Privacy

Last updated 5 August 2026.

Shoe Tracker is a one-person project that compares running-shoe prices across retailers. This page says exactly what it stores about you and why. It is short because the site collects little: there is no advertising, no third-party analytics, no tracking pixels, and nothing here is sold or shared for marketing.

What we store

If you never sign in

You can browse the whole catalog signed out, and we keep nothing about you on the server. Your fit preferences — gender, shoe size, width and any brand filter — are remembered in cookies in your own browser so the listings stay sorted for your feet between visits. Clearing your cookies erases them completely; they are never sent anywhere but to this site, and we do not read them into any record.

If you sign in

• Your email address. The one thing an account requires, because a price alert is an email. You give it either by signing in with Google — from which we receive your email address and display name, and store only the email — or by asking for a sign-in link sent to an address you type.
• Your fit profile: gender, size and width, if you fill them in.
• The shoes you follow and any price alert you set on one, including the price you asked to be told about.
• Which alerts we have already sent you, so a daily digest never repeats the same news twice.
• Any store request you submit, and which requests you upvote.

Sign-in links

When you ask for an email sign-in link we store the address, a one-way hash of the link's secret (never the link itself), its expiry, and the IP address the request came from. The IP is there for one reason: it is what stops one person using the form to mail sign-in links at strangers. It is the only place this site records an IP address, and these rows are deleted automatically after 30 days.

Outbound clicks

When you click through to a retailer we record the click: which offer, which store, the price shown at that moment, the time, and — only if you are signed in — that it was you. It is how the project can show a retailer the traffic it sends them, which is the only plausible way it ever pays for itself. No IP address is stored with a click, and clicking out while signed out records no identity at all.

Strava, if you connect it

Connecting Strava is optional and off by default. If you connect it, we store the access tokens Strava issues us, your Strava athlete ID, and the names and recorded distances of your Strava shoes — enough to tell you a pair is near the end of its life. We read gear, not your activities, routes or locations. You can disconnect at any time from the menu under your avatar, which deletes the tokens and the gear we copied.

Who else sees it

Only the services it takes to run the site, and only the part each one needs:

• Google — if you choose to sign in with Google. We ask it for your email address, name and profile picture URL, and nothing else.
• Resend — delivers our email, so it handles the address we send to and the contents of the message.
• Strava — only if you connect it.
• Our hosting and DNS providers — netcup, in Germany, where the server and its database live, and Cloudflare, which fronts the domain's DNS and forwards mail sent to it. Like any web server, ours writes ordinary access logs.

Nobody else. We do not sell, rent or trade personal data, and there are no advertising or analytics trackers on any page.

How long we keep it

Your account and everything attached to it stays until you ask us to delete it. Sign-in link records go after 30 days automatically. Price history itself is not personal data — it is about shoes, not people — and is kept indefinitely.

Your choices

• See or delete your data. Write to us and we will send you what we hold or delete your account outright, whichever you ask for.
• Stop the email. Removing a price alert stops the alerts; deleting your account stops everything.
• Disconnect Strava at any time, from your account menu.

If you are in the UK or EU, the legal basis for the account data is performing the service you asked for, and for the click log our legitimate interest in running the site. You have the right to access, correct, export, delete, or object — and you exercise all of them the same way, by writing to us.

Children

The site is not directed at children under 13 and we do not knowingly keep data about them.

Changes

If this policy changes materially we will update the date at the top and, where the change affects data we already hold about you, email the address on your account.

Contact