Your information

Privacy Policy

Last updated October 9, 2026

This policy explains how Harpy Alerts handles information when you use the iPhone app, its supporting services, and this website. Harpy helps you monitor eBay searches. It is independent of eBay.

Who We Are

I’m Andy Geer, the developer of Harpy Alerts, operating from Ontario, Canada. I’m responsible for how Harpy handles your personal information. In this policy, “we” and “our” refer to Harpy Alerts. For privacy enquiries, email contact@harpyalerts.com.

Information We Handle

• Account information. Your email address, account identifier, authentication records, account settings, and your 18+ self-declaration with its date and wording version. Supabase handles password authentication; your password is not stored as readable text in the application database.
• Hunts and results. Search terms, filters, selected countries where items are located, search intervals, Hunt names and notes, matching listings, viewed state, and notification preferences. Search terms and notes can contain personal information if you enter it.
• Notifications. An installation identifier, Apple push-notification token, permission state, notification delivery records, and your Quiet Hours schedule and saved time zone.
• Technical records. Search execution, request, error, and delivery records used to operate and troubleshoot Harpy. Hosting and authentication providers may also process IP addresses, request times, and device or browser information.
• Support and testing. Messages, screenshots, and other information you choose to send. During TestFlight testing, Apple may make testing diagnostics and submitted feedback available to us.
• eBay listing information. Listing descriptions, photos, prices, availability, and public seller information returned by eBay. This information is used to display matches and keep results up to date.

Selected search countries describe where to look for items, not your device’s GPS location. The current app does not request precise device location, contacts, or an advertising identifier. Harpy does not ask for your eBay password or collect payment-card details for purchases made on eBay.

Why We Use It

We use information to authenticate your account, run your saved searches, display and organize matches, avoid duplicate results and alerts, deliver your selected notifications, recover or delete your account, respond to support requests, and investigate service failures or misuse.

Harpy can reuse equivalent searches and public listing information to reduce repeated eBay requests. This does not make your account, personal Hunt notes, or preferences visible to other users.

Services We Use

The following services handle information needed to provide Harpy:

• Supabase: account authentication, application database, and associated service records, including your email, Hunts, preferences, and device registration.
• Cloudflare: website hosting, application requests, search processing, queues, and associated technical records.
• Render: background scheduling and notification delivery, including processing the identifiers and notification information needed for those tasks.
• Google Workspace: receiving, storing, and replying to support, privacy, and other correspondence sent to contact@harpyalerts.com, including sender addresses, messages, and attachments.
• Resend: account emails such as password recovery, including recipient addresses, message content, and delivery records.
• Frankfurter: daily reference exchange rates used for estimated display prices. Harpy’s backend downloads a shared rate table. The app receives that table through our Cloudflare service and caches it on your device. We do not send account details, Hunt searches, listing data, your device IP address, or your selected display currency to Frankfurter. Cloudflare receives your IP address when delivering the table. See Frankfurter’s service and privacy information.
• Apple: push delivery, including device tokens and notification content; app distribution and TestFlight testing under Apple’s own terms.
• eBay: search terms and filters sent through its API, and requests for listing details. Harpy does not include your Harpy account email or password in its eBay search requests.

Listing images load from external image hosts, which receive your IP address and the requested image address. When you open a listing on eBay, eBay’s privacy policy applies to your activity there. Notification previews may display listing or Hunt information on your lock screen; you can control previews in iPhone Settings.

Harpy does not embed advertising or third-party behavioural analytics SDKs in the app. We do not sell your personal information or share it for targeted advertising. Information may also be disclosed when required by law or where lawfully necessary to address fraud, security incidents, or threats to rights or safety.

eBay affiliate links

Harpy participates in the eBay Partner Network and may earn a commission from qualifying purchases made through eBay links in the app.

When you choose Open on eBay, the link may include a campaign identifier that identifies Harpy as the referring publisher. Harpy does not add your Harpy account ID, email address, device identifier or a user-specific affiliate reference to these links, and does not record a separate affiliate-click history.

After you open the link, eBay may use cookies or similar technologies to attribute activity and qualifying purchases to Harpy. eBay handles information on its website and in its app under its own privacy notice and your eBay privacy choices. Harpy may receive affiliate performance and commission reports from eBay; Harpy does not use a user-specific reference to connect those reports to your Harpy account.

Where Information Is Processed

Our providers operate internationally. Information may be processed outside your country, including in the United States, and may be subject to local laws and lawful government access. Harpy remains responsible for information processed on its behalf; using a provider does not remove that responsibility.

Storage and Deletion

Your account information and saved Hunts are kept while your account remains active, unless you delete them. Pausing a Hunt stops its automatic searches but retains it. Removing the app from your phone does not delete your account or stop server-side monitoring.

To delete your account, open Settings → Account, type DELETE, and confirm. Once deletion succeeds, Harpy removes the authentication account and its associated personal Hunts, match history, preferences, device registrations, and pending account work from the active database. Public listing records shared across accounts are separate and can remain.

Deletion from the active database does not necessarily remove records already held in provider logs, email delivery systems, backups, support correspondence, or Apple’s systems at the same time. A result leaving the app’s visible feed is also not a guarantee that all stored history has been erased.

Some shared search criteria and diagnostic records can remain after account deletion. These records may include search terms, so please avoid putting personal information in your searches. We do not currently apply a fixed automatic expiry period to every search record or support message. For help with personal information that remains outside your account, contact contact@harpyalerts.com.

Your Choices and Requests

You can edit or delete Hunts, remove optional notes, change notification preferences, use Quiet Hours, and disable notifications in iPhone Settings. Turning off notifications does not stop searches; pause the Hunt to do that.

Depending on the laws that apply to you, you may request access to or a copy of your personal information, correction, deletion, or limits on its use, and withdraw consent where processing depends on consent. Some information is necessary to operate an account; withdrawing it may mean you can no longer use the service. Email contact@harpyalerts.com to make a request or complaint. We may need to verify your identity without asking for your password. You may also contact the relevant privacy regulator.

Website and Device Storage

The current website does not include advertising cookies, analytics scripts, or a visitor account system. Hosting providers can still process technical request records. The app stores sign-in session information using iOS Keychain and keeps local preferences and an installation identifier on your device.

Security

Harpy uses encrypted network connections and account-based access controls. Privileged service credentials are kept on the backend, not in the iPhone app. No system can guarantee complete security. Do not include passwords, recovery links, or unnecessary sensitive information in Hunt notes or support messages.

Age Eligibility

Harpy is intended for adults aged 18 and over. You must be at least 18 to create a Harpy account. If you believe someone under 18 has provided personal information to Harpy, contact contact@harpyalerts.com so we can investigate and address it.

Changes to This Policy

We will update this page when our practices change and show the revision date. Where required, we will provide notice of significant changes and obtain consent before using information for a new purpose.

Contact

For privacy questions or requests, email contact@harpyalerts.com. This address also handles support and general enquiries. Do not send your password or account recovery link.