Privacy policy
Last updated: 24.10.2026
CâtAFost (catafost.com) follows public prices on eMAG and keeps as little data about you as it can. This page says what data we keep, why, who else receives it and how you can manage it.
Who is responsible for your data
CâtAFost (catafost.com) is responsible for your data. For any question about it, write to contact@catafost.com.
What data we keep
For every visitor:
- •the IP address, with a count of requests, for the daily limits;
- •for sign-in, registration, password resets and pasted eMAG links: the IP address, browser data (type, version, operating system) and the email or link entered, for the limits on these actions;
- •the web server's log: IP address, time, the page requested and browser data, to run and secure the site;
- •the text of searches, without the IP address and not linked to an account, to see what people look for and what the catalog lacks.
Without an account:
- •the products you save and their target prices stay only in your browser.
With an account:
- •your email, your password (stored as a hash: we cannot read it), the language you registered in and when you accepted the terms;
- •your tracked products, alert settings and notifications;
- •the IP addresses your account was used from.
We don't ask for your name, postal address, phone number or payment details.
Paid plans cannot be bought yet. When they can, this page will say what payment data is used and by whom.
Why we use it and on what basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Your account, tracked products, alerts and notifications on the site | email, password, tracked products, alert settings | performing the service you asked for, Art. 6(1)(b) |
| Service emails: address confirmation and password reset | performing the service you asked for, Art. 6(1)(b) | |
| Security, daily limits and abuse prevention | IP addresses, browser data, the email or link entered | legitimate interest, Art. 6(1)(f) |
We don't use your data for advertising, don't sell it, don't send newsletters or promotional messages, and don't use outside analytics services.
Who else receives the data
Only the providers the site cannot run without. They process the data on our behalf and only for the purposes above:
- •Resend (USA) sends the service emails. The transfer outside the European Economic Area is made under the standard contractual clauses approved by the European Commission;
- •GHOSTnet GmbH (Virtbase), Germany, hosts the site and its database.
We disclose data to authorities only when the law requires it.
Product images
Product images are not hosted by us: your browser loads them directly from eMAG's servers. eMAG therefore receives your IP address, browser data and our site's address, as with any image loaded from its servers. What eMAG does with this data is set out in eMAG's privacy policy.
Cookies
We use a single, strictly necessary cookie to keep you signed in; it needs no consent. We don't use advertising or tracking cookies. What is kept in your browser, with or without an account, is listed on the Cookies page.
How long we keep it
- •what is in your browser — until you delete it;
- •IP addresses, browser data and the records of sign-in, registration, password resets and pasted links — 30 days;
- •the web server's log — it has a fixed size: old entries are deleted as new ones arrive;
- •account data — while the account exists; deleting the account deletes it at once, with its tracked products, alerts, notifications, its IP addresses and the records that contain its email;
- •the text of searches — it cannot be linked to a person and has no deletion term.
Your rights
Under the GDPR, you have the right:
- •to know what data we hold about you and get a copy of it;
- •to have it corrected;
- •to have it deleted;
- •to restrict its processing or object to processing based on legitimate interest;
- •to receive your account data in a portable format.
You can delete your account at any time from your profile, and pause or delete your alerts in My products.
For the rest, write to contact@catafost.com. We answer within one month.
If you think your data is not handled correctly, you can complain to the Romanian data protection authority (ANSPDCP), www.dataprotection.ro, or to the data protection authority of the country you live in.
Security
The connection to the site is encrypted (HTTPS), passwords are stored as hashes and cannot be read, and access to the data is limited to the site's administrator. We keep only the data the site needs.
Children
The service is not meant for people under 16.
Changes
If what we keep or how we use it changes, we update this page and the date at the top.