Privacy Policy

Information you give us

• Account: your full name, email address and password when you sign up. Passwords are stored only as a one-way hash, never as readable text. If you sign up with Google, we receive your name and email address from Google.
• Your agreement to the Terms of Service and this Privacy Policy, recorded with the date you agreed, and whether you chose to receive emails about new guides.
• Cedar AI: the messages you send, Cedar AI's replies, and the shopping preferences you tell it (such as budget or the features you care about), saved to your account so you can come back to a conversation.
• Things you save: products (stored as Amazon product identifiers only), articles you bookmark or like, and your notification settings.
• Support requests: the name, email address, subject, message and category you enter, and any file you attach. Attachments are kept on our server and are only reachable through a signed, request-specific link.
• Feedback and comments you choose to submit. Feedback is reviewed before it is published, and only your first name is shown with it.

Information collected as you use the site

• Shopping interests: the product categories you browse, so recommendations can be relevant. Interests fade over time and you can reset them from your account. If you browse while signed out, a random identifier in a cookie (kept for up to 30 days) links your browsing to a short-lived record; it contains no name or email address.
• Cookies and browser storage needed to keep you signed in, remember your cookie choice and run features such as Compare. The Cookie Policy lists them.
• Push notifications: if you allow them, your browser gives us a delivery address and encryption keys, stored with your account so we can send notifications to that browser.
• Anti-abuse data: to slow down spam and repeated sign-in attempts we use your IP address, usually as a one-way hash combined with a site secret, in short-lived counters.

The site does not use analytics, advertising or cross-site tracking scripts.

Cedar AI and AI providers

When you use Cedar AI, your message, the preferences relevant to it, recent messages from the same conversation and the details of the Amazon products being discussed are sent to the AI provider this site is configured to use — Anthropic, OpenAI or Google (Gemini) — so it can write a reply. Your email address and password are not sent.

Each of these providers states that data sent through its API is not used to train its models by default. Where a provider offers a setting not to keep requests (for OpenAI, the request option that turns off storage), we use it. Providers may still keep requests for a limited time for abuse monitoring under their own policies, so we do not promise that nothing is retained.

We do not use your conversations, and we do not use Amazon product information, to train, fine-tune or improve any AI model.

Saved conversations keep your messages and Cedar AI's written replies. Amazon prices and specifications quoted inside those replies are removed automatically after 24 hours; reopening a conversation fetches the product details from Amazon again.

Amazon product information

Product titles, images, prices, availability and specifications come from Amazon through the Amazon Creators API. We keep short-lived copies so the same page does not trigger repeated requests — never longer than 24 hours, and usually minutes — and show the time each price was retrieved. Saved products are stored as Amazon identifiers only. We do not retrieve or show Amazon customer reviews or star ratings.

Product images load directly from Amazon's servers, so Amazon receives the technical information any website receives when your browser loads an image, such as your IP address. When you follow a link to Amazon you are on Amazon's website, and Amazon's own privacy notice applies there.

Payments

Paid Cedar AI plans are sold through Paddle.com, which acts as the merchant of record and processes your payment details directly. We never receive your full card number. We store your plan, subscription status and the customer and subscription identifiers Paddle sends us, so your account shows the right plan.

Emails and notifications

We send emails your account needs — for example email confirmation, password and security notices, support replies and subscription updates. Other emails, such as new-guide alerts, personalised product picks and Cedar Buy updates & offers, are sent only if you turn them on, and every one of them includes a link to turn it off. Site announcements may also appear in your account's Notifications tab; that tab is only visible to you. You can change all of these in your account's notification settings.

How we use information

• To run your account and the features you use, including Cedar AI and saved items.
• To make product suggestions relevant to what you have browsed.
• To answer support requests and send the emails described above.
• To keep the site secure and prevent abuse.
• To manage subscriptions and keep the records billing requires.

We do not sell your personal information, and we do not use it for advertising.

Who else receives information

• The AI provider configured for Cedar AI (Anthropic, OpenAI or Google), as described above.
• Paddle, for paid plans.
• Amazon, when product images load and when you follow a link to Amazon.
• Google, only if you choose Sign in with Google, and on the sign-in and sign-up forms when a reCAPTCHA check is switched on.
• Your browser's push service (for example Google, Mozilla, Apple or Microsoft), which carries push notifications you have allowed.
• Gravatar (Automattic): profile pictures for authors, commenters and your account are loaded from Gravatar, which receives a hashed form of the email address and your IP address. If no Gravatar exists, a plain placeholder is shown.
• The companies that host this website and deliver its email, which process data on our behalf.
• Authorities, where the law requires it.

Some of these providers process data in other countries, including the United States.

How long information is kept

• Account information, saved items and conversations: until you delete them or delete your account.
• Amazon prices and specifications inside saved conversations: removed after 24 hours.
• Push subscriptions: until you turn notifications off, the browser ends the subscription, or you delete your account.
• The signed-out browsing cookie: up to 30 days. Your cookie choice: 180 days.
• Support requests and billing records: as long as needed to handle the request and meet legal and accounting obligations.
• Backups and server logs are replaced on a rolling basis.

Your choices and rights

From your account you can:

• update your name and email address, and change your password;
• choose which emails and push notifications you receive;
• reset your shopping interests;
• download a copy of your account data;
• delete single conversations or all of them;
• delete your account (an active paid subscription must be cancelled first).

You can change your cookie choice at any time from the Cookie Policy page or the link in the footer. Depending on where you live, the law may give you further rights, such as to object to certain uses of your information. Contact us using the details below and we will respond.

Children

This site is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

Security

Passwords are hashed, account actions are protected against cross-site request forgery, sign-in attempts are rate-limited, and pages are served over an encrypted connection when the site runs on HTTPS. No online service can promise complete security; tell us straight away if you notice anything wrong with your account.

Changes to this policy

When this policy changes, the date at the top of the page changes with it. If a change significantly affects how your information is used, we will also point it out on the site.