Privacy Policy & Data Rights

PonnoRadar follows a strict Data Minimization policy. We collect only the bare minimum information needed to operate our price intelligence and notification services:

• Account Information (Optional): When you create an account, we store your name, email address, password hash (encrypted via Argon2id/Bcrypt), and your alert delivery preferences (e.g., quiet hours, email or Telegram notifications).
• Price Alerts & Watchlists: The specific products you choose to track, your desired target price thresholds, and delivery timestamps when an alert fires.
• Spend Lens Analytics (Optional): If you choose to use our personal tech spending tracker, we store the purchase receipts, prices paid, and warranty expiration dates that you explicitly input or import via CSV.
• Companion Extension Access Tokens: When connecting the official PonnoRadar companion extension, a cryptographically random, revocable bearer token is issued to authenticate extension requests against our catalog API.
• Technical Diagnostics: Standard web server access logs (anonymized IP addresses, browser user-agent, request timestamp) retained temporarily for security auditing, DDoS prevention, and rate-limit enforcement.

• We never access, scrape, or read your private emails, messages, or bank accounts.
• We never request or store credit card numbers, CVVs, bKash or Nagad wallet PINs, or online banking passwords.
• We never monitor what you browse outside the PonnoRadar website.
• We never inject unauthorized ads, pop-ups, or affiliate link hijacks on third-party store web pages.

We use your information exclusively to:

• Dispatch price drop alerts via Email, Telegram, or Web Push when a tracked product hits your desired threshold.
• Render your private watchlist, customized currency preferences, and personal tech budget overview.
• Protect our servers from automated scraping bots, credential stuffing, and malicious DDoS attacks.

We do NOT sell, rent, trade, or monetize your personal information to advertisers, data brokers, or marketing firms under any circumstance.

PonnoRadar uses only strictly necessary functional cookies and local storage keys:

• Session & CSRF Cookie: Keeps you securely signed in and defends forms against Cross-Site Request Forgery (CSRF).
• Theme Preference: Stored in local storage (localStorage.theme = 'dark' | 'light') to preserve your dark mode choice across pages.

We do not load third-party cross-site advertising cookies or tracking beacons.

You retain 100% legal ownership of your data on PonnoRadar. You are granted the following rights:

• Right to Access & Portability: You can download a complete, machine-readable JSON archive containing all your user data, watchlists, target price alerts, and logged spending records at any time.
• Right to Erasure (Right to be Forgotten): You can permanently delete your account and all associated records from your account settings. Once confirmed, your records are purged from our live database immediately.

All communication between your browser and PonnoRadar is encrypted in transit using industry-standard TLS 1.3 encryption. Passwords are never stored in plaintext and are salted and hashed using Argon2id and Bcrypt algorithms.

Our databases are hosted behind private virtual private clouds (VPC) with automated firewall rules and IP whitelisting to safeguard your data against unauthorized external access.