Privacy Policy

Last updated October 11, 2026.

1. Who we are and how to contact us

CartSift helps people search and compare products, review recorded prices, and save shopping information. This policy explains how Cable Business Group LLC, operating CartSift, handles personal information in connection with that service.

For any kind of support, including account help, sign-in problems, privacy questions, data requests, account deletion, and security concerns, contact support@cartsift.com. General business inquiries may be sent to contact@cartsift.com.

Support, privacy, and deletion requests: support@cartsift.com.

2. Information we collect

3. How we use information

We use information to create and maintain accounts; authenticate users; provide saved shopping features; perform requested product searches and checks; manage available alert settings; answer support requests; send necessary account and security messages; investigate misuse and technical problems; and meet applicable legal obligations.

Marketing and optional notifications, if offered, use the applicable signup and preference controls. Required verification, recovery, and security messages may still be sent when optional communications are disabled. A saved alert preference does not guarantee continuous price monitoring or delivery of every price change.

Advertising: CartSift is preparing Google AdSense, but advertising is currently paused and the site does not load Google advertising code. Plus accounts remain ad-free. Advertising privacy choices are described in section 6. Any activation will require the notices, choices, and technical checks described below.

4. Google and Facebook sign-in

Google sign-in is optional. CartSift requests only basic identity permissions: openid, email, and profile. It does not request access to your Gmail messages, Google Drive files, contacts, or calendar. CartSift does not receive your Google password.

CartSift exchanges the authorization response on its server and verifies the returned identity. It stores the Google account identifier, linked email and verification status, connection metadata, and the profile picture URL Google provides. CartSift uses that picture in your account area and account menu, and refreshes the URL when you sign in with Google. Your browser requests the image from Google without sending the CartSift page address as a referrer. Disconnecting Google removes the stored picture URL from the active account system. The current integration does not persist Google access or refresh tokens. Temporary sign-in state is used to complete and protect the sign-in process.

We use Google identity information to provide and secure the sign-in and account-connection features you request. We do not use this Google user data for advertising or sell it. CartSift's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its applicable Limited Use requirements.

Facebook sign-in is optional. When you choose it, CartSift requests your basic public profile and email address. We receive an app-specific Facebook identifier, first and last name, and email if you allow Facebook to share it. If no email is provided, we ask you for an account email. CartSift verifies that email separately. We do not request your posts, friends list, messages, or photo library, and do not receive your Facebook password. We use the identity information to create, connect, and secure your CartSift account. Facebook access tokens are used temporarily on our server to verify your identity and are not stored in the account database. We store the Facebook identifier and connection metadata, any shared email, and the profile picture URL Facebook provides. CartSift uses the picture in your signed-in account menu, account overview, and profile settings, refreshing the URL when you sign in with Facebook. Your browser loads the image from Meta without sending the CartSift page address as a referrer. Disconnecting Facebook removes its stored picture URL from the active account system. We do not use this information for advertising or sell it.

CartSift does not automatically merge accounts merely because their email addresses match. Connecting an existing CartSift account requires sign-in to that account and confirmation of its current password. New provider accounts can sign in without a CartSift password. After verifying your account email, you can create a backup CartSift password in Settings for email sign-in and security actions. Existing two-step verification still applies where required.

You can disconnect Google through CartSift's Google connection settings or remove CartSift's access through your Google Account. Disconnecting Google does not delete your CartSift account or information already stored in it. Email and password sign-in remains available. Account deletion is a separate action.

You can disconnect Facebook in CartSift Account security after confirming your CartSift password, or remove CartSift in Facebook’s Apps and Websites settings. Disconnecting Facebook does not delete your CartSift account. Create a CartSift password before disconnecting so you retain access.

5. When information is shared

Stripe processes CartSift subscription payments and operates the billing portal. Payment and billing details you enter in Stripe Checkout are handled by Stripe under its Privacy Policy. CartSift stores Stripe customer, checkout and subscription identifiers linked to your account, the selected plan, subscription status, trial end date, subscription history used to determine trial eligibility, confirmed paid-through date and cancellation state. We use these records and signed Stripe payment notifications to manage billing, trial eligibility, access and support. Stripe uses the billing email you provide to send trial reminders with links to manage your subscription. CartSift does not store full card numbers or card security codes. Stripe may retain its own payment and transaction records after you delete your CartSift account.

