Privacy Policy and Cookie Notice

Last updated: 11 July 2026

1. INTRODUCTION

This Privacy Policy describes how Webnetic s.r.o. ("we", "us", "our") collects, uses, shares and protects personal information when you visit or use PlatPrices.com (the "Site"), including our optional browser extension. We are the controller responsible for this personal data under the EU General Data Protection Regulation ("GDPR"). If you have questions about this policy or about our data practices, contact us at [email protected].

2. PERSONAL DATA WE COLLECT

We only collect the personal data described below — we do not buy personal data from third parties.

• Account data — your e-mail address and a securely hashed (bcrypt) password if you register directly, plus the IP address used to create/access your account.
• Social sign-in (Google / Discord) — if you sign in with Google or Discord instead, we receive your e-mail address and profile picture from Google, or your e-mail address and Discord user ID from Discord. We never receive or store your Google/Discord password.
• PlayStation Network (PSN) linking — if you choose to link your PSN account, we store your PSN Online ID, your numeric Sony account ID, your PSN "About me" text, and a cache of your game library and trophies so we can show ownership badges and trophy information.
• Public profile (opt-in) — if you turn on a public profile, your chosen display name, avatar and game/trophy statistics become visible to anyone at your profile URL (/u/<handle>). This is off by default.
• Wishlist, library & preferences — the games on your wishlist and in your library, price alerts you set, publishers you hide, and entities (publishers/series/developers/genres) you follow for sale alerts.
• Support requests — if you contact support, we store your e-mail address, your message, and — if you were signed in — your account ID.
• Push notifications — if you enable browser push alerts, we store the push endpoint, the encryption keys needed to send you a notification, and your browser's user-agent string.
• Avatar/store click-throughs — when you click through an avatar to a store listing, we briefly log your IP address together with the click for fraud/abuse monitoring. This IP is automatically erased after 30 days.
• Account security — if you enable two-factor authentication (2FA), we store your 2FA secret and one-time backup codes.
• Developer API — if you request a PlatPrices API key, we store the key and a log of requests made with it, linked to your account.
• Device/usage information — automatically, for every visitor: IP address, browser type, referring/exit pages and timestamps ("log files"), and — only with your consent — Google Analytics usage statistics. "Cookies" are small data files placed on your device; see section 12 below for details, and visit http://www.allaboutcookies.org for general information about cookies.

3. PURPOSES OF PROCESSING AND LEGAL BASES

Purpose	Legal basis
Creating and running your account, wishlist, price alerts and the Site's core features	Performance of a contract (Art. 6(1)(b))
Signing in via Google/Discord (linking your social account)	Your consent (Art. 6(1)(a))
Security, fraud/abuse prevention, keeping the Site working correctly	Legitimate interests (Art. 6(1)(f))
Google Analytics (aggregate usage statistics)	Your consent (Art. 6(1)(a)) — off by default
Advertising via NitroPay, including sharing a hashed e-mail for ad matching	Your consent (Art. 6(1)(a)) — off by default
Google One Tap sign-in prompt	Your consent (Art. 6(1)(a)) — only shown after you accept analytics/Google cookies
Weekly digest e-mail (sale roundups)	Your consent (Art. 6(1)(a)) — opt-in checkbox, unticked by default

We use the personal data described above to run your account and the wishlist/price-alert features you opt into (e.g. sending you an e-mail when an item on your wishlist goes on sale), to detect and prevent fraud or abuse, and — only where you have consented — to measure Site usage with Google Analytics and to serve and measure advertising through NitroPay.

4. AUTOMATED DECISION-MAKING

We do not carry out any processing that involves solely automated decision-making, including profiling, which produces legal effects concerning you or similarly significantly affects you. Any account moderation or security action (for example, action on a support ticket or a suspected abuse case) involves human review.

5. DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We do not sell your personal information. We share personal data only with the following categories of recipients, and only for the purposes described above:

• Google — for Google sign-in, Google Analytics (only with consent) and the Google One Tap prompt (only with consent). See Google's privacy policy: https://www.google.com/intl/en/policies/privacy/. You can also opt out of Google Analytics using https://tools.google.com/dlpage/gaoptout.
• Discord — for Discord sign-in, if you choose that option.
• SendGrid — our transactional e-mail provider, used to send account, wishlist and (with consent) weekly digest e-mails.
• Cloudflare Turnstile — a bot-detection/anti-abuse check used on certain forms; it processes device/browser signals to confirm you are not an automated script.
• NitroPay and its programmatic advertising partners — for showing and measuring ads on the Site, only with your consent. Where you are signed in, we may share a one-way cryptographic hash (SHA-256) of your e-mail address (never the e-mail address itself) with these partners to help match relevant advertising. See NitroPay's privacy policy: https://nitropay.com/privacy.

