Privacy
Last updated 9 May 2026
Summary
Baskt is a public read-only database of New Zealand grocery prices. Browsing, searching and viewing items is anonymous and requires no account. To save a grocery list across devices you sign in with email — that’s the only personal information we hold.
What we collect
- Your email address— only when you sign in to save grocery lists. We use it to send you a one-tap sign-in link and to identify your account on subsequent visits. We don’t send marketing.
- Your grocery lists — the items you add, the quantities you set, and the snapshot of price/store/brand at the moment you added them. Stored server-side in our database and only visible to you.
- Request metadata — your IP address, user agent, and the URL path you requested. We use this transiently to enforce per-IP API rate limits and to help diagnose outages. Not stored long-term beyond hosting-provider edge logs.
- Edge access logs — Vercel, our hosting provider, retains short-lived access logs (typically 30 days) for operational and abuse-detection purposes.
What we do not collect
- No name, phone number, address, or payment information.
- No advertising or marketing trackers.
- No third-party analytics scripts (e.g. Google Analytics).
- No cross-site tracking cookies.
Cookies
Once you sign in, we set a small authentication cookie that keeps you signed in across visits. It contains a session token scoped to baskt.nz only — no advertising or tracking purpose. It is cleared when you sign out.
Where data goes
- Supabase (Australia) — hosts our database (your email, your lists, the public price catalogue) and our authentication service.
- Vercel (United States / EU) — application hosting, edge caching, and short-lived access logs.
- Resend (Japan / United States) — sends the one-tap sign-in links to your email. Receives only your email address and the link content; nothing else.
All three providers are bound by their own privacy policies. We do not share your data with any third party for advertising or analytics.
Price data
The price observations stored in Baskt are scraped from publicly accessible NZ supermarket websites and APIs. They describe products, prices, and store locations — not people.
Your rights under the NZ Privacy Act 2020
You can ask us to:
- Show you the personal information we hold about you (your email + lists).
- Correct anything that’s wrong.
- Delete your account and all your lists permanently.
Email hello@baskt.nz from the address on the account. We aim to action requests within 7 days.
Changes
We will update the “Last updated” date above when this policy changes materially. Substantive changes will also be noted on the landing page.
Contact
Baskt is operated by Einherjar Systems Limited (New Zealand). Privacy queries: hello@baskt.nz.