Your experiences belong to you.
This page describes how this private beta handles data. The site’s sharing settings control who can access it. Keep personal order information out of product links and comments.
What we save
- Account data
- Your PonderPigeon account identifier, email address, display name, password hash and sign-in sessions. Session records can include request IP address and browser information. Passwords are stored as hashes rather than readable text. Recovery codes are also stored as hashes; the readable code is shown only when you generate it.
- Saved preferences
- Your shopping country and currency, wishlist, price targets, ownership responses and their timestamps. These product preferences are separate from your sign-in credentials.
- Ownership responses
- Your answers about ownership duration, continued use, reliability and value, the amount paid, country, currency, variant and any optional comment. Review status and private moderation records are also stored.
- Product sources
- Imported retailer URLs, extracted product facts, source excerpts, published repairability assessments, documented ownership costs and observed prices. These are shared product records, so use a public product-page link without personal order or account details.
- Browser storage
- Your theme, shopping preferences, comparison selection and any earlier device-only demo saves are stored on your browser. Clearing this site’s browser storage removes those device preferences. Your sign-in uses an HTTP-only session cookie. PonderPigeon does not save your password or readable recovery code in browser storage.
- Listing reports
- The product, issue category, your explanation, submission date and review status. Reports are private to you and moderators and are included in your account export.
- Request limits
- Temporary account or request counters help limit repeated writes and imports. Hosting and sign-in services may also process request information under their own policies.
What other users see
Approved ownership answers contribute to aggregate statistics with visible sample sizes. Current contributions remain labeled unverified, even after review. Public community statistics do not expose account identifiers, emails or private comments.
Moderation staff can inspect submitted answers and optional comments to review contributions. Receipts, order confirmations and ownership verification uploads are not supported yet; please do not put them into comments.
Prices you enter for a deal check
The deal checker sends your selected product, country, entered price, shipping, retailer and condition to our server to calculate a comparison. This feature does not save those entered details as an ownership response, approved retailer offer or retailer price history. The result stays in the current page until you change it or leave. Request-limit counters and hosting logs are handled separately as described above.
When AI is used
The product import service can send public retailer page content to Google Gemini to structure product information. Claims must be supported by retrieved source content. Owner responses and private account data are not used by the product extraction flow.
A blocked retailer page cannot be turned into a verified fact by asking AI to guess. An imported specification is source information, not proof of product quality or verified ownership.
Broader product searches
When the broader search service is connected, searches outside the saved catalog can send the product names or descriptions in your query and your shopping-country preference to Brave Search. We do not send your account credentials or ownership responses. These web results are displayed as external sources and are not saved to the product catalog. Keep personal information out of search queries. Google Shopping and web search buttons open your query on Google under its own policies.
Brave’s standard API service may retain query records for up to 90 days, subject to legal obligations. See Brave’s API privacy notice.
Export or remove your data
Open My products while signed in to download your saved product data as JSON or clear your saved data. You can also remove individual ownership responses, wishlist items and price targets.
“Delete saved data” removes your stored preferences and their linked saved products, targets, ownership responses, listing reports and moderation records. Your PonderPigeon login, password and recovery code stay available. “Delete my account permanently” in Account security requires your current password and removes the login, credentials, sessions and saved data together.
Shared retailer product records and browser preferences are separate from account deletion. Clearing your browser’s site storage removes those local preferences.
Your saved account data is retained until you remove it. Product-source records can remain part of the shared catalog. Hosting backups and service logs have separate retention outside these account controls.
Your password and recovery code
Account recovery uses the one-time code you save at registration or generate in Account security. Codes expire after one year; replacing or using a code invalidates it. We do not send password-reset emails. Without your password or a valid saved code, this beta cannot recover your sign-in. Keep the code somewhere private and never put it in a listing report or ownership comment.
Purchases happen with the retailer
Retailer source links leave PonderPigeon. The retailer handles checkout, shipping, payments, returns and its own account information.PonderPigeon does not collect payment card details or complete a purchase for you.