Privacy Policy

Last updated: 2026-07-09

In short

You can browse DosePrice without giving us any personal data.
We only ask for your email if you set up a price alert or subscribe to the digest — and we confirm it with a double opt-in. Unsubscribe anytime with one click.
Analytics cookies (Google Analytics) load only if you accept them. You can change your choice anytime via cookie settings.
We never sell your data. We use a small number of service providers (email, hosting, analytics) to run the service.
You can access, correct, delete, or export your data, or complain to the Portuguese authority (CNPD), at any time.

This box is a plain-language summary. The full policy below is what legally applies.

1. Who we are (data controller)

DosePrice ("we", "us") operates this website and is the controller of your personal data.

Legal / trading name: DosePrice (Página Aleatória LDA)
Address: R Carlos Ramos Nº4, Portugal
Contact for privacy matters: help@doseprice.com
Tax number (NIF): PT508709571

We have not appointed a Data Protection Officer, as our processing does not meet the thresholds requiring one. Contact DosePrice for privacy inquiries.

2. What data we collect and why

Data	Purpose	Legal basis (GDPR Art. 6)
Email address (when you request a price alert or digest)	To send the price alerts and weekly digests you asked for	Consent (Art. 6(1)(a))
Alert settings: category, threshold, country, frequency	To operate the alert you configured	Consent / performance of the requested service
Affiliate click metadata: timestamp, offer / product / retailer, referrer, browser user-agent, and a one-way hashed IP address. When you click a link in one of our alert emails, the click is also linked to your subscriber record.	Performance measurement, fraud prevention, and attributing purchases we may be paid for	Legitimate interest (Art. 6(1)(f))
Cookie / device data (see Cookie Policy)	Site functionality and, with consent, analytics	Consent for non-essential cookies

3. How long we keep it

Email and alert settings: 365 days from subscription date, or until you unsubscribe or request deletion.
Affiliate click metadata: 365 days. IP addresses are stored only as one-way hashes; clicks tied to a subscriber are deleted when that subscriber is deleted.
Consent records: kept for as long as needed to demonstrate compliance.

4. Who we share data with (processors)

We do not sell your personal data. We use the following service providers:

Amazon Web Services (SES, North Virginia, USA) — email delivery. Emails may be processed on servers outside the EEA. Transfers are covered by Standard Contractual Clauses.
Hetzner Online GmbH (Germany) — hosting, application servers, and our database. EU-based processor; this data remains within the EEA.
Google Ireland Ltd. (Google Analytics 4) — web analytics, loaded only if you consent to analytics cookies. We enable IP anonymization. Google may process data on servers outside the EEA (United States) under Standard Contractual Clauses and Google's supplementary measures. See our Cookie Policy to review or withdraw consent.

5. International transfers

Email data sent to AWS SES (North Virginia, USA) is protected by Standard Contractual Clauses. All other processing occurs in the EU (Germany hosting). We conduct transfer-impact assessments as required by GDPR to ensure appropriate safeguards.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent at any time. To exercise any of these, email help@doseprice.com. We respond within one month.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt.

7. Marketing emails

Price alerts and the weekly digest are sent only after you confirm your email through a double opt-in. Every email includes a one-click unsubscribe link. You can withdraw consent at any time.

8. Is providing data required?

Browsing DosePrice does not require you to give us any personal data. You only provide your email address if you choose to set up a price alert or subscribe to the digest — these are optional services, and without an email address we cannot deliver them. There is no statutory or contractual obligation to provide personal data.

9. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you. Product rankings are generated from product and price data, not from your personal information.

10. Data security

We apply appropriate technical and organizational measures to protect your data, including transport encryption (HTTPS), access controls, one-way hashing of IP addresses, and tokenized confirmation and unsubscribe links. No system can be guaranteed completely secure, but we work to protect your information against unauthorized access, loss, or misuse.

11. Changes to this policy

We may update this policy. The "last updated" date above reflects the latest version.