Privacy

Short version: Slashlist keeps only what it needs to watch prices for you, and never sells it or uses it for advertising. To look up prices it has to tell two services what you're watching — never who you are. Both are named below.

account: your email address, and a securely hashed password (or, if you sign in with Google or GitHub, nothing more than the verified email and name they hand over).
watchlist: what you've asked Slashlist to watch, and the prices it has seen for those things.
settings: your location, if you gave one, and your price source key — kept server-side, never shown back to you in full, never sent anywhere except that source.
purchases: if you tell Slashlist you bought something, it keeps that note — what, where, for how much. Buying happens with the retailer; no card details ever touch this server.
suggestions: things watched here join a shared product index (names and categories only — never who watches them, or at what price), and searches with no matches are counted the same anonymous way, so suggestions get better for everyone.
feedback: if you answer “useful?” on a verdict, report a listing as not the product, or say why you're leaving when you delete the account, that is kept without your name, email or account. A wrong-product report keeps the watch's words and the listing, so the matching can be tested against it. Because nothing in it points back to you, it stays after an account is deleted. The public track record shows counts only.
store links: if you paste a product link to start a watch, Slashlist's server opens that page once to read the product's name. The store sees a request from Slashlist, not from you; the link itself isn't kept.
email: if you set a price you'd be glad about, one email when a watch reaches it (switch it off in settings), plus sign-in mail you ask for — confirmations and password resets. Nothing else.

Who else sees what

SerpAPI → Google Shopping: to find prices, the words of each watch (name, brand, and the search Slashlist makes from them) are sent to SerpAPI, which runs the search on Google Shopping. For nearby stores, the location you typed goes with it. Your email and account are never sent.
Anthropic: to tell the real product from accessories, used units and look-alikes, a watch's description and the listing titles and prices that came back are read by Anthropic's Claude model through its API. Your email, name and location are never sent.
hosting: the site and its database run on one rented server at Hetzner, in the US.

Nothing here is used for advertising, and nothing is shared with anyone beyond the above. Your data is yours to take or destroy: settings has a one-click download of everything as a plain file, and a delete this account that removes all of it from the live service immediately. Copies inside the database backups — kept only to recover from a failure — age out within 30 days. Anything else, get in touch.