Privacy Policy

BStalker is operated by Quest Home Furnishings LLC (“we”, “us”, “our”). We provide a search and alert service that aggregates public liquidation-pallet listings from third-party marketplaces into one feed.

• Account information: your email address and a hash of your password — we never store the password itself.
• Search and alert preferences: the keywords, price thresholds, and platform filters you save.
• Billing information: handled by Stripe. We receive your subscription status and last-four card digits, but never your full card number.
• Operational logs: error reports, page-load events, and IP address recorded in our own operational logs to diagnose issues.

We use this information to: run your account, deliver alert emails when saved searches match new listings, process subscription payments, and keep the service running. We also send a one-time welcome email when you create an account and, on free accounts, a weekly digest email.

Two further emails are sent once in the life of an account and then never again. If a trial is running on your account and no saved search is running on it, we send a single activation email telling you that nothing is watching for new lots yet; it is a one-time message about your own account, so it carries no unsubscribe link of its own, but turning alert emails off in Settings stops it. If you have a verified free account that has never started a trial and has no saved searches, we send a single email letting you know the 14-day full-access trial exists; that one is marketing rather than account administration, so it carries a one-click unsubscribe link that switches off free-account email — the same preference the weekly digest uses — and turning alert emails off in Settings stops it as well. We record the date each was sent so that neither can reach you twice.

Every email that is not strictly about your account (alerts, digests, announcements) includes a one-click unsubscribe link, and email preferences can be changed any time in Settings. We do not sell your information to third parties.

We rely on a small set of vendors to operate. Each receives only the data necessary for its function:

• Stripe (subscription billing)
• Brevo (alert and password-reset email delivery)
• Cloudflare (DNS and the secure tunnel that serves the site to the public)
• PostHog (product analytics and session replay — how visitors move through the site, with everything you type masked before it leaves your browser)

The database and background workers run on our own self-hosted infrastructure, not a third-party host.

We use essential first-party cookies only: a session cookie that keeps you signed in (plus short-lived cookies used during sign-up and email verification), small preference cookies such as your feed view settings, and — when you arrive from an ad or campaign link — a first-party cookie recording which campaign brought you, used only by us to measure our own marketing. We set no third-party advertising or analytics cookies. Our product analytics stores a small identifier in your browser’s local storage — not a cookie — so we can tell visits apart.

You can delete your account at any time from Settings → Danger zone. Deletion removes your account record, saved searches, and alert history within 30 days. Billing records required by law are kept for the period required by tax and accounting rules (typically seven years). One small record outlasts deletion on purpose: if the account ever started a trial, we keep a one-way fingerprint of the mailbox that started it so the same inbox cannot start another. It is not readable as an email address and is not linked to you once the account is gone.

BStalker is not intended for use by anyone under 18. We do not knowingly collect information from children.

Questions or requests about this policy: support@bstalker.com.

We may update this policy as the service evolves. The “Last updated” date at the top reflects the most recent change. Material changes will be communicated by email to active accounts.