Privacy policy

Updated 21 October 2026. You can browse PlaDex without signing up. Stock alerts are optional.

Who is responsible and how to contact us

The contact route is PlaDex on Instagram. Instagram has its own privacy policy.

Browsing and usage statistics

PlaDex collects usage information to understand which kits people view, search for, save to wishlists and open at retailers. This can include the time, page, kit, search text, wishlist action, retailer offer and information about how you found PlaDex. Temporary identifiers group activity during a visit and reset on a reload or new tab. Usage information can reach PlaDex even when it is not saved.

We use no external analytics service, analytics cookies or persistent analytics identifier. IP addresses and browser details are not stored in the analytics records, but hosting services may process them separately. Search text and campaign labels can contain personal information, so please avoid entering it.

Do Not Track and Global Privacy Control stop PlaDex usage recording, but do not delete earlier records. Alert, sign-in, unsubscribe, privacy and terms pages are excluded from page-usage recording. The GDPR legal basis for usage statistics and abuse-prevention records, including suppression records, still needs owner confirmation.

Stock alerts and your email

We use your email with your consent, given through the signup checkbox, to send sign-in links and one-shot restock alerts. These are not marketing emails. Verify your email before managing alerts.

We store your encrypted email when you request a sign-in link, even if you never verify it. We also keep signup and verification dates, the consent policy version, your kit alerts and delivery records, which may include encrypted copies of notifications. These records can still identify you. Sign-in links expire after 30 minutes and can be used once.

Cookies and browser storage

• The functional cookie __Host-pladex-alerts keeps this browser signed in for up to 90 days. Your email address and sign-in tokens are not saved in local storage.
• Your theme and wishlist are saved in your browser. Wishlist kit IDs are sent to PlaDex to load current information. A kit selected before sign-in is also saved locally to complete your request.
• Browser history keeps catalogue results, searches, filters and your position so going back can restore your view. You can clear saved data through your browser settings.

To reduce sign-in abuse, PlaDex temporarily keeps a code derived from your network address for up to ten minutes and checks recent email sign-in activity.

Stopping alerts and deleting your data

Withdraw consent using “Remove my email and alerts” in your Alertlist or the unsubscribe link in a restock email. This deletes your live subscriber record, alerts, sign-in records, sessions and delivery history. An email already being delivered may still arrive. Withdrawal does not affect the lawfulness of processing before it.

Removing one kit deletes that alert and its delivery history while keeping your email and other alerts. “Sign out” ends this browser's session; your alerts and other signed-in devices remain.

After a bounce or spam complaint, we keep a suppression record containing a code derived from your email, the reason and date to block future mail. It can still relate to you and remains after subscriber deletion. There is no automatic expiry.

How long information is kept

Cleanup uses the periods below. Records are removed on the next successful cleanup, so delays or failures can leave them for longer. The owner still needs to verify that cleanup is scheduled and running.

• Unverified signups: seven days after creation.
• Sign-in and session records: seven days after expiry or use. Sign-out deletes the current session; full alert erasure deletes all these records.
• Notification delivery records and message copies: 90 days after creation, or earlier when you remove the alert or erase your data.
• Verified subscriber records and saved alerts: until removed, with no automatic inactivity expiry. Alerts that have already fired stay on your list until removed.
• Individual usage events: 90 days. Monthly summaries, including campaign labels and sufficiently common search terms, have no automatic expiry and are not guaranteed to be anonymous.

Removing live data does not immediately remove copies in backups. Retention periods for backups, hosting logs, monthly summaries and suppression records still need owner confirmation.

Providers and other websites

Resend (Plus Five Five, Inc.) receives your email address and message content to send sign-in and restock emails, and reports bounces and spam complaints. It and its subprocessors may process data outside the European Economic Area, including in the United States. See its Data Processing Addendum and subprocessor list for processing and transfer information. PlaDex's applicable agreements and transfer safeguards still need owner confirmation.

Hosting, database, backup and network providers can process stored data and request information to run PlaDex. Their current identities, locations and retention arrangements need confirmation. Images may load from other websites; following offers or external links takes you to services with their own privacy policies.

Your privacy rights

Where the GDPR applies, you can request access, correction, erasure, restriction of processing or a portable copy of your data, and object to processing where applicable. You can withdraw stock-alert consent as described above. Use the contact route above to make a request. We may need information to verify your identity and locate records; browsing records are not linked to your email.

You can complain to the Dutch Autoriteit Persoonsgegevens or the relevant authority where you live or work. See the AP's privacy-rights guidance for more information.

Stock-alert consent policy version: stock-alerts-v2. Terms of Use. Return to the catalogue.