Privacy Policy

Protecting your data is important to us. EuroSaver is built to process as little personal data as possible: the browser extension needs no account, builds no tracking profile and sets no advertising cookies.

This privacy policy informs you in accordance with Art. 13 GDPR about the processing of personal data when you use the website https://eurosaver.net, the EuroSaver browser extension and the EuroSaver API with its dashboard.

Controller: Michael Kreuzmayr, Daxberger Straße 33, 4076 St. Marienkirchen an der Polsenz, Austria. Email: founderedeveloper@gmail.com

Last updated: 26.10.2026

Provision of the Website and API (Hosting & Cloudflare)

When you visit our website or the extension contacts our API, your browser transmits technical data such as your IP address, the date and time, the requested address, and browser and operating system information. We need this data to deliver the website and the API.

We do not keep access logs with IP addresses. To stop abuse and overload, our servers hold your IP address briefly in memory as part of rate limits, for minutes up to a few hours. If a network sends harmful traffic, we may block that network's address range. With price data we store only the country that Cloudflare derives from the connection, never the IP address itself.

The website and API are provided via Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) as a content delivery network and security service. Cloudflare processes connection data (especially the IP address) to deliver content, defend against attacks, and ensure security and stability. On the verification page that the extension opens after unusually many product lookups, Cloudflare Turnstile checks whether a person is using the browser; Turnstile evaluates technical signals of your browser for this. The legal basis is our legitimate interest in a secure and reliable provision of our services (Art. 6 (1) lit. f GDPR).

We have a data processing agreement with Cloudflare in accordance with Art. 28 GDPR. Cloudflare is certified under the EU-U.S. Data Privacy Framework; additionally, EU standard contractual clauses are used (Art. 44 et seq. GDPR). Further information: https://www.cloudflare.com/privacypolicy/

Web Analytics with Umami (Self-Hosted)

To measure reach, we use the open-source software Umami, which we host ourselves. No data is transmitted to third parties. Umami only runs while we have switched it on.

Umami works without cookies and without cross-device tracking. It counts page views with anonymized usage data (pages visited, referrers, browser type, country). It respects your browser's Do Not Track setting and does not record search parameters. There is no identification of individual visitors and no merging with other data.

The legal basis is our legitimate interest in the anonymized analysis and improvement of our offering (Art. 6 (1) lit. f GDPR).

Browser Extension EuroSaver

The extension needs no user account. Using it means contributing price data: the prices EuroSaver shows come from the Amazon product pages that EuroSaver users open. Uninstalling the extension ends this at any time.

Install key. When you install the extension, it creates a random key pair in your browser. The private key never leaves your device. From the public key we derive an install ID that identifies the installation, not you. For each install ID we store when it was first and last seen, the extension version, the browser type, the operating mode and abuse markers (for example a block after implausible prices). We use this to recognise installations, roll out updates step by step and stop misuse.

Price data from the pages you open. When you open an Amazon product page, the extension sends the product data shown on that page to our API: the product (ASIN, title, brand, image, category), the store, the prices of the offers, shipping costs, coupons and deals, rating and number of reviews, sales rank, availability, the delivery country shown on the page, the displayed currency and the time. We store these observations with a keyed hash of the install ID, so stored price data cannot be linked back to an installation, and with the country derived from your connection. We use the data for the price comparison, price histories, the deal and coupon pages and our price API for business customers.

Comparing stores and refreshing prices. To compare stores, the extension loads the same product in other Amazon stores from your browser. If a customer of our price API asks for a fresh price, our server can ask a connected extension to load product pages in the background, at most one at a time and 30 per hour. In both cases we receive only the product data described above.

Telemetry and error reports. For each field of a page, the extension reports whether it could be read and which rule read it, without the values themselves. If reading a product page fails, it can send a copy of that page from which personal elements (such as your name, address and account details) are removed first. We keep these error reports for at most 30 days and use them to repair the reading rules.

