Privacy Policy
Last Updated:
1. Introduction & Data Controller
PS5 Restock India ("we," "us," or "our") operates the website at ps5restock.com (the "Service"). This Privacy Policy describes how we collect, use, disclose, and safeguard your information when you visit our website, use our push notification service, or engage with our community features.
We are committed to protecting your personal data and your right to privacy. If you have any questions or concerns about this policy or our practices, please contact us using the information provided at the end of this document.
As the data controller, PS5 Restock India is responsible for making decisions about how personal data is processed. We process personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and India's Digital Personal Data Protection Act (DPDPA) 2023, as applicable.
2. Information We Collect
2.1 Automatically Collected Data
When you access our Service, we may automatically collect certain information, including:
- Device Information: Browser type and version, operating system, screen resolution, device type (mobile/desktop).
- Usage Data: Pages visited, time spent on pages, referral source, click patterns, and navigation paths.
- Network Data: Approximate geographic location based on IP address (country/region level only – we do not collect precise geolocation).
- Performance Data: Page load times, Core Web Vitals metrics, and error reports collected via Cloudflare Analytics.
2.2 Data You Provide Voluntarily
- Push Notification Subscriptions: When you opt in for restock alerts, your browser generates an anonymous VAPID push subscription endpoint. This token is stored securely in our Cloudflare D1 database and is used exclusively to send you requested stock notifications.
- Community Reports: When you submit stock reports through our community feed, we collect the report content, timestamp, and a randomly generated anonymous session identifier.
- Cookie Consent Preferences: Your cookie consent choices are stored locally in your browser's localStorage and are not transmitted to our servers.
2.3 Data We Do NOT Collect
- We do not collect your name, email address, phone number, or physical address.
- We do not require account registration or login.
- We do not process or store payment information.
- We do not engage in profiling or automated decision-making about individuals.
3. Legal Basis for Processing (GDPR Article 6)
We process personal data under the following legal bases as defined by the GDPR:
| Purpose | Legal Basis | Details |
|---|---|---|
| Website functionality | Legitimate Interest (Art. 6(1)(f)) | Essential cookies and server-side processing required to deliver the Service. |
| Push notifications | Consent (Art. 6(1)(a)) | You explicitly opt in via browser permission prompt. Revocable at any time. |
| Analytics | Consent (Art. 6(1)(a)) | Cloudflare Web Analytics — activated only after cookie consent. |
| Advertising | Consent (Art. 6(1)(a)) | Google AdSense scripts load only after explicit consent via our cookie banner. |
| Affiliate links | Legitimate Interest (Art. 6(1)(f)) | Outbound affiliate links to Amazon, Flipkart, etc. are essential to our business model. Disclosed in our Affiliate Disclosure. |
5. Third-Party Services
Our Service integrates with the following third-party providers:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Cloudflare Pages | Website hosting, CDN, DDoS protection | View |
| Cloudflare Web Analytics | Privacy-focused website analytics | View |
| Google AdSense | Display advertising (consent-gated) | View |
| Google Fonts | Web font delivery | View |
| Amazon Associates | Affiliate program | View |
| Flipkart Affiliate | Affiliate program | View |
| Cuelinks | Affiliate link monetization | View |
6. Data Sharing & International Transfers
We do not sell, rent, or trade your personal data to third parties for marketing purposes.
Data may be processed by our infrastructure providers (Cloudflare) in data centers located globally, including in the United States and the European Economic Area. Cloudflare is compliant with the EU-U.S. Data Privacy Framework. We ensure that any international transfers of personal data are done in compliance with applicable data protection laws, including the use of Standard Contractual Clauses (SCCs) where required.
We may disclose personal data if required by law, court order, or governmental regulation, or if we believe that such action is necessary to comply with a legal obligation, protect and defend our rights, or protect the safety of users.
7. Data Retention
| Data Type | Retention Period | Deletion Method |
|---|---|---|
| Push subscription tokens | Until unsubscribed or token expires | Automatic removal on unsubscribe or when endpoint becomes invalid. |
| Community stock reports | 90 days | Automatic purge after retention period. |
| Analytics data | Managed by Cloudflare (aggregate, no PII) | Governed by Cloudflare's retention policy. |
| Cookie consent records | 12 months (stored locally in your browser) | Clear your browser's localStorage or use our cookie settings. |
8. Your Rights Under GDPR (EEA Residents)
If you are located in the European Economic Area (EEA), you have the following data protection rights under the General Data Protection Regulation:
- Right of Access (Art. 15): You can request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): You can request correction of any inaccurate personal data.
- Right to Erasure (Art. 17): You can request that we delete your personal data ("right to be forgotten").
- Right to Restrict Processing (Art. 18): You can request that we limit how we use your data.
- Right to Data Portability (Art. 20): You can request a machine-readable copy of your data.
- Right to Object (Art. 21): You can object to our processing of your data based on legitimate interests.
- Right to Withdraw Consent (Art. 7(3)): You can withdraw any previously given consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise any of these rights, please contact us at the details provided in Section 13. We will respond to your request within 30 days. If you believe your rights have been violated, you have the right to lodge a complaint with your local Data Protection Authority (DPA).
9. Your Rights Under CCPA (California Residents)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights:
- Right to Know: You may request that we disclose what personal information we have collected, used, disclosed, and sold about you in the past 12 months.
- Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions.
- Right to Opt-Out of Sale: We do not sell your personal information. If this practice changes in the future, we will provide a "Do Not Sell My Personal Information" link and update this policy.
- Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Right to Correct: You may request that we correct inaccurate personal information.
- Right to Limit Use of Sensitive Personal Information: We do not collect sensitive personal information as defined by the CCPA.
You can exercise your "Do Not Sell My Information" right directly through our cookie consent banner by clicking "Reject All" or the "Do Not Sell My Info" link, which disables all advertising cookies.
10. Children's Privacy
Our Service is not directed to individuals under the age of 16 (or 13 in jurisdictions where applicable). We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child without verification of parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child, please contact us immediately.
11. Data Security
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
- HTTPS/TLS encryption for all data in transit
- Cloudflare DDoS protection and Web Application Firewall (WAF)
- Cloudflare D1 database encryption at rest for push subscription data
- Minimal data collection principles (we collect only what is necessary)
- Regular review of data processing practices
While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top. For significant changes, we may provide additional notice through our website (such as a banner notification).
We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
13. Contact Us & Data Protection Officer
If you have any questions, requests, or concerns regarding this Privacy Policy, your data rights, or our data handling practices, please contact us:
PS5 Restock India — Privacy & Data Protection
Email: contact@ps5restock.com
Online Contact Form: ps5restock.com/contact
You can also manage or update your cookie preferences at any time using the cookie settings button in the bottom-left corner of the website.