Privacy
Last updated 26 May 2026
Summary
Baskt is a public read-only database of New Zealand grocery prices. Browsing, searching and viewing items is anonymous and requires no account. To save a grocery list across devices you sign in with email — that’s the only personal information we hold.
What we collect
- Your email address— only when you sign in to save grocery lists. We use it to send you a one-tap sign-in link and to identify your account on subsequent visits. We don’t send marketing.
- Your grocery lists — the items you add, the quantities you set, and the snapshot of price/store/brand at the moment you added them. Stored server-side in our database and only visible to you.
- Request metadata — your IP address, user agent, and the URL path you requested. We use this transiently to enforce per-IP API rate limits and to help diagnose outages. Not stored long-term beyond hosting-provider edge logs.
- Edge access logs — Vercel, our hosting provider, retains short-lived access logs (typically 30 days) for operational and abuse-detection purposes.
- Website analytics and performance metrics — anonymous page-view and visitor counts collected through Google Analytics and Vercel Web Analytics, plus Core Web Vitals measurements collected through Vercel Speed Insights, so we can understand which pages are useful, fast, and reliable.
- Error reports — crash details, affected page, browser/runtime metadata, and stack traces collected through Sentry so we can find and fix broken user flows.
What we do not collect
- No name, phone number, address, or payment information.
- No advertising or marketing trackers.
- No cross-site tracking cookies.
Cookies
Once you sign in, we set a small authentication cookie that keeps you signed in across visits. It contains a session token scoped to baskt.nz only — no advertising or tracking purpose. It is cleared when you sign out.
Where data goes
- Supabase (Australia) — hosts our database (your email, your lists, the public price catalogue) and our authentication service.
- Google (United States) — website analytics (Google Analytics). Receives anonymous page-view data and coarse device/browser metadata.
- Vercel (United States / EU) — application hosting, edge caching, short-lived access logs, website analytics, and Speed Insights performance telemetry.
- Sentry (EU) — error monitoring and release diagnostics for the website. We scrub secrets, cookies, auth headers, and obvious tokens before events are sent.
- Resend (Japan / United States) — sends the one-tap sign-in links to your email. Receives only your email address and the link content; nothing else.
These providers are bound by their own privacy policies. We do not share your data with any third party for advertising or cross-site tracking.
Price data
The price observations stored in Baskt are scraped from publicly accessible NZ supermarket websites and APIs. They describe products, prices, and store locations — not people.
Your rights under the NZ Privacy Act 2020
You can ask us to:
- Show you the personal information we hold about you (your email + lists).
- Correct anything that’s wrong.
- Delete your account and all your lists permanently.
Email hello@baskt.nz from the address on the account. We aim to action requests within 7 days.
Changes
We will update the “Last updated” date above when this policy changes materially. Substantive changes will also be noted on the landing page.
Contact
Baskt is operated by Einherjar Systems Limited (New Zealand). Privacy queries: hello@baskt.nz.