Privacy Policy

Last updated: 7 August 2026

Who we are

MySpeshlz ("we", "us", "our") is an Australian specials-notification service. Members watch specific products at any of the retailers we track — Woolworths, Coles, Chemist Warehouse, Priceline and Nutrition Warehouse — and get notified when they go on special. A watchlist can therefore include vitamins, supplements and everyday health and beauty products as well as groceries. This policy explains what information we collect, why, and what we do with it.

What we collect

We collect as little as possible, and only what the service needs to function:

• Your watchlist. While you're signed out, the products you choose to watch stay in your browser (localStorage), on your device only. When you turn on notifications and sign in, your watchlist is saved to our database as well, so it follows you between devices and so we know what to check prices against. Each saved item holds the product's name, size, retailer, the last price we saw, and whether you want alerts for it. Because we track pharmacies as well as supermarkets, a watchlist can include vitamins, supplements and health and beauty products — so the list may say something about your interests, and we treat it accordingly: it is never sold, never shared with a retailer, and never used to build a profile.
• Your email address and first name. Collected only when you turn on notifications, so we have somewhere to send the alert and something to call you. The first name is optional. We don't ask for an email to search, browse, or build a watchlist. That is the entire set of personal details we ask for — no surname, no address, no phone number.
• Sign-in records. Because there are no passwords, signing in works by emailing you a single-use link. We store a one-way hash of that link's token (never the link itself), when it expires, whether it's been used, and the IP address it was requested from, so we can spot abuse. We also store a hashed session identifier for each browser you're signed in on. Hashing means a copy of our database cannot be used to sign in as you.
• A record of alerts sent. Which product we emailed you about and when, so we don't email you about the same special over and over.
• Email delivery status. If an alert bounces, or you mark one as spam, our email provider tells us and we stop sending to that address. We record that it happened and why, so we don't keep mailing an address that cannot or does not want to receive it.
• What you search for. We log the search terms typed into the site so we can see which searches return poor matches and fix them, and so we know which products to start tracking. Searches are not linked to your account. One thing worth naming plainly: if a search term looks like a prescription or pharmacist-only medicine we show a message instead of prices, because Australia's Therapeutic Goods Advertising Code restricts advertising those to the public — that check happens on the term you typed.
• Basic technical data. Standard web server logs (IP address, browser type, request timestamps) collected automatically by our hosting provider (Netlify) for security and reliability, not for tracking you personally.

We also keep a price history for the products people watch (the product code, retailer, price and time we checked). That's about groceries, not about you — it isn't linked to any individual's account.

We don't collect payment details, government ID, or any retailer account credentials — MySpeshlz never asks you to log in to a retailer account. We never ask you for a password, because we don't use them.

How we use it

• To send you an email when a product on your watchlist goes on special at a retailer you've asked us to watch.
• To operate, maintain, and improve the service (for example, understanding which searches fail to return good matches).
• To meet legal obligations, including under the Spam Act 2003 (Cth) for any commercial electronic messages we send you.

We do not sell your personal information, and we do not share your email address with Coles, Woolworths, or any other third party for their own marketing purposes.

Affiliate links and referral traffic

MySpeshlz participates in retailer affiliate/referral programs (for example, the Woolworths Partner Program via Impact). When you click through from MySpeshlz to a retailer to view or buy a product, we may earn a commission on qualifying purchases. This does not cost you anything extra, and does not involve sharing your MySpeshlz account information with the retailer — the referral is tracked via the retailer's own affiliate tracking (typically an anonymous cookie or click ID), not by us passing your personal data across.

Cookies and local storage

We use your browser's local storage to remember your watchlist and search preferences on your device. We don't use tracking cookies for advertising.

If you sign in, we set one cookie. It holds a random sign-in token, nothing else — no name, no email, no tracking identifier. It's marked HttpOnly (so page scripts can't read it), Secure (so it's only ever sent over HTTPS) and SameSite=Lax (so other websites can't make your browser use it). Signing out deletes it here and invalidates it on our side. It's strictly necessary for the service to work at all, which is why there's no cookie banner asking you to opt in to it.

Retailers you click through to may set their own cookies once you land on their site — that's governed by their own privacy policy, not ours.

Your rights

You can access, correct or delete your information yourself, without asking us and without waiting:

• See everything we hold. Sign in and open My account. Your email address, first name and watchlist are shown on the page, and Download my data gives you a file containing all of that plus every alert we have sent you and your sign-in sessions — the complete record, nothing held back.
• Stop the emails. Use the unsubscribe link at the bottom of any notification email. It's one click, needs no sign-in, and takes effect immediately. You can also switch notifications off from My account, which keeps your watchlist intact.
• Correct it. You can change your first name on the My account page. We cannot change an email address in place — it is the account key — so if you mistyped it, delete the account and sign up again, or email us and we will do it for you.
• Delete everything. "Delete my account" on the My account page erases your email address, your first name, your watchlist, your sign-in records and your alert history from our database immediately and permanently. There's no soft-delete and no restorable copy.

If you'd rather we did any of this for you, or you can't get into your account, contact us using the details below.

How long we keep it

Your account and watchlist are kept until you delete them. Expired and used sign-in links are cleared out automatically, as are sessions once they lapse. If you unsubscribe, we keep your account (so your list is there if you change your mind) but stop emailing you — deleting the account removes it entirely.

Data security

We take reasonable technical and organisational steps to protect the information we hold. The site and its functions run on Netlify with standard transport encryption (HTTPS), and account data is held in a managed Postgres database. Sign-in tokens and session identifiers are stored only as one-way hashes, so even someone holding a copy of our database could not use them to get into your account. There are no passwords to leak because we don't use any. No online service can guarantee absolute security, but the amount of data at stake here is deliberately small: an email address, a first name, and a list of groceries.

Where your information is held

Our hosting, functions and database are provided by Netlify, and notification emails are sent through Resend. Both operate infrastructure outside Australia, which means your email address and watchlist may be stored or processed overseas. We've chosen providers that offer standard contractual protections for that transfer.

Changes to this policy

We may update this policy as the service evolves (for example, if we add a retailer). We'll update the "last updated" date above when we do.

Contact us

MySpeshlz is operated by a sole trader in Victoria, Australia. ABN 28 169 585 039.

Questions about this policy or your data: hello@myspeshlz.com.au