Back to shop

Privacy policy

Last updated: 18 July 2026.

The short version

MightBuy stores what you deliberately give it (your email address for sign-in, and the products you save) in your account, hosted in the UK (London). We don't track your browsing, we don't sell or share your data, and the extension only reads a page when you actively save it. That's the lot.

Who we are

MightBuy is operated by Chris Dykes, a sole trader trading as MightBuy, of First Floor, Swan Buildings, 20 Swan Street, Manchester M4 5JW, United Kingdom. For anything privacy-related, contact privacy@mightbuy.xyz.

MightBuy is registered with the Information Commissioner's Office (ICO) as a data protection fee payer, registration reference C1986846.

What we collect

  • Your account: your email address, used to sign you in (magic-link email, no passwords) and for nothing else today. Accounts run on Supabase, hosted in their London (UK) region.
  • Your saved items, lists, and settings: stored in our database under your account so your shop follows you across devices. Only you can see them (unless you share a list), and you can export or delete them from your account page.
  • Extension access tokens:if you connect the browser extension, we store your personal access token in a hashed form we can't read back, and the date it was last used. You can revoke tokens from your account page.
  • Add-by-URL:when you add a product by pasting a link (or saving from the extension), our server fetches that page's public metadata (title, image, price) to fill in the item. We don't store the page or the URL beyond standard, short-lived hosting logs, and we don't build any profile from it.
  • Hosting logs: our hosting provider (Vercel) keeps standard request logs (IP address, user-agent, timestamps) for security and operations.

Your data is not for sale

Under no circumstances do we sell, rent, or trade your personal data. Not your email, not your saved items, not anything derived from them. That is not our business model and never will be: MightBuy earns affiliate commission from retailers when you buy through links you click (see how MightBuy makes money), not from your data.

The browser extension

  • Reads a page's product details only when you click save on that page, and sends just those details to our API to store in your shop. It does not read your browsing history and does not run analytics.
  • Stores your preferences, access token, and list names locally in your browser (extension storage).
  • Never adds, modifies, or replaces affiliate links, codes, or cookies. See how MightBuy makes money.

Cookies & analytics

MightBuy sets essential sign-in cookies that keep you logged in to your account, plus a small preference cookie that remembers your shop layout (like whether the sidebar is open). That's all. No advertising or cross-site tracking cookies, ever, and nothing is set until you sign in.

  • Analytics: we use Vercel Web Analytics, which is cookieless and records aggregate visit counts only. It stores nothing on your device, sets no cookies, and builds no personal profiles; visitors are counted via a short-lived anonymised hash, not tracked across sites.
  • Affiliate cookies (planned): when affiliate links go live, clicking out to a retailer may lead the affiliate network or retailer to set cookies on their sites so the sale can be attributed to MightBuy. That happens after you leave MightBuy, on your click, and never silently in the background.

What's coming (we'll update this first)

  • Accounts & sync:live now, see “What we collect” above. Data is hosted in Supabase's London (UK) region, so it doesn't leave the UK.
  • Price-drop alerts: would require an email address; opt-in only.
  • Smarter auto-categorisation:may send an item's title/metadata (never your identity or full history) to an AI model to suggest a category. We'll name the provider here, and update this policy, before that feature goes live.

Shared wishlists

If you share a list, anyone with the link can see it, including its name and every item on it. Don't put anything private in a shared list's name or notes. Unshare a list to withdraw it.

Your rights (UK GDPR)

You have the usual rights: access, rectification, erasure, restriction, portability, and objection. Most of them are self-serve: your account page lets you export your whole shop as a file and delete your saved data. For anything else, including erasing your account entirely, email privacy@mightbuy.xyz and we'll handle it within one month.

You can complain to the UK Information Commissioner's Office (ico.org.uk) if you think we've mishandled your data.

Children

MightBuy isn't aimed at children. You must be 18 or over to use MightBuy, and we don't knowingly collect data from anyone under 18.

Changes

We'll update this page as the product grows (alerts, AI categorisation) and note the date at the top. Material changes will be flagged in the app before they take effect.