When you use Stripe Checkout or the billing portal, Stripe may collect transaction, device and browser information, including your IP address, and use cookies or similar technologies to process payments, authenticate transactions and detect or prevent fraud. Stripe may share information with banks, payment networks and other providers involved in processing a payment or handling a dispute, as described in its Privacy Policy.

We use service providers to help host and operate CartSift, deliver account email, handle support, and maintain service reliability. These providers may process information needed for those functions, such as account information, recipient email addresses, message content, and delivery information. Google and Facebook provide optional sign-in as described in section 4.

To provide requested product searches, we may share search terms or product identifiers with services that supply product information. Avoid entering private or sensitive information into product-search fields.

When you follow a retailer or other external link, the destination receives information through your interaction with its website and applies its own policies. CartSift does not control those independent practices.

We may disclose relevant information when reasonably necessary to comply with law, respond to valid legal process, protect users and the service, or investigate fraud or abuse. Any proposed transfer connected with a business reorganization must comply with applicable law and this policy, including notice requirements.

6. Cookies and local storage

CartSift uses session cookies to keep you signed in and request-protection cookies to help prevent unauthorized actions. Google and Facebook sign-in also use a temporary, secure cookie to bind the authorization flow to your browser. Display preferences may use local storage; referral attribution may use session storage.

You can manage or clear cookies and site storage in your browser. Blocking required cookies may prevent sign-in and other account functions. Clearing browser storage does not delete your server-side account, and deleting your account does not necessarily clear storage on every device. Stripe-hosted checkout and billing pages, Google, Facebook, and retailer websites manage their own cookies under their policies.

Advertising privacy choices

Current status: Advertising is paused. Free accounts and visitors will see ads when advertising starts. Ad-free access is a Plus benefit. These controls govern advertising data use; they do not remove ads or change your account plan.

Enable JavaScript to save your browser privacy choice. Advertising is currently paused.

Choosing the opt-out records your choice against sale, sharing, and targeted advertising. We also recognize Global Privacy Control (GPC) as this privacy choice. Non-personalized ads can still appear using restricted data processing. Clearing your saved choice does not override GPC. We save your choice in this browser's local storage until you clear it, with a first-party cookie that lasts up to one year. It does not automatically apply to your other devices. Clearing site data can remove the saved choice.

Before advertising is activated: We will verify the privacy messages and ad delivery. The planned initial setup requests non-personalized ads with restricted data processing. Non-personalized ads may still use cookies or similar technologies for delivery, measurement, and fraud prevention. When advertising is active, Google and participating advertising providers may receive IP address, browser and device information, page context, and advertising identifiers through cookies, local storage, or similar technologies. We will not provide CartSift account names, email addresses, saved watchlists, or Google/Facebook sign-in data to the advertising integration.

Depending on choices and settings, Google advertising cookies can support ads based on visits to this and other websites. Our planned initial setup does not request that personalization. Learn how Google uses information from partner sites, review Google advertising technologies, and manage Google's personalized advertising at My Ad Center. Advertising privacy choices do not provide ad-free access. Where consent is required, advertising also depends on that consent.

CartSift serves US customers. If advertising is introduced, regional privacy notices and choices will be available where required. Contact support@cartsift.com for privacy requests.

First-party analytics

CartSift uses first-party analytics to understand how its shopping features are used. We collect daily totals for page views, broad search outcomes, product interactions, and retailer clicks. We don’t store raw IP addresses, account or visitor IDs, full URLs, or search text in analytics, and we don’t use analytics cookies. Analytics data stays on CartSift’s server and isn’t sent to third-party analytics providers. Daily totals are kept in the live analytics store for 30 days; backups and service records follow separate retention policies. We honor Global Privacy Control and Do Not Track signals by excluding those visits.

Enable JavaScript to review this browser’s analytics choice.

This choice stores only an on/off preference in this browser’s local storage. It does not create a visitor identifier or change advertising choices. Global Privacy Control and Do Not Track take priority.

