Privacy

Little Jam Jar Ltd, trading as Stockwise, is the data controller. It is registered with the Information Commissioner's Office, number ZC283636. Registered office: The Barn, Bexfields Farm, Galleywood Road, Chelmsford, Essex, CM2 8BY. Email [email protected].

Browsing

No analytics scripts, no advertising trackers and no cookies set by Stockwise for browsing. Our web server keeps standard access logs (IP address, page, time, browser string) for 14 days for security and capacity, then deletes them.

Stores accounts

What we keep: your email address; the items you log (a name, a category, a quantity, an expiry date and any note you add); and the reminder settings you choose. That is all. We never ask for your name, address or anything about your home.

Why: to email you before an item goes out of date, with a swap list, as you asked (legal basis: performing the service you asked for). Stores sends no other email.

Who sees what: only you. Nothing in Stores is public.

Retention: everything stays until you remove it. Deleting your account removes every item and your email address at once.

Your rights: from your Stores page you can download everything we hold (JSON) or delete it all, without asking us. You can also email us. You have the right to complain to the Information Commissioner's Office.

Signing in and security

There are no passwords. Sign-in links are single-use, expire in an hour, and are stored only as hashes; the session is a signed cookie that lasts 30 days. Forms are protected by Cloudflare Turnstile, which may process your IP address and browser details under Cloudflare's privacy policy. We rate-limit forms by IP address in memory only.

Backups

Every night we copy the database and our settings, check that the copy is sound, and encrypt it before it leaves the server. Encrypted copies go to a second server we run. We keep them for up to six weeks: something you delete leaves the site at once and the backups within six weeks, after which it is gone for good.

Cookies and storage

We don't use analytics, advertising or tracking cookies, so there's nothing to accept. What we store is only there for something you asked for:

• sw_s (cookie, 30 days): keeps you signed in to Stores. Set only when you sign in.
• Your kit builder choices (the page address and your browser's storage): stay on your device and reach us only if you save them to Stores.
• Your Be ready ticks (your browser's storage, under sw-ready): stay on your device and never reach us.
• Cloudflare, which protects the site, may set a short-lived security cookie to tell people from bots, and forms load its Turnstile spam check. Neither is used for tracking.

Where your data goes

Stockwise runs on servers we operate ourselves, and its backups are encrypted. Some of our servers and backups are outside the UK, in countries the UK government recognises as providing an adequate level of data protection. A few of the services we use are also based outside the UK:

• Cloudflare carries every visit to the site, runs the spam check on forms and sends our emails (sign-in links and reminders) through Cloudflare Email Sending. For all of this it acts as our processor, under its data processing addendum, and may not use your data for its own purposes. It is based outside the UK; transfers to it are covered by the UK's adequacy regulations for companies certified to the UK Extension to the Data Privacy Framework, as Cloudflare is, and by its standard contractual clauses with the UK Addendum.
• eBay: listing photos load straight from eBay's servers, so your browser asks eBay for them and eBay sees your IP address, as with any image on the web. Following a link to a listing takes you to eBay, under its own privacy policy.
• Amazon: nothing loads from Amazon. Following a "Check price on Amazon" link takes you to Amazon, under its own privacy notice.
• Awin and the food stores: nothing loads from Awin or from the stores. Following a "See it at" link on the Food stores page passes through Awin to the store, under their own privacy notices.

Links to eBay

Links to eBay listings are eBay Partner Network affiliate links. When you follow one, you leave Stockwise and eBay sets its own cookies to record the visit and any purchase, under eBay's privacy policy. The link tells eBay only which part of Stockwise it came from (for example "deals page, third card"), never anything about you. If you buy, eBay pays Little Jam Jar Ltd a commission; you pay the same either way. More on the affiliate disclosure.

Links to Amazon

"Check price on Amazon" links are Amazon Associates affiliate links. When you follow one, you leave Stockwise and Amazon sets its own cookies to record the visit and any purchase, under Amazon's privacy notice. The link carries only Stockwise's Associates tag, never anything about you.

Links to food stores

"See it at" links on the Food stores page are Awin affiliate links. When you follow one, you go through Awin's site to the store; Awin and the store set their own cookies to record the visit and any purchase, under their own privacy notices. The link carries only Stockwise's Awin publisher id and which product it was (for example "food, the 120-serving bucket"), never anything about you.

Third parties

eBay (listing data and images, served from eBay's servers) and Cloudflare (network protection, Turnstile, and sending our emails). The official sources linked from the checklists are separate websites with their own notices.