RestockOwl

Privacy Policy

This policy explains what RestockOwl collects, why, where it is kept and how to have it deleted. In short: we need your email address to sign you in and to send the alerts you ask for, we keep it on servers in the United States, we use no advertising or cross-site tracking cookies, and you can delete your account and every alert at any time.

Last updated:

Draft. Some details about the operator are still to be added, and this text has not been finalized.

Who we are

RestockOwl is operated by Marfik Inc., a company incorporated in the State of To be added, United States ("we", "us"). We are the controller of the personal data described in this policy. RestockOwl is an independent service and is not affiliated with Apple Inc.

Address: To be added

Contact: To be added

What we collect

  • Your email address. You give it to us when you sign in with a one-time code that we email to you. If you choose to sign in with Google instead, Google gives us your email address and an identifier for your Google account. We never receive your Google password.
  • Your alerts. The product configuration, the country, and each alert's status and expiry date. For a store pickup alert, also the cities you pick; or, if you set it by ZIP code, the ZIP code and the distance you enter, the approximate coordinates of that ZIP code, and the cities whose Apple Stores lie within that distance.
  • Email records. We do not keep a log of sign-in code emails ourselves; the provider that sends our email keeps its own delivery records. For restock and renewal emails we keep a record of whether each one was accepted by the mail provider, skipped, or failed. Those records do not contain your email address and are deleted with your account. We do not receive bounce receipts. Opening a pause, renew, or unsubscribe link in a browser only shows a confirmation page; it runs after you confirm. A one-click unsubscribe sent by your mail provider pauses all of your alerts immediately.
  • Technical data. As with any website, our servers and Cloudflare, which sits in front of them, process the IP address, the browser type and the page requested for each visit. This is needed to deliver the page and to keep the service secure.
  • Your location, when you look for nearby stores. This applies whether or not you have an account. To suggest a starting point, we read the country, the postal code and the approximate coordinates that Cloudflare works out from your IP address. If you type a ZIP code yourself, it is kept in your browser's local storage on your own device and is sent to our servers to work out which Apple Stores are nearby. In both cases we use the location to answer that request only: we do not store it and we do not link it to an account. To get the list of nearby stores, our servers pass an approximate location, accurate to about 10 kilometers, and a search range to the system that checks Apple's stores, in a lookup that carries no account or subscription identifier; that system does not keep it. Your ZIP code itself is not passed on. It is stored only if you save it as part of a store pickup alert, as described above.

We do not ask for your name, street address, phone number or payment details. RestockOwl takes no payments.

How we use it

  • To sign you in and keep you signed in. This is necessary to provide the service you ask for (performance of a contract).
  • To send the alerts you set up, and a notice before an alert expires so you can renew it (performance of a contract).
  • To keep the service secure and prevent abuse, for example by limiting sign-in attempts (our legitimate interests).
  • To understand, in aggregate, how the site is used (our legitimate interests). These statistics do not identify you.

We do not send marketing email, we do not sell personal data, and we do not use it for advertising. We make no automated decisions about you that have legal or similarly significant effects.

Where your data is kept

Your account, your email address and your alerts are stored on servers in the United States.

Checking Apple's stores for availability is done by a separate system located in mainland China. For each alert, a random subscription identifier and the content of the alert (the configuration, the country and the cities) are transferred to that system. Your email address and your IP address are not. For a store pickup alert, the cities are the ones you picked, or the ones worked out from your ZIP code and distance, and they are the only location stored with your alert there. The ZIP code itself is never transferred. To find the stores near you, we send that system an approximate location, accurate to about 10 kilometers, and a search range, in a lookup that carries no account or subscription identifier; that system does not keep it. When the system sees a match, it reports the identifier to our servers in the United States, which look up your email address and send the email.

If you live in the European Economic Area, the United Kingdom or Switzerland, this means that your personal data is transferred to the United States, and that the content of your alerts, together with the random identifier, is transferred to mainland China, as is the approximate location used to find nearby stores, without any identifier. Where the law requires it, we put appropriate safeguards in place for these transfers.

Cookies and analytics

We do not use advertising cookies or cross-site tracking, and we do not embed third-party advertising or social media trackers.

  • Before you sign in. RestockOwl itself sets no cookies. The language of a page comes from its address, not from a cookie. The only exception is the home address (the site without a language or country in it): for that one request we read the language your browser sends (the Accept-Language header) and the country Cloudflare works out from your IP address, only to choose which page to send you to. We store neither and the choice is not remembered.
  • After you sign in. We set only the cookie that is strictly necessary to keep you signed in.
  • Your location choice. If you pick a country, enter a ZIP code, or choose cities to check store stock in, that choice is kept in your browser's local storage so the site remembers it on your next visit. It is not a cookie and is not attached to your requests; the ZIP code or the cities are sent only when a page looks up the stores there. You can remove it by clearing this site's data in your browser.
  • Security cookie. Cloudflare may set a strictly necessary cookie to tell visitors from automated traffic.

Traffic statistics come from Cloudflare Web Analytics, which does not use cookies and does not store anything on your device. We set no cookies for advertising, analytics or tracking.

Who we share it with

We share personal data only with the service providers we need to run RestockOwl:

  • Cloudflare delivers and protects the site and provides the cookieless statistics. It processes IP addresses and request data.
  • Cloudflare Email Service sends our email. It receives your email address and the content of the emails we send you.
  • Google, only if you choose to sign in with Google. Google learns that you signed in to RestockOwl.
  • DigitalOcean hosts our servers in the United States, where your account is stored.

We may also disclose data when the law requires it, or pass it to a successor if RestockOwl is merged or sold, under the protections of this policy. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

How long we keep it

  • Your account and your alerts: until you delete them.
  • An alert expires after 30 days unless you renew it, and an expired alert is no longer checked.
  • Email records: the outcome of each restock or renewal email stays with your account and is deleted when you delete the account. We do not keep those records after deletion. We do not keep a log of sign-in code emails. In the preview environment, a stored copy of an email is kept for at most 24 hours and is also deleted with the account.
  • Server logs: for a limited time for security and troubleshooting, after which they are deleted or aggregated.

When you delete your account, we delete your email address, all your alerts, and the restock and renewal outcome records from our account records, and we tell the checking system to drop the matching subscription identifiers. Copies in backups are overwritten on their normal cycle.

Your choices and rights

  • You can delete your account and all your alerts at any time from your account page.
  • Every alert email has links to pause, renew, or unsubscribe. Opening one in a browser only shows a confirmation page; it runs after you confirm. A one-click unsubscribe sent by your mail provider pauses all of your alerts immediately.
  • If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. You can also lodge a complaint with your local data protection authority.
  • If you are a California resident, you have the right to know what personal information we collect, to have it deleted and to have it corrected, and the right not to be treated differently for using these rights. You may use an authorized agent. We do not sell or share personal information.

To use any of these rights, write to To be added. We answer within the time the law requires. We may first need to confirm that the request comes from the email address of the account.

Children

RestockOwl is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has given us an email address, contact us and we will delete it.

Security

Connections to RestockOwl are encrypted, and access to account data is limited to what running the service requires. No system is perfectly secure, so we cannot guarantee absolute security.

Changes to this policy

When we change this policy we update the date at the top of this page. If a change materially affects how we use your personal data, we also tell account holders by email before it takes effect.

Contact

Questions and requests about privacy go to To be added. More about who runs RestockOwl is on the About page.