Who is responsible
The company that operates Mervo is the controller of personal data. Its details are published on the company page as soon as they are registered. Company details
Privacy policy
How Mervo handles personal data: what we collect, why, who helps us, how long we keep it, and your rights under the GDPR.
What we collect
- Account: your email address and your settings per country, if you create an account.
- Price alerts: the products you watch and how you want to be told (email or push).
- Without an account: a random device identifier in a cookie, so that your alerts work; for push, the push address your browser gives us.
- Clicks to stores: which offer, when and from which page, with your IP address and browser stored only as salted hashes, to recognise invalid clicks and charge stores correctly.
- Merchant accounts: the names and email addresses of the people who manage a store, and invoicing details.
- Errors: technical details of a failed request, never form contents or passwords, so that we can fix bugs.
- We do not build advertising profiles, sell data, or use analytics or advertising cookies.
Why we may
- To provide what you asked for (account, alerts): performance of a contract.
- Marketing emails: only with your consent, which you can withdraw at any time.
- Recognising invalid and automated clicks, statistics without identities, and fixing errors: our legitimate interest.
- Invoices and accounting records: a legal obligation.
Who helps us
- Supabase: database and sign-in, hosted in the EU.
- Cloudflare: hosting and delivery of the site.
- Resend: sending email.
- Sentry: error reports.
- Stripe: payments, for merchants only.
- Affiliate networks receive only a code for the placement and product with a click, never who you are.
Where a provider handles data outside the EU/EEA, the transfer relies on an adequacy decision or the EU standard contractual clauses.
How long we keep it
- Account and alerts: until you delete them or your account.
- Clicks: kept for statistics and billing; when you delete your account, any link between your clicks and you is removed.
- Invoices: as long as accounting law requires.
- Price evidence about stores (prices and verdicts) contains no personal data about visitors.
Your rights
You can see, download, correct and delete your data, object to processing based on our legitimate interest, and withdraw consent. Most of it you can do yourself on the account page; otherwise write to us.
You can complain to the data protection authority in Sweden: Integritetsskyddsmyndigheten. www.imy.se
Cookies and storage on your device
We only store what is needed for something you asked for: staying signed in, an alert without an account, a language choice, and, in your browser only, your recent searches.
In Sweden, storing information on your device is governed by Lagen (2022:482) om elektronisk kommunikation, 9 kap. 28 §, enforced by Post- och telestyrelsen (PTS). Storage that is strictly necessary needs no consent, which is why we show no cookie banner.
| Name | Type | Purpose | Kept for |
|---|---|---|---|
| sb-…-auth-token | Cookie | Keeps you signed in. | 400 days |
| mervo_device | Cookie | Identifies your device so that your price alerts work without an account. | 400 days |
| mervo_lang | Cookie | Remembers that you chose English on this site's home page. | 365 days |
| mervo_merchant | Cookie | Remembers which store account you work in.Merchant portal only | 365 days |
| mervo:recent-searches:… | Browser storage (not sent to us) | Your last 6 searches on this site, shown in the search box. | Until you clear it |
| mervo:market-hint-dismissed | Browser storage (not sent to us) | Remembers that you closed the hint about another country's site. | Until you clear it |
| mervo-admin-keys-off | Browser storage (not sent to us) | Keyboard shortcuts switched off.Back office only | Until you clear it |
No analytics, advertising or third-party cookies are used.
Changes
When this policy changes in a way that matters, we say so here and tell account holders by email.