Privacy Policy

1. Who we are

GuitArchive (guitarchive.com) is a guitar and gear deal tracker operated by Karol Gajda. If you have any questions about this policy, contact us at privacy@guitarchive.com.

2. What data we collect

We collect only what is necessary to operate the site:

• Email address — if you subscribe to deal alerts. We store this in our database and use it to send you the daily deal digest. You provide this voluntarily.
• Confirmation status — whether you have confirmed your email via the double opt-in link we send.
• Subscription timestamp — when you signed up, for our records.

We do not collect names, payment information, or any other personal data. We do not use cookies for tracking. We do not run any third-party ad networks or analytics pixels.

3. How we use your data

• To send you the deal alert digest emails you subscribed to.
• To manage your subscription (confirm, unsubscribe).
• We do not sell, rent, or share your email address with any third party for marketing purposes.

4. Third-party services

We use the following sub-processors to operate the site:

• Supabase — our database provider, where email addresses are stored. Supabase is EU-compliant and offers GDPR data processing agreements. Data is stored in the US (AWS us-east-1) by default.
• Brevo (formerly Sendinblue) — our email delivery provider. Your email address is synced to Brevo to send transactional emails (confirmation and digest). Brevo is headquartered in France and is GDPR-compliant.
• Vercel — our hosting platform. Vercel processes server-side request data (IP addresses, user agents) in accordance with their privacy policy, but we do not log or store this data ourselves.
• Amazon Associates — we are a participant in the Amazon Associates program. Product links to Amazon include our affiliate tag. Amazon may place cookies when you click these links; see Amazon's privacy policy for details.

5. Legal basis for processing (GDPR)

If you are located in the European Economic Area (EEA), our legal basis for collecting and processing your email address is your explicit consent (Art. 6(1)(a) GDPR), given when you submit the subscription form and confirm via the double opt-in email.

6. Your rights

Under GDPR and similar laws, you have the right to:

• Unsubscribe — every digest email includes an unsubscribe link. Your email will be removed immediately.
• Access — request a copy of the data we hold about you.
• Deletion — request that we delete your email address and all associated data.
• Rectification — request correction of inaccurate data.
• Portability — request your data in a machine-readable format.
• Object — object to any processing you believe is unlawful.

To exercise any of these rights, email privacy@guitarchive.com. We will respond within 30 days.

You also have the right to lodge a complaint with your local data protection authority (e.g., the ICO in the UK, or your national DPA in the EEA).

7. Data retention

We keep your email address for as long as you are subscribed. When you unsubscribe, your email is removed from our active list within 24 hours. We may retain anonymized aggregate statistics (e.g., total subscriber count) indefinitely.

8. Security

Your email address is stored in a Supabase database with Row Level Security enabled. Access is restricted to service-role credentials held server-side — email addresses are never exposed to the browser or public API. We use HTTPS everywhere.

9. Affiliate disclosure

GuitArchive participates in affiliate programs, including Amazon Associates. When you purchase through our links, we may earn a small commission at no additional cost to you. This does not influence the ranking or selection of deals shown on the site.

10. Changes to this policy

We may update this policy occasionally. Material changes will be noted by updating the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

Questions or requests: privacy@guitarchive.com