7. Retention and deletion

We keep account information while needed to provide your account and requested features.

Delete your account yourself: Sign in and open Account security in Settings. Choose Delete account, enter your current CartSift password, and type DELETE to confirm. Deletion is permanent. Ordinary self-service deletion does not require a support request or staff approval. Accounts with an open checkout or subscription must close or resolve billing first; contact support if you cannot complete this through Your plan. Successful deletion removes your account and its associated account-owned information from the active account system and ends access through its sign-in sessions. A retention hold for a legal obligation, security investigation, or unresolved dispute may prevent deletion; contact support if the system reports a hold.

Deletion covers your account profile and settings, password and sign-in records, connected Google and Facebook identities, saved watches and alert preferences, and account-associated shopping history. Shared product and retailer information and other users' accounts remain available.

Google and Facebook sign-in users also use their CartSift password to confirm deletion. If you have not created one, verify your email and create a password in Settings first. If you cannot remember it, use password recovery. Disconnecting Google does not delete your CartSift account.

If you need help: If you cannot access your account, contact support@cartsift.com. We may need to verify account control before acting. For requests handled through support, our target is to complete deletion of covered account information within 30 days of receiving the request, subject to appropriate verification, applicable deadlines, and permitted exceptions. The request process tracks receipt, verification, deletion, and completion separately. If the result of a deletion attempt is unclear, contact support; a later sign-in error alone does not establish what happened. Do not send passwords, authentication codes, recovery codes, or payment-card details.

Routine cleanup within CartSift: Authentication-attempt records covered by the retention system become eligible for cleanup after 90 days. Eligible personal details in CartSift's completed automated-email jobs are minimized after the final delivery outcome and associated delivery activity have aged at least 30 days. Unresolved delivery activity and protected records can delay cleanup; minimal delivery, suppression, and duplicate-prevention records may remain. Closed privacy-request records become eligible for cleanup 24 months after completion. Retention holds can pause routine cleanup.

Information outside account deletion: Deleting your account does not automatically remove service-provider records, already-delivered emails, or backup copies. It does not delete your Google, Facebook, or retailer accounts, clear CartSift storage on every browser or device, or remove shared product-catalog information. An email already being transmitted may still arrive. You can clear local cookies and site data through each browser's settings. The account-deletion system does not establish an expiry period for these separate records.

Limited retained information: Some information may remain where reasonably necessary for legal obligations, an unresolved dispute, fraud or security investigations, request handling, or suppression of unwanted messages. Identifiers and email hashes can remain linkable to a person and are not necessarily anonymous. Contact support@cartsift.com with questions about information that remains after account deletion.

8. Your choices and requests

You can review and update available account details and preferences in Settings, manage saved shopping information, disconnect Google or Facebook, and request account deletion. Depending on applicable law and your circumstances, you may also have rights to request access, correction, deletion, a copy of information, or restrictions or objections to certain processing.

Send requests to support@cartsift.com. Tell us what you are requesting and provide the username or email address associated with your account. Include only information needed to identify the account and understand your request. Do not send passwords, authentication codes, or payment-card details. We may verify account control or authority to act before responding. We will handle requests according to applicable requirements. If you have a question about our response, reply through the same support channel.

9. Security and children

We use measures intended to protect account information, including protected connections, password hashing, access controls, and safeguards for sign-in. No method of transmission or storage is completely secure. Protect your credentials and report suspected account misuse to support.

CartSift is intended for people aged 13 and older. Children under 13 may not use the service, create an account, or submit personal information. If you are aged 13–17, by using CartSift you represent that you have permission from a parent or legal guardian. We rely on that representation and do not treat it as independently verified parental permission. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 has provided personal information, we will take steps to remove that information and close any associated account, as required by applicable law. Parents or guardians with concerns should contact support@cartsift.com.

10. Changes to this policy

The effective date appears at the top of this policy. Material changes will be communicated in a manner appropriate to the change and applicable requirements. When new consent is required, we will obtain it before the relevant processing begins. Earlier information will not be used in a materially inconsistent way without the necessary notice and permission.