What we know about you,
and who else sees it.

If you never sign in, we hold nothing that identifies you. No account, no profile, no stored history of what you looked for. Your search text is used to answer that search and is not written against you.

If you sign in, our database holds your email address, and — when you use Google — the display name and profile picture Google gives us. That is what puts your name in the corner of the screen. Sign-in is handled by Supabase, which is where those records live.

If you star a product, we store two things: which account starred it, and which product it was. That is the entire wishlist record.

Your IP address is used, in passing, to stop one machine from hammering the search and running up our bills. It is checked against a short-lived counter and is not stored alongside your searches or your account.

We also keep a cache of the search phrases people use — the words themselves, so that the next person searching them gets an instant answer instead of waiting for the AI step. Those entries hold the phrase and nothing about who typed it.

This is the part worth reading properly, because it is the part most sites leave vague.

When you search, the words you typed are sent to DeepSeek, which works out what you actually meant — that “something to cut garden plants” means shears and trimmers. Then your words, along with the titles of the products we found, are sent to Cohere, which puts the best matches first.

Both receive the search text alone. Neither is sent your name, your email, your IP address, your account, or anything connecting one search to another or to you. They are given a question and they answer it.

DeepSeek is a Chinese company and processes that text on its own infrastructure. We are telling you plainly because you cannot make a sensible decision about typing something into a search box without knowing where it goes. If you would rather a search never left this site, do not type anything into it you would not put into any other search engine.

We use Google Analytics and Vercel Analytics to see which pages people use and where the site is slow. Google Analytics sets cookies in your browser and Google receives that traffic data under its own terms; Vercel’s does not set cookies.

Aside from those, and the session that keeps you signed in, we do not set cookies of our own — no advertising cookies, no third-party trackers, because we sell no advertising for them to serve.

Every “Buy now” goes through an affiliate network — for most of the catalogue, Awin — which records the click so the retailer knows the sale came from here. That is the mechanism by which we get paid, and it is the only one.

From the moment you leave this site you are the retailer’s visitor, under the retailer’s privacy policy, and what they collect is theirs and not ours.

How the commission arrangement works is set out on our disclosure page.

We do not sell your personal data. We do not share it with data brokers or advertisers. We do not build an advertising profile of you, and we do not rank products by who paid — no retailer can buy a higher position here, which is the whole point of the place.

We do not track you across other websites, and we do not read your email, contacts or anything else your Google account can reach. Signing in with Google gives us your address, name and picture; that is the extent of it.

You can use the whole site signed out, in which case there is nothing of yours to delete.

If you have an account, you can un-star anything at any time, which deletes that record. Ask us to delete the account and we will remove it and its wishlist. Ask us for a copy of what we hold and we will send it — it is a short list, as above.

We are two people, not a department. Write to us and one of us reads it.