Privacy
Last updated 15 September 2026
cooldown is a personal, non-commercial project run by one person. It exists to help you wait before buying something, not to learn anything about you. This page says exactly what is stored and why. The short version: only what the app needs to work, nothing is sold or shared, no tracking, and you can delete everything yourself.
What is stored
- Your email address, used as your login and to send you sign-in links. Nothing else is sent to it.
- The items you save: the URL, the title, price and product image the app fetched from that URL, the note you wrote about why you want it, your cooldown length and your decision.
- Timestamps for when you signed up, last signed in, added or decided on an item.
No name, address, payment details, IP address or device information is stored in the database.
Cookies
The site sets two strictly necessary cookies: a session cookie that keeps you signed in and a CSRF token that protects forms against forgery. Neither is used to track you, neither is read by anyone else, and there are no analytics, advertising or third-party cookies. That is why there is no cookie banner.
No tracking, no sharing, no selling
There is no analytics script, no advertising, no profiling and no fingerprinting. Your data is never sold, rented or shared with anyone, and is never used for anything other than showing it back to you.
Services involved
Running a website means a few other parties technically touch your data. None of them receive it for their own purposes.
- Hosting: the server and its database run at Hetzner in the European Union.
- Email: sign-in links are delivered through a transactional email provider, which sees your address and the link.
- Spam protection: the sign-in form runs a self-hosted proof-of-work check (Cap) instead of a commercial CAPTCHA. Its small script is loaded from the jsDelivr CDN, so your browser makes one request there; no account data is involved.
- Product pages: when you save a URL, the server fetches that page and its main image to fill in the details. The shop sees the server's address, not yours.
Server logs
Like every web server, the reverse proxy keeps short-lived access logs containing the requesting IP address, the requested path and the browser's user-agent string. They exist only to diagnose problems and abuse and are rotated automatically.
How long it is kept
Everything is kept until you delete it. Items you archive or decide on stay so your stats keep working. Deleting your account removes your data from the database right away; there is no separate backup copy that would outlive it.
Deleting your data
Open Account and confirm the deletion. Your account, all items, notes and stored images are removed immediately and permanently. No email, no waiting period, no questions.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected, or object to its processing. Since everything the site holds about you is visible in the app itself, the fastest way to see or change it is to sign in. For anything else, write to the address below.
Contact
Questions about this page or your data: christoph@superservice-international.com
Changes
If this page changes in a way that matters, the date at the top moves and the change is described here. It will never change to permit selling or sharing your data.