Privacy Policy

Last updated: 3 August 2026

Basketwize ("we", "us", "our") operates the website basketwize.com. This policy explains what personal data we collect, why we collect it, and your rights under the EU General Data Protection Regulation (GDPR).

1. Who we are

Basketwize is a price-comparison service for South-Asian groceries sold by online stores in Germany and the Netherlands.

Data controller: [PLACEHOLDER — legal entity name & address once registered]
Contact: privacy@basketwize.com

2. Data we collect

2a. Data you give us

• Email address — when you join the waitlist or create an account.
• Country preference — DE or NL, stored in your browser (localStorage). Not sent to our servers unless you create an account.
• Saved baskets — the grocery lists you build. Stored in your browser unless you are signed in, in which case they are saved to our database.

2b. Data collected automatically

• Analytics — we use Plausible Analytics, a privacy-friendly tool that collects no cookies and no personal identifiers. It records only aggregated page views and referrers. No consent banner is required.
• Server logs — our hosting provider (Vercel) may log IP addresses and request metadata for security and reliability purposes. These logs are retained for up to 30 days.

3. Legal basis for processing

• Contract performance (Art. 6(1)(b) GDPR) — to provide the service when you create an account.
• Legitimate interests (Art. 6(1)(f) GDPR) — for aggregated analytics and security logging.
• Consent (Art. 6(1)(a) GDPR) — for the waitlist email.

4. How we use your data

• To provide the price-comparison and basket-optimisation service.
• To send you waitlist or product updates (only if you opted in).
• To understand aggregate usage so we can improve the product.
• To detect and prevent abuse or fraud.

5. Who we share data with

We do not sell your personal data. We share data only with:

• Vercel Inc. — hosting and infrastructure (US; EU data transfers covered by SCCs).
• Supabase Inc. — database hosting (EU region selected).
• Plausible Analytics — cookieless analytics (EU-hosted, no personal data transferred).

6. Data retention

• Account data: retained until you delete your account.
• Waitlist email: retained until you unsubscribe or the list closes.
• Anonymised analytics: retained indefinitely (no personal data involved).
• Server logs: up to 30 days.

7. Your rights

Under GDPR you have the right to:

• Access — request a copy of data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — ask us to delete your data ("right to be forgotten").
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any right, email privacy@basketwize.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority (Germany: BfDI; Netherlands: AP).

8. Cookies

We do not use tracking cookies. See our Cookie Policy for full details.

9. Children

Basketwize is not directed at children under 16. We do not knowingly collect data from children. If you believe a child has provided us personal data, contact us and we will delete it promptly.

10. Changes to this policy

We may update this policy occasionally. When we do, we will update the date at the top. For material changes we will notify registered users by email.

11. Contact

Questions about this policy? Email us at privacy@basketwize.com.