Settings, donation key and ads. Your extension settings (for example display format, currency, hidden stores) are stored locally in your browser and are not transmitted to us. To show a sponsored row in the comparison, the extension requests ads for the current store and language. If you have entered a donation key, the extension sends it with this request so that we can hide the ads.

Human check. If an installation opens unusually many different product pages within an hour, price lookups pause. The extension then offers a verification page on our website (see Cloudflare Turnstile above). After a successful check we note for six hours that the installation may continue.

The legal basis is our legitimate interest in providing a free price comparison built on its users' contributions, in protecting it against misuse and in offering the collected price data (Art. 6 (1) lit. f GDPR). Price data contributed earlier stays stored after you uninstall, but it cannot be linked to you.

Customer Accounts for the API and Dashboard

If you create an account for the EuroSaver API, we process your name, email address and password (stored only as a hash), your organization and its members, your API keys (stored only as a hash), the use of the API per key and day and a history of the changes made in your organization. For each sign-in session we store its IP address and browser, so you can recognise and end sessions. We send emails for sign-up, password resets and invitations via Resend, Inc. (USA); EU standard contractual clauses apply to this transfer (Art. 44 et seq. GDPR).

The legal basis is the performance of the contract with you (Art. 6 (1) lit. b GDPR). We store the data as long as the account exists and delete it when the account is deleted, unless statutory retention obligations apply.

Contact by Email

If you contact us via email, we process the data you provide (email address, content of the message) to handle your request. The legal basis is Art. 6 (1) lit. b GDPR, insofar as the request relates to the use of our services, otherwise our legitimate interest in responding to inquiries (Art. 6 (1) lit. f GDPR).

The data will be deleted as soon as it is no longer required for processing and there are no statutory retention obligations preventing deletion.

Feedback upon Uninstallation

When you uninstall the extension, you can voluntarily give feedback via a form on our website. We store the reasons you chose, the texts you typed, the page language, your browser type and a keyed hash of your network address in our database, where our team reads them. We do not store your IP address or your name. Please do not provide personal data in the free-text fields; if you want a reply, write to us by email.

The legal basis is our legitimate interest in improving our offering (Art. 6 (1) lit. f GDPR). The data will be deleted after evaluation.

Deals, Coupons and Finds

The deal, coupon and find pages on our website show product data, prices and how many shoppers confirmed them. They contain no data about the users who contributed them.

External Links and Affiliate Links

Our website and the extension contain links to external providers, including links to Amazon that may carry our affiliate tag, and a link to Buy Me a Coffee. Merely displaying these links does not transfer any data to the providers. Only when you click a link do you leave our offering; from that point on, the privacy policy of the respective provider applies, over whose data processing we have no influence.

Data Security

All connections to our website and API are encrypted via TLS, and the extension signs its requests with its install key. We take appropriate technical and organizational measures in accordance with Art. 32 GDPR to protect the processed data and keep the scope of processing as small as possible according to the principle of data minimization.

Your Rights

Under the GDPR, you have the following rights: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20).

You also have the right to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) lit. f GDPR (Art. 21 GDPR).

To exercise your rights, an informal email to founderedeveloper@gmail.com is sufficient. We may request additional information in cases of doubt to verify your identity.

Please note: data of the extension is stored without names or email addresses. We can only find the data of an installation if you tell us its install ID, and stored price data cannot be linked back to an installation at all. In such cases, providing information or erasure is often not possible due to a lack of identifiable data (Art. 11 GDPR). We will inform you accordingly.

You also have the right to lodge a complaint with a supervisory authority. In Austria, this is the Data Protection Authority, Barichgasse 40–42, 1030 Vienna, www.dsb.gv.at.

Changes to this Privacy Policy

We will update this privacy policy if our data processing practices or the legal framework changes. The version published on this page applies; you will find the date of the last update at the top.

Contact

If you have any questions about data protection, you can reach us at founderedeveloper@gmail.com.