Effective date: 5 July 2026
1. Who we are
Witch One ("Witch One", "we", "us") is a UAE-focused product price-comparison service operated by Witch One. It lets you paste a product link and see how that product — and close alternatives — are priced and reviewed across supported UAE online stores. For anything in this policy, contact Witchone.app@gmail.com.
We process personal data in line with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL") and, where it applies to visitors from other regions, other applicable data-protection laws.
2. What we collect
- Waitlist email. If you join the waitlist we store your email address, when you joined, the page you joined from, and the referring site (if any).
- Links you compare. The product URLs you submit and the resulting comparison (titles, prices, ratings fetched from public store pages) are stored so the result page can be shared and reloaded. Comparison pages are public to anyone with the link. Please don't paste links that contain personal information.
- Security and abuse-prevention data. To rate-limit expensive lookups we store a truncated one-way hash of your IP address together with a request counter. The hash cannot be reversed into your IP, and we do not store raw IP addresses in our database.
- Usage analytics. We use Vercel Analytics to understand aggregate usage (pages viewed, feature events such as a comparison starting or finishing). It does not use advertising cookies and does not track you across other sites.
- Advertising data (cookies). When advertising is enabled on the site, Google and its partners set cookies as described in section 4.
We do not knowingly collect sensitive personal data, and the service is not directed at children under 18.
3. Why we use it (purposes and legal bases)
- To run the service — fetching comparisons you request, caching results, showing when prices were last checked (performance of the service you asked for).
- To contact the waitlist — launch and product updates you signed up for (your consent; withdraw any time via the unsubscribe link or by emailing us).
- To keep the service safe and affordable — rate limiting, abuse prevention, debugging (our legitimate interest in protecting the service).
- To fund the service with advertising — showing ads via Google AdSense (consent where required by law, e.g. for visitors from the EEA/UK, via the consent message described below).
4. Advertising and cookies (Google AdSense)
Witch One is free to use and is supported by advertising. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet.
- You may opt out of personalised advertising by visiting Google Ads Settings or www.aboutads.info/choices.
- You can read how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites.
- If you visit from the European Economic Area, the UK, or Switzerland, you will see a consent message (a Google-certified consent tool) before personalised ads are served, and you can refuse or withdraw consent there at any time.
Advertising never influences results. Ads are visually separate from comparisons, and advertisers cannot pay to change the Witch Score, the ranking, or the verdict.
5. Who we share data with
We do not sell personal data. We share it only with the service providers that run the product, under contracts limiting what they may do with it:
- Supabase — our database (waitlist, saved comparisons, security counters).
- Vercel — hosting, delivery, and privacy-friendly analytics.
- Data-collection and AI providers (e.g. Apify and the AI service that summarises reviews) — these process the product URLs, titles, prices, and public review text needed to build a comparison. They are not sent your email or identity.
- Google — advertising, as described in section 4.
We may also disclose information if required by law or to protect our rights, users, or the public.
6. International transfers
Our providers may store or process data outside the UAE. Where that happens, we rely on the safeguards permitted under the PDPL (including contractual protections with those providers) to keep your data protected to a comparable standard.
7. How long we keep data
- Waitlist emails — until you unsubscribe or ask us to delete them.
- Comparison pages — kept so shared links keep working; the price data on them is timestamped and can be refreshed.
- Security counters (hashed IPs) — short-lived by design and routinely pruned.
8. Your rights
Under the PDPL you may request access to the personal data we hold about you, ask us to correct or delete it, object to or restrict certain processing, withdraw consent, and request a copy in a portable format. Write to Witchone.app@gmail.com and we will respond within the timelines the law requires. You also have the right to complain to the UAE Data Office if you believe your data has been mishandled.
9. Security
Data is encrypted in transit, database access is restricted to server-side service credentials, and we minimise what we store in the first place (for example, hashing IPs instead of storing them). No online service can promise perfect security, but we design for the least data necessary.
10. Changes to this policy
If we change this policy we will update the effective date above, and for material changes we will post a notice on the site. Continued use after a change means you accept the updated policy.
11. Contact
Witch One · United Arab Emirates · Witchone.app@gmail.com