Privacy Policy

Who we are

JB Price Trend is operated by Nep Studio. You can reach us at our contact page or at info@nepstudio.com.au.

What we collect

• Account details. Your email address and a password stored only as a bcrypt hash. We never hold your password in a readable form.
• What you track. The JB Hi-Fi product links you add, your alert settings, and when we last emailed you about each one.
• Subscription status. Whether your plan is active, which interval you chose, and when the period ends. We do not receive or store card numbers.
• A device identifier. The extension generates a random ID so it can talk to your account without asking you to sign in repeatedly.
• Extension usage. Which JB Hi-Fi product pages you open it on — the product’s name, brand and category — which of its buttons you use, and your browser, operating system and language. This goes to Google Analytics under a random ID created on your device. It is not tied to your account, and it never says which products are on your watchlist.
• Website usage. Which pages you open on this site, which plan you click, how far you get through checkout, and what a completed subscription cost. This also goes to Google Analytics, and uses the cookies described below.

The two sets of usage data are deliberately kept apart. The extension does not hand its device ID to this website, so your product browsing is never joined to your payment.

What we do not collect

We do not collect your browsing history, the pages you visit outside JB Hi-Fi product pages, your name, your address, or your payment details. We do not build advertising profiles and we do not sell or rent any data to anyone.

Cookies

This website sets two kinds, both its own — no advertising cookies, and nothing that follows you to other sites.

• Signing in. One cookie that keeps you logged in. It holds a signed token, is marked httpOnly so scripts cannot read it, and goes when you log out.
• Analytics. Google Analytics sets cookies lasting about two years that hold a random number, so a return visit is not counted as a new person. They do not identify you. A tracker blocker or your browser’s cookie settings will stop them, and the site works the same without them.

The extension itself sets no cookies.

Why we hold it

To run the service you asked for: keeping your watchlist, checking prices, emailing you when one drops, and knowing whether your subscription entitles you to the Premium features. That is the whole purpose.

Who else processes it

Running this service takes a small number of outside providers: payment processing, email delivery, hosting, database storage and analytics. Each receives only what it needs to do its part — the payment provider gets your card details directly, so they never reach our servers, and the analytics provider gets usage events rather than your account.

Some of them process data outside Australia. We do not sell or rent your data to anyone, and none of these providers may use it for their own purposes. If you would like to know which providers we use, ask us and we will tell you.

Price data

Product names, prices and price history are public information read from JB Hi-Fi’s own product pages. That data is not personal, and a product’s history is shared by everyone tracking it rather than held per person.

How long we keep it

Account and watchlist data is kept while your account exists. Price history is trimmed to the most recent twelve months. Password-reset tokens expire within 30 minutes. If you ask us to delete your account, we remove it and everything attached to it.

Your choices

• See or correct your details. Your email and plan are shown in your dashboard settings.
• Stop the emails. Turn off a product’s alerts, or remove it from your watchlist. Account notices such as password resets cannot be turned off while the account exists.
• Delete everything. Ask us and we will delete your account and its data. There is no self-service delete button yet.
• Stop the analytics. Uninstalling the extension stops its reporting entirely. On this website, a tracker blocker or blocking cookies stops ours, and nothing about the site stops working.

Security

Passwords are hashed with bcrypt. Sessions use signed tokens delivered in httpOnly cookies. Traffic is encrypted in transit. No system is perfect, and we do not claim otherwise — if something goes wrong that affects you, we will tell you.

Children

This service is not directed at children under 13, and we do not knowingly collect their information.

Changes

If this policy changes materially we will update the date at the top and, where the change affects you, say so by email.