DropSyncby ChaseDex

Privacy Policy

Effective June 20, 2026

This Privacy Policy explains how DropSync, a product of ChaseDex ("DropSync," "we," "us"), collects, uses, and shares information when you use the DropSync website (dropsync.chasedex.com), the DropSync browser extension, our Discord alerts, and related features (the "Service").

1. Information we collect

Account & subscription. When you create an account we collect your email address. We use passwordless "magic link" sign-in, so we do not store a password. If you subscribe, our payment processor (Stripe) handles your payment; we receive your subscription status and identifiers (not your card number).
Browser-extension data (stays on your device). While you use the Sniper on product pages you choose, the extension reads limited page information needed to time a refresh and detect a buy button — such as the page URL, product identifiers, price, and availability/stock status, and timing data. Your settings and snipe history are stored locally in your browser (Chrome storage). The extension does not read your retailer passwords or payment details and does not check out for you.
Optional, anonymous usage stats. If you leave "Share anonymous drop stats" on (you can turn it off in the extension's settings), we collect non-identifying snipe timing and outcome data tied to a random install ID — never your name or email. This is sent to PostHog, our product-analytics provider; approximate location and device type may be inferred from your request (e.g. by IP address), not sent by us.
Community sightings (when that feature is active). If you share a live-drop sighting, we collect the content you submit (retailer, product, availability, timestamp) and show it to other users. Don't include sensitive personal information in a sighting.
Mobile app. If you use the DropSync mobile app, we collect a push notification token for your device (issued by Apple or Google) so we can deliver drop alerts, along with a random install identifier, your device platform, and app version. Your alert preferences (retailer and category toggles, per-item mutes) are stored with your account so they sync across your devices; your alert history stays on your device. You can disable push notifications at any time in your device settings.
In-app purchases. If you subscribe through the App Store, the purchase is processed by Apple and managed on our behalf by RevenueCat, our subscription-management provider. We and RevenueCat receive subscription status, product, and transaction identifiers — never your payment details, which stay with Apple.
Discord. If you use our Discord alerts, your activity there is also governed by Discord's own policies.

2. How we use information

To operate and improve the Service (the drop calendar, the Sniper, alerts, and any community feed); to create and manage your account and subscription; to communicate with you about the Service; to maintain security and prevent abuse and fraud; to produce aggregated, de-identified insights; and to comply with law.

3. How we share information

Service providers. Stripe (payments), Apple and RevenueCat (in-app subscriptions), Cloudflare (hosting and edge), PostHog (anonymous product analytics), and Loops (to send your sign-in emails), acting on our behalf.
With other users. Community sightings you submit are shared through the feed.
Legal & safety. To comply with law, enforce our Terms, or protect rights and safety.
Business transfer. As part of a merger, acquisition, or asset sale.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

4. Payments

Subscription payments are processed by Stripe (web) or Apple (in-app purchase, managed via RevenueCat). We receive limited information such as your subscription status and the result of a transaction. We do not collect or store your full payment card number.

5. Data retention

We keep personal information while your account is active and as needed to provide the Service, then delete or de-identify it when no longer needed, except where the law requires longer retention. Anonymous usage stats may be retained in aggregated form. Locally-stored extension data stays on your device until you clear it or uninstall.

6. Security

We use reasonable safeguards, including encryption in transit and hashing of sign-in and session tokens at rest. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your privacy rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, and to opt out of any "sale" or "sharing" (we do neither). U.S. state laws (e.g., CCPA/CPRA): you may request to know, access, correct, and delete your information; we will not discriminate against you for exercising these rights. EEA/UK (GDPR): where applicable, our legal bases are performance of our contract with you, our legitimate interests (security and improvement), your consent (where requested), and legal compliance. To exercise rights, email us (Section 10).

8. Children

The Service is for adults (18+) and is not directed to children. We do not knowingly collect information from children under 13 (or under 16 in the EEA/UK); if we learn we have, we will delete it.

9. Changes

We may update this policy. We'll post the updated version with a new effective date and, for material changes, provide additional notice where required.

10. Contact

Questions or requests: support@chasedex.com · DropSync, a ChaseDex product · dropsync.chasedex.com