Privacy policy
A short, honest overview of what data we collect and why.
Data controller
The controller of your data is Domino Invest OÜ, registry code 16571495, Estonia. Contact: [email protected].
What data we collect
When you create an account: your email address. When you use your account: your saved baskets and favorites (products you've chosen). When you set a price alert: its conditions (a product or basket, an optional price ceiling) and whichever notification channels you pick. Depending on the channel, also your push-notification subscription (browser or mobile app) or your Telegram chat ID (if you connect Telegram). We ask for separate consent for each channel exactly when you first turn it on.
Why we collect it
We use your account, basket, and favorites data only to provide those features to you — this is processing necessary to perform our contract with you, not marketing.
Who we share data with
Your data is processed on our behalf by the service providers who help us run this service: Supabase (database and account authentication), Netlify (web hosting), Google (visitor statistics and Google sign-in, if you use it), Apple (Apple sign-in, if you use it), Expo (app push notifications), Resend (price-alert emails, if you have turned them on), and Telegram (price alerts on Telegram, if you have connected that channel yourself). We do not sell your data or share it with third parties for marketing purposes.
International data transfers
Our database (Supabase) holds your data in the European Union, in Sweden. Some of the providers named above — Netlify, Google, Apple, Expo and Resend — are US-based companies, so some data may travel outside the European Economic Area; such transfers rely on the safeguards set out in each provider's own terms. The same applies to Telegram, whose infrastructure is also global and outside the EEA — this only affects you if you choose Telegram as a notification channel.
How long we keep data
We keep account data — your profile, baskets, favorites, price alerts and notification channels — for as long as your account exists; it is deleted as soon as you delete your account. We keep technical error and diagnostic reports for 30 days. We keep the security-event log we use to detect attack attempts for 180 days. We keep the anonymous, hashed visitor identifier we use only to avoid double-counting a view of the same product for 1–2 days. All of the above is deleted automatically once its period ends. How long Google Analytics keeps visit statistics is set in Google Analytics' own settings.
Your rights
You have the right to download your data or delete your account along with all related data — both are available directly from the account settings page.
Right to lodge a complaint
If you believe our processing of your data does not comply with the law, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or with the supervisory authority of another EU member state. This does not limit your right to seek a judicial remedy as well.
Deleting your data
You can delete your account and everything attached to it — saved baskets, favourites, price alerts and notification channels — yourself at any time from your account settings. Deletion takes effect immediately and is final. If you can no longer sign in, write to [email protected] and we will delete it for you.
Store price data
The product catalog and prices come from each store's own public online shop, collected daily — this is not personal data.
Affiliate links and commission
Some links to a store are affiliate links: if you buy through one, eestihinnad.ee may receive a commission from that store. You pay the same price — the commission comes out of the store's margin, not your pocket. This does NOT affect ranking. Offers are always ordered cheapest first, and that ordering knows nothing about commission. We do not take money from a store for a better position, and we do not leave a store out of a comparison because there is no affiliate agreement with it. Clicking an affiliate link routes the request through an affiliate network (CJ Affiliate), which records that the visitor came from us. Your name, basket contents and payment details never reach us — only an aggregate count of how many purchases were made.
Cookies and visitor statistics
We use Google Analytics to see how many people visit the site and which pages are useful. By default it runs without cookies and without identifying you — nothing is stored on your device until you have agreed to it. If you accept, we use cookies for two purposes: visit statistics, which show us which pages are used and what is broken, and advertising — meaning Google's advertising cookies, which allow ad performance to be measured and more relevant advertising to be shown to you. If you decline, nothing is stored on your device for either purpose. Both purposes are also described in the terms of use. If you are signed in and have agreed, we also send Google one stable identifier, so that the same person on a laptop and a phone is not counted as two. That identifier is a hash derived from your user ID — not your email, not your name, and nothing Google could use to identify you. We cannot reverse it ourselves without a secret key held on the server. You can change or withdraw your choice at any time by clearing this site's data in your browser — we will ask again. We also use Ahrefs Web Analytics to see which searches bring people to us. It sets no cookies and stores no personal data about you: visitors are counted using a code derived from your IP address and browser details, whose secret part is replaced every 24 hours, so it cannot follow you from one day to the next. We therefore do not ask for separate consent for it.