Privacy policy

Effective 13 September 2026. This notice describes the data used by Pickwise. The operator and contact route shown on this page handle questions and data requests. A shopper account is not required to read public guides. We do not collect payment card details or fulfil orders.

Optional analytics are off until you choose Allow analytics. With consent, the site creates a random session identifier in a first-party HttpOnly cookie named pw_session, lasting up to 30 days. It records page paths, product views, shopping searches and outbound affiliate clicks, including product, merchant, page placement and the session’s campaign/source/medium. Referral sources are hostnames, not full referring URLs. Campaign labels come from landing-page parameters.

Your browser stores the analytics choice under pickwise-analytics in local storage. The Analytics control lets you change it. Declining leaves shopping links usable. Revoking stops subsequent optional events and clears the session cookie; it does not automatically erase previous records. Analytics cover only participating browsers, not every visitor.

The application uses a daily hash of an incoming IP address for short-lived abuse protection and keeps operational error identifiers. It does not intentionally log raw IP addresses or API keys. Hosting providers may process network information and operational logs to deliver and secure the service. Hosting uses OpenAI Sites and Cloudflare infrastructure.

Raw shopping searches are removed when the 90-day maintenance task runs. Maintenance is currently operator-run, so deletion is not guaranteed at exactly 90 days. Session/event and merchant accounting records have no automatic deletion schedule. The operator reviews retention and data requests; information needed for reconciliation, security or legal obligations may need to be retained.

Opening a merchant link takes you to that merchant under its privacy notice. Merchant affiliate attribution may work even when you decline Pickwise analytics. Pickwise stores imported commission reports for reconciliation and does not need a buyer’s address or payment details. Do not send those details to us.

Administrator sign-in uses the hosting platform. Verified user identifiers support access checks and audit records. Optional AI interpretation is disabled at launch. If enabled later, shopping briefs would be sent to the configured provider; this notice must be updated before that change.

For a privacy request, contact the operator with the relevant page and approximate visit time. Do not send passwords or banking information. Random browser identifiers mean we may be unable to locate a visit from your name or email alone. We may request only information reasonably needed to understand and verify your request. We do not intentionally solicit sensitive information or information from children.