respond to your support requests

4. Third parties we share data with

We share the minimum data needed to operate the Service. We do not sell your personal information.

• eBay Marketplace — we query eBay's public Browse API on your behalf. We do not share your identity with eBay.
• Resend — delivers deal-alert emails. We share your notification email and the alert content.
• Apple Push Notification Service / Google Firebase Cloud Messaging — deliver push notifications to your device. We share the device push token and notification payload.
• Lemon Squeezy — processes web subscriptions. Shares: account email and subscription state.
• Apple App Store / Google Play Store — process mobile subscriptions. Shares: device-level purchase data.
• RevenueCat — manages mobile subscription state on our behalf. Shares: anonymous user ID, subscription product, status.
• Railway — hosts our infrastructure and stores account data.

5. Affiliate links

Madealert participates in the eBay Partner Network. When you click "View on eBay" in a deal alert email or push notification, the destination link includes affiliate tracking parameters (such as campid and customid).

If you make a qualifying purchase on eBay within their attribution window (typically 24 hours after clicking), we may earn a small commission from eBay. This is at no additional cost to you — eBay pays us out of their own margin, not by charging you more.

We do not share your personal identity with eBay. The customid parameter is an internal alert identifier (a random UUID) — not your name, email, or account ID. eBay receives only the click event tied to that UUID for commission attribution purposes.

6. Your rights

You have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Delete your account and personal data
• Export your data in a portable format
• Withdraw consent, such as unsubscribing from notifications

To exercise these rights, email [email protected]. We will respond within 30 days.

If you are in the EU/EEA, the UK, or California, you have additional rights under GDPR or CCPA — including the right to lodge a complaint with your local data protection authority.

7. Data retention

• Active accounts: data is retained as long as your account exists
• Cancelled accounts: data is deleted within 30 days of account deletion, except where retention is required for tax or legal reasons (typically 7 years for billing records)
• Server logs: retained for 90 days

8. Children

The Service is not intended for users under 13. We do not knowingly collect data from children under 13. If we become aware that we have, we will delete it promptly.

9. Cookies (web)

The web app uses essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking.

10. Security

We use industry-standard practices to protect your data, including encrypted transport (HTTPS), encrypted database backups, and limited access to production systems. However, no method of internet transmission or storage is 100% secure.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email and post an updated effective date at the top of this page. Continued use of the Service after changes constitutes acceptance.

12. Contact

Privacy questions or requests: [email protected]