Privacy policy
Last updated
Effective date: November 2, 2026
InStock Tracker is operated by DK825, LLC, based in Illinois, United States. This policy explains how we handle personal information at https://instocktracker.com/ and in our stock alert service. Contact [email protected] with privacy questions or requests.
1. Information we collect
Browsing. You don't need an account to check stock. We don't run analytics or advertising scripts on the site. Our network provider gives us aggregate traffic counts from its own servers, without cookies, and processes requests to protect the site from attacks.
Human check. When you sign in or create an alert, a human check from our network provider runs in your browser to stop bots. It's used only for that check.
Location. If you choose Use my location, your browser asks your permission first. Your approximate position, rounded to about one kilometre, is sent to our server to find the nearest ZIP code. We don't store those coordinates or send them to an outside location service. Our network provider also estimates your US state from your IP address for the nearby-restock banner; we don't store that estimate or link it to your account.
Account details. We store your email address to sign you in with a one-time code and to send email alerts and the dated email copy of every alert. There are no passwords. SMS alerts aren't available yet; once they launch on Pro, we'll store your phone number and verify it with a code.
Alert settings and destinations. We store the model, color, storage, ZIP code, search distance and the Apple Store you picked, your pickup preference, and the destinations you turn on: Telegram chat IDs, Discord webhook URLs and push notification registrations.
Delivery records. For every alert we record when the stock was detected, when we sent the alert, on which channel, and whether delivery succeeded or failed. These records power your alert history and support troubleshooting, refunds and billing disputes. Refund eligibility ends when the first stock alert is sent in the current paid period; it doesn't depend on proof that you read it.
Product interest. We store the upcoming products you mark "I'm interested", so we know what to track next.
Plan and billing references. We store your plan details and the Stripe customer and payment identifiers for your purchases, including older subscription identifiers where they exist in past billing records. Passes are one-time 30-day payments; none of these identifiers allows automatic renewal. Stripe processes payments, and we never see or store full card numbers.
Support messages. We keep the requests and information you send when you contact us.
Security logs. We record hashed IP addresses, timestamps and event types, such as sign-ins. Security logs are kept for 90 days.
2. How we use information
- To sign you in and keep your account working.
- To check stock for your alerts and send them to the destinations you chose, plus a dated email copy.
- To manage passes, end-of-pass reminders, purchases, refunds and plan changes.
- To keep your alert history and record whether a stock alert has been sent in a paid period.
- To answer support and privacy requests.
- To protect the Service against unauthorized access, bulk account creation, messaging abuse and other misuse.
- To send important account, security, service and policy notices.
- To understand aggregate use and product interest so we can improve the Service.
- To meet legal obligations and to establish or defend legal claims.
We don't send marketing messages, use personal information for advertising, or build advertising profiles. Stock alerts and pass reminders are service messages, not marketing.
3. Service providers and other disclosures
We use providers for hosting, network security, payment processing (Stripe), email delivery and maps, and will use an SMS provider once SMS launches. They receive only the information needed to do that work for us. Map tiles come from TomTom, credited on the map: your browser requests the tiles directly, so TomTom receives your IP address and the map area you view. Our location-to-ZIP lookup runs on our own server.
If you turn on Telegram or Discord alerts, that service receives the destination and the message it delivers, under its own privacy policy. Push notifications travel through your browser maker's push service.
We may disclose information when the law requires it, or when reasonably necessary to protect users or the Service, investigate abuse, or establish or defend legal claims.
If the business is sold, merged or reorganized, information may transfer as part of that transaction, subject to applicable law and this policy. We'll tell you about any change to how your information is handled where required.
4. Phone numbers and SMS consent
These rules apply once SMS alerts launch. We'll use your phone number only for verification codes and the stock alerts you ask for. We don't share phone numbers or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. Our SMS provider processes your number only to deliver your messages. Reply STOP to opt out or HELP for help. Turning off SMS doesn't cancel a pass or request a refund.
5. No sale or sharing for advertising
We don't sell personal information or share it for cross-context behavioral advertising, as those terms are defined under California law. We don't use advertising trackers or use personal information for targeted advertising.
6. Cookies and browser storage
We set one cookie, and only when you sign in: a session cookie that keeps you signed in. We also keep a few preferences in your browser's storage. We don't use analytics, advertising or tracking cookies. Our Cookie policy lists each item, what it's for and how long it lasts.
7. How long we keep information
| Information | How long |
|---|---|
| Account details, alert settings, destinations, product interest, plan and billing identifiers | While your account exists |
| Delivery records (including for alerts you deleted) | 180 days, then deleted; deleted earlier if you delete your account |
| Support requests | While your account exists |
| Security logs | 90 days |
| Deleted data in backups | Rolls off within 7 days |
| Billing records held by Stripe | Kept by Stripe for its legal, tax and accounting obligations |
Deleting your account immediately removes your account, alerts, destinations and delivery records from our active systems; backup copies roll off within 7 days. A legal duty to preserve information can override ordinary deletion where it applies.
8. Security
Contact details, such as email addresses and phone numbers, and alert destinations are encrypted at rest using AES-256-GCM. Sign-in uses one-time email codes instead of passwords. IP addresses in security logs are hashed.
All traffic uses HTTPS, and our network provider filters attacks before they reach our servers. No system can be perfectly secure. If a security incident affects your personal information, we'll notify you as the law requires.
9. Your choices and requests
From My account you can:
- Download my data as a file.
- Delete my account, which removes your account, alerts, destinations and delivery records.
- Pause any alert, and delete alerts that haven't sent you anything yet, which removes their destination.
An alert that has already sent you a stock alert in your current paid period can be paused but not deleted. To remove its destination sooner, email us or delete your account. To cancel a pass for a prorated refund before your first alert, use Cancel plan on your plan in Pricing. Passes end on their own and never renew.
You can also email [email protected] to ask for access, correction or deletion. We verify requests through your account email and may ask for information reasonably needed to confirm who you are. An authorized agent can make a request with proof of authorization.
Depending on the law that applies to you, you may also have rights to portability, restriction, objection, withdrawal of consent, or to appeal a refused request. We respond within the legal deadlines, explain any exceptions, and never treat you differently for using your rights.
10. California residents
You can ask what personal information we collect, use and disclose, and ask us to access, delete or correct it, along with your other California privacy rights. We don't sell or share personal information for cross-context behavioral advertising. We use sensitive information, where relevant, only as needed to provide the Service.
The categories we collect are: identifiers (email, phone number once SMS launches, hashed IP address); commercial information (plan and payment references); approximate location you give us (ZIP code, search distance and chosen Apple Store); and internet or service activity (alert delivery records and security events). Sources, purposes, disclosures and retention are described above.
Make a request from your account or at [email protected]. You may use an authorized agent, subject to verification.
11. Users outside the United States
InStock Tracker is built for US users, and information is processed in the United States. If data protection law gives you rights of access, correction, deletion, portability or objection, contact us to use them. You may also complain to your local data protection authority where that right applies.
12. Children
InStock Tracker is for people aged 16 and older. We don't knowingly collect personal information from anyone under 16. If you believe someone under 16 has created an account or given us personal information, email [email protected] and we'll investigate and delete it as appropriate.
13. Other services
Retailers, payment providers and notification services run their own services under their own privacy policies. This policy covers DK825, LLC's practices only.
14. Changes to this policy
We'll email account holders at least 14 days before a material change takes effect, unless the law requires a different approach, and update the date at the top. Where new consent is legally required, we'll get it before starting the new processing.
15. Contact
DK825, LLC · Illinois, United States · https://instocktracker.com/ · [email protected]