Who is responsible
The operator named here is responsible for the processing described on this page.
- Name
- Squared GmbH
- Address
- Halbmondstrasse 2, 74072 Heilbronn, Germany
- Represented by
- Pavlo Topchiy, Sergej Penkow
- Commercial register
- HRB 780241
- VAT ID
- DE346591699
What we store
Without an account: a random session identifier in a cookie, the campaign that brought you here, the stores you follow, and the outbound clicks you make. With an account: the same, plus your email address and any name, language and currency you set.
Why, and on what legal basis
Each use has its own legal basis under the GDPR.
- Keeping your follows and your account, and sending the sign-in link you ask for — to provide the service you asked for (Art. 6(1)(b)).
- Counting outbound clicks and the campaign that brought you, so affiliate commission can be attributed and we can tell which advertising paid for itself — our legitimate interest in funding the site (Art. 6(1)(f)).
- Protecting forms and limiting abuse, such as too many sign-in requests — our legitimate interest in keeping the site working (Art. 6(1)(f)).
- The email digest, and personalised ranking where it is switched on — only with your consent (Art. 6(1)(a)), which you can withdraw at any time.
How long we keep it
- Store pages you view, used for personalised ranking: 90 days.
- What you type into search: 180 days.
- Records of the emails and notifications we sent you: 180 days.
- Outbound click records: 13 months.
- Sign-in links: 7 days after they are issued.
- Your account and follows: until you delete them. Deleting takes your follows and settings out at once and strips the account itself of anything that names you; the emptied record is removed 30 days later.
Who else sees it
Each of them gets only what it needs for its part:
- Our hosting and delivery providers, which serve the pages and see your IP address and browser details, as any web server does.
- A transactional email provider, which sees your address and the message it delivers.
- Affiliate networks, when you open a store through one of our links: they receive the click — your IP address, browser details and the store page — so a commission can be attributed. Your email address is never sent to them.
- Our affiliate network’s keyword directory, when you search with words: the text of your search is sent to it so we can find stores that sell what you named. Do not put personal details into it.
After you leave for a store
When you follow one of our links, you leave whatsonsale.ai. The affiliate network and the store may set their own cookies on their own sites to record the visit and any purchase. Their privacy and cookie policies apply there; we do not receive those cookies.
What we do not do
We do not sell personal data. We do not run third-party advertising or analytics scripts. We do not store payment details, because we never take payments. We do not track you across other websites.
Your rights
You can ask us for a copy of your data, have it corrected or erased, restrict or object to how we use it, and receive it in a portable format. Where we rely on your consent, you can withdraw it at any time; that does not affect what happened before.
Signed in, the account page does most of this directly: Download gives you your profile, follows, sessions, searches, store pages you viewed, outbound clicks, your notification settings, your push devices and the notifications we sent you, in JSON, the most recent records where the history is long. Delete removes your profile, your follows, your notification settings, your push devices and the record of notifications sent to you, takes away the text of your searches, and strips your identity from click and view records. This cannot be undone: signing in with the same address afterwards starts a new, empty account.
You also have the right to complain to a data protection supervisory authority, for example the one where you live.
Contact
We have no working inbox at the moment. Until one is set up, please use the store or account pages on this site.