Privacy

This policy describes how MyIQCart handles personal data. It is written to be read rather than to be survived.

What we collect

If you only browse

Nothing that identifies you. No account, no tracking cookies, no advertising profile. Server logs record requests for security and debugging and are kept briefly.

If you create an account

• Email address — to sign you in and send the alerts you ask for.
• Password — stored only as an Argon2id hash. We cannot read it.
• Country and currency — to work out delivery cost and show prices correctly.
• Your watchlists and alert rules — the product itself.
• Session records — the browser and the time of each sign-in, so you can see and revoke your own active sessions.

Why we are allowed to

• Contract — account data and watchlists exist because you asked for an account and watchlists.
• Legitimate interest — security logging and abuse prevention.
• Consent — anything optional asks first, and can be withdrawn at any time.

What we do not do

• We do not sell or rent personal data. To anyone. Ever.
• We do not build advertising profiles or share data with ad networks.
• We do not use third-party tracking cookies.
• We do not email you anything you did not ask for.

Cookies

Only two, both strictly necessary and both set by us: a session cookie and a refresh cookie that keep you signed in. They are httpOnly, which means page scripts cannot read them. There are no analytics or advertising cookies, which is also why this site does not throw a consent banner at you — there is nothing to consent to.

How long we keep things

• Account data: until you delete your account.
• Deleted accounts: erased within 30 days by an automated job, not by someone remembering.
• Session records: until the session expires or you revoke it.

Your rights

Under the GDPR you may access, correct, export, delete or restrict your data, and object to processing. Export and deletion are self-service on your account page — no email required, no retention team to argue with.

For anything else: privacy@myiqcart.com. You also have the right to complain to the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit).

Where data is processed

Within the European Union. Hosting and databases are EU-based, which keeps this simple for everyone.

Changes

If this policy changes materially, account holders are told before it takes effect. The date at the top always reflects the current version.