Effective date: September 14, 2026
Privacy Policy
haulkit is a free set of tools. It has no accounts: we don't ask for your name, email, or payment details, and purchases happen on buying agents' websites, not here.
The site is operated by an individual. For any privacy matter, contact [email protected] or @Sheo__8.
What we process and why
haulkit processes very little data. This table lists each type of processing, the legal basis for it, and how long data is kept.
| Data | Why (legal basis) | Retention |
|---|---|---|
| Analytics usage data (pages visited, device and browser info, approximate location, referral source, interaction events, and some tool inputs such as marketplace, product ID, price, weight and destination country) | Consent where consent is required (UK, EU/EEA, Switzerland); legitimate interest elsewhere, to understand how the tools are used so they can be improved | Google Analytics: 14 months by default; haulkit does not extend it |
| Country derived from your IP address, used to prefill shipping-estimate fields | Legitimate interest: making the tools convenient to use | Not stored by haulkit; kept temporarily in your browser for the session |
| IP addresses and standard access logs processed by Vercel (site hosting) and Cloudflare (API and images) | Legitimate interest: operating the service securely and reliably | Per Vercel and Cloudflare policies, typically days to a few weeks |
| Your haul list, saved hauls and preferences | Stored in your browser's localStorage; not processed by haulkit | Until you clear your browser data |
| Links and images submitted to the community image library | Necessary to operate the image-search feature you are using | Until removed, hidden, or on request |
Analytics (Google)
The site uses Google Analytics through Firebase to understand how it is used. When analytics is enabled, Google may receive information such as the pages you visit and their addresses, device and browser information, approximate location, referral source, and interaction events.
Some interaction events include information you enter into the tools, such as the marketplace, product ID, price, weight, and destination country of an item, and which agent links you click. On some pages, the page address may also contain a product link you entered.
Google may set analytics cookies such as _ga. We don't use Google Analytics data for advertising or remarketing. In jurisdictions where consent is required, analytics only starts after you accept the consent prompt; declining keeps it off entirely.
International transfers
Google, Cloudflare, and Vercel are US-based companies. Data they process may be transferred to and processed in the United States. Transfers from the EU/EEA, the UK, or Switzerland are covered by these providers' participation in the EU–US Data Privacy Framework where applicable, and otherwise by their standard contractual clauses.
Country
To prefill shipping estimates, we use your IP address to determine your country. haulkit does not store your IP address or your country on its servers; the country is used to prefill the form and may be kept temporarily in your browser for the current session. Vercel, our hosting provider, processes the IP address to serve the request and may retain standard access and function logs for a limited period under its own policies.
Local storage
Your haul list, saved hauls, and preferences are stored in your browser's localStorage. When you share a haul, the items are encoded into the share link itself rather than being stored by haulkit.
Community content
The image-search library stores links and product images that are used to match the items people search for. This content is stored to operate the feature. We remove content that is reported as infringing or inappropriate, and you can ask us to remove content you submitted by emailing [email protected].
Consent
In jurisdictions where consent is required for analytics cookies, analytics cookies are only set after you accept the consent prompt. You can withdraw consent by clearing cookies or site data for haulkit. You can also block analytics through your browser or other available privacy controls.
Third parties
Google processes analytics data. Cloudflare provides the API and image storage. Vercel hosts the site and may process standard server and security logs. When you click through to a buying agent, you are using that agent's website and its privacy policy applies there. Data processed by Google, Cloudflare, or Vercel is subject to their respective privacy and retention policies.
Affiliate links
Links to buying agents are affiliate links. We may earn a commission when you sign up or order through them. This does not change the price you pay.
Your rights and choices
Depending on where you live, you may have rights to request access to your personal data, correct it, delete it, restrict or object to its processing, and, where applicable, receive it in a portable form. We do not sell personal data.
To make a privacy request, email [email protected]. Clearing your browser's site data removes locally stored hauls and preferences, but it does not delete information that has already been sent to Google or retained in hosting or security logs.
If you are in the EU/EEA, the UK, or Switzerland and believe your data has been handled incorrectly, you also have the right to lodge a complaint with your local data-protection supervisory authority.
Security
The site is served over HTTPS and the API runs behind Cloudflare. If a data breach ever affects personal data, we will notify users through the site and, where required by law, the relevant authority.
Changes
If this policy changes, the updated version will be posted here with a new effective date.