Last updated: April 2026
Information We Collect
GrandExchanger does not require account creation and does not ask for your email or any personal registration information. The data we hold is limited to the following:
- Cookies (third-party): Google Analytics (usage analytics) and Google AdSense (advertising). Both scripts only load after you accept the cookie consent banner; declining prevents them from loading at all.
- Browser local storage: your theme, favorites, filter settings, cookie-consent choice, and a randomly generated anonymous identifier (UUID) used to associate your alerts and push subscription with your device. Local storage never leaves your browser, but we read the anonymous ID on each alert-related request so we know which alerts belong to you.
- Anonymous user record (server): when you create a price alert or enable push notifications, we store the anonymous UUID in our PostgreSQL database along with the alert configuration (item id, direction, threshold), an optional Web Push subscription (endpoint + public key pair), and a log of notifications sent to that user for per-day cap enforcement. No personally identifying information (name, email, IP) is associated with the UUID.
- Premium subscription record (server): if you subscribe via Buy Me a Coffee, we store a subscription identifier and status so the site can unlock Pro features. We do not see or store your payment-card details.
How We Use Information
- Analytics: We use Google Analytics to understand how visitors use our site so we can improve the experience.
- Advertising: Google AdSense may use cookies to serve ads based on your browsing history and interests.
- Preferences: localStorage is used to remember your favorite items, filter settings, and other preferences so you have a seamless experience across visits.
Third-Party Services
We use the following third-party services:
- Google Analytics: For website traffic analysis. Google Privacy Policy
- Google AdSense: For displaying advertisements. Google Ads Privacy Policy
- Google Cloud Platform (Cloud Run, Cloud SQL, Compute Engine):Hosting, database, and Redis cache for alerts, premium records, and push subscriptions. Data is stored in the us-central1 region.
- Buy Me a Coffee: Payment processing and subscription management for GrandExchanger Pro. We never receive your payment details.
- Cloudflare: CDN / TLS termination between you and our origin servers. Subject to Cloudflare's privacy policy.
- OSRS Wiki API: All item price data is sourced from the OSRS Wiki Real-Time Prices API.
Cookies
We use the following types of cookies:
- Analytics cookies: Set by Google Analytics to track page views, session duration, and user interactions.
- Advertising cookies: Set by Google AdSense to serve personalized ads and measure ad performance.
You can opt out of cookies by adjusting your browser settings. You can also manage Google ad personalization through Google Ad Settings.
Your Rights
Depending on your location, you may have the following rights regarding your data:
GDPR Rights (EU/EEA)
- Right to access your data
- Right to request deletion of your data
- Right to data portability
- Right to restrict or object to processing
CCPA Rights (California)
- Right to know what personal information is collected
- Right to request deletion of personal information
- Right to opt out of the sale of personal information (note: we do not sell your personal data)
To exercise any of these rights, please reach out through our Contact page.
Data Retention
- Analytics data: Retained per Google's default retention settings (typically 26 months).
- localStorage data: Persists on your device until you clear your browser data. We do not have access to this data.
- Alerts and push subscriptions: retained until you delete them from
/alerts or unsubscribe. Deleted alerts are removed immediately and we do not retain a server-side audit trail. - Notification log: retained for rate-limiting the daily notification cap. Reset daily at 00:00 UTC.
Children's Privacy
GrandExchanger is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
Changes to This Policy
We may update this privacy policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically.
Contact
If you have questions about this privacy policy or your data, please visit our Contact page.