You can manage your advertising and analytics consent at any time using the Cookie settings link, and California residents can use the "Do Not Sell or Share My Personal Information" control referenced above. We may also disclose personal data where required to comply with the law, to respond to a lawful request from public authorities, or to protect our rights, property or the safety of our users.

6. INTERNATIONAL DATA TRANSFERS

Some of the third parties listed above (Google, SendGrid and NitroPay) are based in, or process data in, the United States. Where personal data is transferred outside the European Economic Area, we rely on the EU-U.S. Data Privacy Framework where the recipient participates in it, and on the European Commission's Standard Contractual Clauses (SCCs) as a fallback safeguard. You may request more information about these safeguards by contacting us at [email protected].

7. DATA RETENTION AND ERASURE

We keep your account data for as long as your account exists. Other retention periods:

• Avatar/store click-through IP addresses are automatically erased 30 days after the click.
• If you start an account-deletion request but cancel it, the IP address recorded with that request is automatically erased 30 days later.
• Server log files are kept for a limited period for security and troubleshooting purposes before being deleted.
• Support ticket retention is still being finalised; in the meantime we keep tickets no longer than necessary to resolve your request and any related follow-up, and they are deleted along with the rest of your data if you delete your account (see below).

You can delete your account at any time from the Your Data & Privacy page. After you confirm by e-mail, and once the grace period shown on that page has passed (giving you a window to change your mind), we permanently delete your personal data from essentially all of our systems — account, PSN links and cached PSN data, wishlist, library, price alerts, followed entities, push subscriptions, support tickets, API keys and related records. We retain only a minimal, non-identifying record that a deletion took place, so we can demonstrate that we honoured your request; this record contains no personal information about you.

8. YOUR RIGHTS

Subject to the conditions set out in the GDPR (Articles 15–22), you have the right to: access the personal data we hold about you; obtain a copy of it in a portable format; have inaccurate data corrected; have your data erased; restrict or object to certain processing; and withdraw consent at any time (which does not affect processing carried out before the withdrawal). You also have the right to lodge a complaint with your local data protection authority.

If you have an account, you can exercise the main rights yourself, instantly, from the Your Data & Privacy page (sign-in required):

• Access & portability — download a machine-readable (JSON) copy of the personal data we hold about you. To confirm it's really you, we ask you to re-enter your account password first (Google-only accounts confirm via your active session instead), and we limit this to one download per minute. The export excludes passwords and other security tokens.
• Erasure ("right to be forgotten") — permanently delete your account and personal data. You confirm your password (or session, for Google accounts) and tick a confirmation box, we then e-mail you a one-time confirmation link, and your data is erased once you click it and a short grace period has passed — see section 7 for what is deleted.
• Rectification — correct or update your details and preferences in your account settings.
• Withdraw consent — change your cookie choices via Cookie settings, or turn off wishlist/digest e-mails in settings.

To exercise any right we have not automated above (including objection, restriction, or if you do not have an account), contact us at [email protected] and we will respond within one month.

9. THIRD-PARTY WEBSITES

The Site links out to the PlayStation Store and other retailers so you can complete a purchase. Those sites are operated independently of us and have their own privacy policies; we encourage you to review them, as we are not responsible for their content or practices.

10. CHILDREN'S PERSONAL DATA

The Site is not directed at, and is not intended for use by, anyone under the age of 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us at [email protected] so we can delete it.

11. UPDATES TO THIS INFORMATION

We may update this Privacy Policy from time to time, for example to reflect changes to our practices or for other operational, legal or regulatory reasons. The "Last updated" date at the top of this page tells you when it was last revised; where changes are material, we will provide a more prominent notice (such as a banner on the Site).

12. ABOUT COOKIES

Cookies are small data files placed on your device that let a website recognise your browser and remember information. We group cookies and similar technologies (such as local storage and push-subscription identifiers) into three categories. Strictly-necessary cookies are always on because the Site cannot work without them. Analytics and advertising cookies are off by default and only load after you opt in through our cookie banner. You can change or withdraw your choice at any time using the Cookie settings link (also in the footer of every page).

