Privacy Policy

1. Information we collect and use

Searches. We use the product words you enter to retrieve shopping results through search service providers. We temporarily store search words and results to provide recommendations and avoid repeated requests. Please do not include personal or sensitive information in a product search. Search URLs may also appear in your browser history or be shared if you copy them.

Connection and security information. We receive technical connection information, including your IP address and browser information, to deliver the site and protect it from abuse. We keep limited abuse-prevention records without storing your raw IP address in those records. Operational logs can contain connection information and errors.

Service counts. We count page loads, search requests and outcomes, and certain browser actions by day and broad category. These separate totals do not contain visitor or session identifiers, raw search words, product names, IP addresses, or browsing journeys. We use them to understand service use and improve reliability.

Optional analytics. App and browser activity analytics is off until you choose Allow analytics in Analytics preferences. You can withdraw that choice at any time, and browser privacy signals keep it off. When allowed, we record page visits, broad search topics and outcomes, products you explore, details you open, retailer links you click, save-for-later actions, sign-in outcomes and sync actions. These records can include product names, listing prices, a broad device type, web or app platform, app version, whether a saved item has a note or is marked purchased, traffic-source categories, and screened campaign labels. Random browser and visit identifiers distinguish activity from the same browser. These records do not include raw search words, account identifiers, email addresses, private note text, list names, full referring URLs, IP addresses, or screen recordings. They are not sent to a third-party analytics service.

Messages you send us. If you email us, we receive your email address, any name you provide, and the message contents. We use this information to respond and handle your request.

2. How we share information

We share information with the following categories of providers to operate BestOne:

• Authentication providers: Google Firebase Authentication processes email/password sign-in; chosen Google or Apple providers process social sign-in. Our saved-list records remain on BestOne’s server.
• Search service providers: receive your product search words to return shopping results.
• Image providers: receive image requests and connection information when product images load in your browser.
• Affiliate partners and retailers: receive retailer link and referral information, as explained below.
• Hosting and email providers: process connection, operational or correspondence information needed to deliver the site and handle email.

BestOne does not send its first-party analytics records to affiliate providers or use those records to build advertising profiles. Providers and retailers apply their own privacy practices and may process information in countries other than where you live. We may also disclose information when required by law or necessary to protect the service, prevent fraud, or address a legal claim.

3. Affiliate retailer links

Some product image and Visit store links are affiliate links. BestOne may receive compensation for an eligible click or purchase. This does not change the products we select or their order.

Affiliate partners receive retailer link information to support referrals. We do not provide them with your search words or optional analytics records.

If you follow an affiliate link, the affiliate partners and retailer receive information about your visit, including your IP address, browser information and referral. They or their network partners may use cookies or similar technologies to attribute referrals and purchases. Their tracking may connect activity across websites under their own policies. Your full BestOne search URL is not sent as a referrer. BestOne’s own analytics does not track purchases on retailer sites, and we do not receive your payment details.

4. Cookies and browser storage

BestOne uses browser storage to remember your analytics choice for up to one year. While detailed analytics is enabled, a random visitor identifier can last up to 90 days, and a visit identifier expires after 30 minutes of inactivity. Choosing Turn off analytics removes those analytics identifiers from your browser.

Saved items. Saved items work without an account on this device. If you sign in, BestOne stores your account identifier, display name, sign-in provider, saved products, private notes, list names and purchased markers on our server to synchronize your list. Signing in adds this device’s unconnected saves to that account and syncs changes automatically. Original device copies remain available for recovery and are not automatically copied into another account. We use Google Firebase Authentication for Google, Apple or email/password sign-in; Firebase and your chosen provider receive sign-in and connection information. For email sign-in, your email and password go directly to Firebase. BestOne receives sign-in tokens, not your password. Saved notes and lists are not sent to Firebase, search providers or analytics. An essential, secure sign-in cookie lasts up to 14 days; encrypted provider credentials keep that session working. Each account has its own device cache. You can export your synced list or delete your account from Account at the upper right. Signing out removes that account’s device cache after pending changes have synced; your separate device saves remain. Clearing app or browser storage removes local copies.

Affiliate partners and retailers may set their own cookies when you follow their links. You can manage cookies and site storage in your browser settings; clearing storage may also clear your saved analytics choice.

5. Your privacy choices and tracking signals

Optional analytics. Use Analytics preferences to allow or turn off activity analytics. This control is in the website footer and near the top of this policy in the apps. You can continue searching when you decline. Choosing Turn off analytics also requests deletion of detailed events associated with the identifier currently stored in your browser from our active records. If you already cleared that identifier, we may be unable to connect older records to your request.

Do Not Track and Global Privacy Control. These browser signals keep BestOne’s optional analytics off and suppress browser action counts. Basic page-load, search and security counts still operate to measure and protect the service. These signals do not prevent you from following retailer links or control a provider’s practices after you leave BestOne.

Third-party choices. Review the privacy information provided by retailers and affiliate partners for their available controls. You can also restrict cookies through your browser or avoid following affiliate links. Contact us if you need help identifying a provider relevant to your privacy request.

6. How long we keep information

• Temporary search records: expire within 72 hours and are removed during routine cleanup.
• Abuse-prevention records: retained for up to 48 hours before routine cleanup.
• Service totals and detailed analytics: retained in active records for up to 90 days, with routine cleanup. Detailed events can also be deleted through your analytics choice as described above.
• Correspondence and operational logs: retained as needed to handle requests, operate and secure the service, and meet legal obligations.
• Accounts and synced saves: retained until you remove items or delete your account. Sessions expire after 14 days; retry identifiers are retained for up to 30 days. Account deletion removes active BestOne records and the Firebase account. If removal is interrupted, access is blocked while we retry; you may need to sign in again to finish it. Pending removal credentials are encrypted and erased when cleanup completes. We retain keyed removal markers for 31 days to prevent recovery copies from restoring deleted accounts. These markers contain no names, email addresses or saved notes. Older recovery copies remain subject to the restricted backup retention described below.
• Recovery copies: Encrypted recovery copies normally expire after 30 days during routine cleanup. Cleanup pauses if a recent recovery copy cannot be verified or the owner backup device is offline. Copies older than 30 days are ineligible for restoration, and current account-removal markers must be applied before any restored account data becomes available. Access is restricted.

Other providers set their own retention periods under their policies.

7. Security

We use safeguards to protect information during transmission and storage, restrict access to private data, and encrypt recovery copies. No internet service or storage system can guarantee absolute security.

8. Children’s privacy

BestOne is not designed for children under 13. If you believe a child has provided personal information to us, please contact us so we can investigate and address it.

9. Contact and privacy requests

Email hello@findthebest.one to ask a privacy question or request access, correction, deletion, or a copy of information we hold about you. The rights available and any exceptions depend on applicable law and your location. We may need information to verify and locate the relevant records, and may not be able to identify you from usage counts or browser identifiers alone. Please do not send passwords or payment details.

Requests about information held independently by an affiliate provider or retailer should also be directed to that provider using its privacy policy.

10. Changes to this policy

We will publish updates on this page and change the last-updated date when our practices or this policy change. If a change requires a new choice or consent, we will provide it as required.