Privacy Policy
This policy explains what RestockOwl collects, why, where it is kept and how to have it deleted. In short: we need your email address to sign you in and to send the alerts you ask for, we keep it on servers in the United States, we use no advertising or cross-site tracking cookies, and you can delete your account and every alert at any time.
Last updated:
Draft. Some details about the operator are still to be added, and this text has not been finalized.
Who we are
RestockOwl is operated by Marfik Inc., a company incorporated in the State of To be added, United States ("we", "us"). We are the controller of the personal data described in this policy. RestockOwl is an independent service and is not affiliated with Apple Inc.
Address: To be added
Contact: To be added
What we collect
- Your email address. You give it to us when you sign in with a one-time code that we email to you. If you choose to sign in with Google instead, Google gives us your email address and an identifier for your Google account. We never receive your Google password.
- Your alerts. The product configuration, the country, and each alert's status and expiry date. For a store pickup alert, also the cities you pick; or, if you set it by ZIP code, the ZIP code and the distance you enter, the approximate coordinates of that ZIP code, and the cities whose Apple Stores lie within that distance.
- Email records. We do not keep a log of sign-in code emails ourselves; the provider that sends our email keeps its own delivery records. For restock and renewal emails we keep a record of whether each one was accepted by the mail provider, skipped, or failed. Those records do not contain your email address and are deleted with your account. We do not receive bounce receipts. Opening a pause, renew, or unsubscribe link in a browser only shows a confirmation page; it runs after you confirm. A one-click unsubscribe sent by your mail provider pauses all of your alerts immediately.
- Technical data. As with any website, our servers and Cloudflare, which sits in front of them, process the IP address, the browser type and the page requested for each visit. This is needed to deliver the page and to keep the service secure.
- Your location, when you look for nearby stores. This applies whether or not you have an account. To suggest a starting point, we read the country, the postal code and the approximate coordinates that Cloudflare works out from your IP address. If you type a ZIP code yourself, it is kept in your browser's local storage on your own device and is sent to our servers to work out which Apple Stores are nearby. In both cases we use the location to answer that request only: we do not store it and we do not link it to an account. To get the list of nearby stores, our servers pass an approximate location, accurate to about 10 kilometers, and a search range to the system that checks Apple's stores, in a lookup that carries no account or subscription identifier; that system does not keep it. Your ZIP code itself is not passed on. It is stored only if you save it as part of a store pickup alert, as described above.
We do not ask for your name, street address, phone number or payment details. RestockOwl takes no payments.
How we use it
- To sign you in and keep you signed in. This is necessary to provide the service you ask for (performance of a contract).
- To send the alerts you set up, and a notice before an alert expires so you can renew it (performance of a contract).
- To keep the service secure and prevent abuse, for example by limiting sign-in attempts (our legitimate interests).
- To understand, in aggregate, how the site is used (our legitimate interests). These statistics do not identify you.
We do not send marketing email, we do not sell personal data, and we do not use it for advertising. We make no automated decisions about you that have legal or similarly significant effects.
Where your data is kept
Your account, your email address and your alerts are stored on servers in the United States.
Checking Apple's stores for availability is done by a separate system located in mainland China. For each alert, a random subscription identifier and the content of the alert (the configuration, the country and the cities) are transferred to that system. Your email address and your IP address are not. For a store pickup alert, the cities are the ones you picked, or the ones worked out from your ZIP code and distance, and they are the only location stored with your alert there. The ZIP code itself is never transferred. To find the stores near you, we send that system an approximate location, accurate to about 10 kilometers, and a search range, in a lookup that carries no account or subscription identifier; that system does not keep it. When the system sees a match, it reports the identifier to our servers in the United States, which look up your email address and send the email.
If you live in the European Economic Area, the United Kingdom or Switzerland, this means that your personal data is transferred to the United States, and that the content of your alerts, together with the random identifier, is transferred to mainland China, as is the approximate location used to find nearby stores, without any identifier. Where the law requires it, we put appropriate safeguards in place for these transfers.
How long we keep it
- Your account and your alerts: until you delete them.
- An alert expires after 30 days unless you renew it, and an expired alert is no longer checked.
- Email records: the outcome of each restock or renewal email stays with your account and is deleted when you delete the account. We do not keep those records after deletion. We do not keep a log of sign-in code emails. In the preview environment, a stored copy of an email is kept for at most 24 hours and is also deleted with the account.
- Server logs: for a limited time for security and troubleshooting, after which they are deleted or aggregated.
When you delete your account, we delete your email address, all your alerts, and the restock and renewal outcome records from our account records, and we tell the checking system to drop the matching subscription identifiers. Copies in backups are overwritten on their normal cycle.
Your choices and rights
- You can delete your account and all your alerts at any time from your account page.
- Every alert email has links to pause, renew, or unsubscribe. Opening one in a browser only shows a confirmation page; it runs after you confirm. A one-click unsubscribe sent by your mail provider pauses all of your alerts immediately.
- If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You can also lodge a complaint with your local data protection authority.
- If you are a California resident, you have the right to know what personal information we collect, to have it deleted and to have it corrected, and the right not to be treated differently for using these rights. You may use an authorized agent. We do not sell or share personal information.
To use any of these rights, write to To be added. We answer within the time the law requires. We may first need to confirm that the request comes from the email address of the account.
Children
RestockOwl is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us an email address, contact us and we will delete it.
Security
Connections to RestockOwl are encrypted, and access to account data is limited to what running the service requires. No system is perfectly secure, so we cannot guarantee absolute security.
Changes to this policy
When we change this policy we update the date at the top of this page. If a change materially affects how we use your personal data, we also tell account holders by email before it takes effect.
Contact
Questions and requests about privacy go to To be added. More about who runs RestockOwl is on the About page.