13. COOKIES WE USE

Cookie	Purpose	Category / default
pp_consent	Remembers your cookie-consent choice.	Strictly necessary — always on
Sign-in / session cookies	Keep you signed in and protect the Site (CSRF protection). Set as httponly and secure.	Strictly necessary — always on
Region cookie	Remembers your detected/selected country so prices display correctly.	Strictly necessary — always on
_ga and other Google Analytics (GA4) cookies	Aggregate, anonymised usage statistics so we can improve the Site.	Analytics — off until you allow
NitroPay / IAB-TCF advertising cookies	Select and measure ads shown on the Site.	Advertising — off until you allow
Google One Tap related cookies	Support the Google sign-in prompt shown to signed-out visitors.	Analytics — off until you allow (only shown after analytics/Google consent)

If you do not consent to analytics, Google Analytics (and the related Google One Tap prompt) is never loaded and sets no cookie. If you do not consent to advertising, ads may still appear but are less personalised and we do not share your hashed e-mail with advertising partners.

14. COOKIES FROM OUR SERVICE PROVIDERS

Some cookies on the Site are placed by the service providers we use rather than directly by us — namely Google (Analytics and One Tap sign-in) and NitroPay together with its programmatic advertising partners. These providers act under their own privacy policies for the data collected through their cookies (linked in sections 5 and 13 above), and — as with all analytics and advertising cookies on the Site — are only set once you have given consent.

15. MANAGING COOKIES

You can change or withdraw your cookie consent at any time using the Cookie settings link in the footer of every page. Most web browsers also let you manage cookies through their settings, including blocking or deleting them; see http://www.allaboutcookies.org for browser-specific instructions. Note that blocking strictly-necessary cookies will prevent parts of the Site (such as signing in) from working.

BROWSER EXTENSION

The PlatPrices browser extension (Chrome/Edge) shows live prices, price history, and — only if you connect your account — which games on the PlayStation Store you already own, directly on store.playstation.com. It handles data differently from the rest of the Site:

• Stored locally, on your device only — your API key, watchlist, settings, and short-lived caches of prices and ownership results. This is never stored where we can read it on our servers beyond the individual API requests described below, and it is never synced to your Google/Microsoft browser account.
• Sent to platprices.com — your API key (to identify the request) and the specific game id(s) or names needed to answer that one request (e.g. "what's the price of this product", "which of these games do I own"). The extension reads the PlayStation Store page you're viewing locally, on your device, to work out which product or category it needs to look up — we do not receive your general PS Store browsing activity, only the minimal lookup each request needs.
• "You already own this" / your library badges — only available once you explicitly connect your platprices.com account from the extension's own options page (a Chrome-native sign-in flow — never a copy-pasted password). It uses the same PSN library data as our My PSN Library page, is scoped to your own account only, and can be turned off at any time in the extension's settings.
• Store regions — the extension's settings let you choose which PlayStation Store regions your key can look up prices in (e.g. so it can show your own region's price instead of only a default). That list of region choices is stored against your account on our servers, the same way your API key's other settings are, so it's remembered the next time you connect. It's just your preference of which storefronts to query — we don't use it to determine or record your actual physical location.
• Uninstalling — removing the extension deletes everything it stored on your device. To also disconnect its access to your account, use Disconnect on the extension's options page first (or delete your account entirely, as described under "Your rights" above).

16. CHANGES

We may update this privacy policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal or regulatory reasons.

17. OUR DETAILS (DATA CONTROLLER)

The data controller responsible for your personal data is:

18. CONTACT FOR DATA PROTECTION

For more information about our privacy practices, to exercise any of your rights, if you have questions, or if you would like to make a complaint, please contact us by e-mail at or via our contact page. We will do our best to resolve any concern, but you also have the right to lodge a complaint with your local data protection supervisory authority at any time.

FREQUENTLY ASKED QUESTIONS

Does PlatPrices sell my personal information?
No. We do not sell your personal information. We display ads through our partner NitroPay and may share device information and, when you are signed in, a one-way SHA-256 hash of your e-mail for ad matching, subject to your consent. You can opt out using the Do Not Sell or Share My Personal Information control on the Site.

What cookies does PlatPrices use?
We use three categories of cookies. Strictly-necessary cookies for sign-in, security and your region are always on. Analytics cookies (Google Analytics) and advertising cookies are off by default and only load after you opt in through our cookie banner.

How do I delete my PlatPrices account and data?
If you have an account you can permanently delete it yourself from the Your Data and Privacy page. We confirm the request by e-mail and then erase your e-mail address, wishlist, library and saved preferences. You can also contact us at [email protected].

Can I download a copy of my data?
Yes. Signed-in users can download a machine-readable JSON copy of the personal data we hold from the Your Data and Privacy page, covering your account, wishlist, library and saved preferences.