Privacy notice

Who is responsible

Darling Dupes is operated by [ADD THE LEGAL NAME OF THE PERSON OR BUSINESS OPERATING THIS SITE] (“we”, “us”). Our privacy contact is [ADD A MONITORED PRIVACY EMAIL ADDRESS]. If EU GDPR Article 27 requires us to appoint an EU representative, we will add that representative’s name and contact details here before enabling EU member accounts.

What the site does

Darling Dupes helps people discover real products that may look similar to an item they describe, link to, or photograph. Web-search results are suggestions, not a guarantee of identical design or suitability. We only put products into the public verified catalogue after an administrator checks the live retailer listing and confirms the product and comparison. Retailers set their own prices, availability and terms.

Information we use

• Member account: your email address, account creation time, acceptance of the member terms, saved product IDs and the technical sign-in session. We do not store passwords. One-time sign-in tokens and session tokens are stored as cryptographic hashes; sign-in links expire after 15 minutes and member sessions expire after 30 days.
• Searches: the words you enter, a product URL you paste, your selected category, an approximate country market inferred from the request or browser language for localized product results and, if you choose image search, the product photo. The browser resizes/compresses images before upload. We do not save the uploaded photo as a member profile or catalogue image.
• Security: a short-lived, one-way hash derived from the email address and network address for sign-in rate-limiting. The raw network address is not written to the member database for this purpose.
• Affiliate-link clicks: product ID and time of click, so the site owner can understand which products are used. This record is not joined to your member account or email.

Why and on what basis

• We use your email and saved finds to provide the membership feature you request and perform the member terms.
• We process search text, links and chosen photos to return the search you request.
• We use limited security and product-click records for our legitimate interests in protecting the service, preventing abuse and understanding whether listings are useful. We keep those records limited and do not use them to build a profile of you.
• We do not use member account details for marketing. We do not currently run advertising or analytics trackers.

Search providers and image retention

When live search is enabled, search requests are sent from our server to SerpApi. For text and pasted-link searches, SerpApi receives the search terms and country/language settings for localized shopping results. For image searches, the chosen image is uploaded to SerpApi and used for Google Lens visual matches in that country market. We do not send your member email or member ID with a search. SerpApi’s current terms say search data is retained for up to 31 days by default; its ZeroTrace option says it avoids storing search parameters, files and search data. We will state which setting is enabled before public image search is switched on. SerpApi’s own terms and privacy information apply to its processing.

Member email and hosting

When member sign-in is enabled, Resend sends the one-time sign-in email. It receives your email address and the sign-in message. Resend’s current security information says account data is stored in the United States, even when an EU sending region is selected; its data-processing terms describe transfer safeguards including standard contractual clauses and the EU–US Data Privacy Framework. We will use Resend only for sign-in messages, with email open and click tracking disabled.

The website and its database run through the OpenAI Sites hosting integration on Cloudflare infrastructure. Those providers process site and database data to host and secure the service; their current privacy and data-processing terms also apply. We will not pass member identity to retailers or affiliate networks when recording a product click.

Affiliate and retailer links

Some product links may be approved affiliate links. If you follow one, the affiliate network and retailer may receive referral or device information through their link, and may use their own cookies or similar technologies. Other product links go directly to the retailer. Their privacy notices and shopping terms apply after you leave Darling Dupes. We record only the product and click time in our own click log; we do not add your member email or ID to the destination URL.

Where data is processed

Our service providers may process data outside the country where you live. Resend currently stores account data in the United States; SerpApi’s service and retention terms apply to searches. Before enabling these services for EU visitors, the operator must keep the providers’ current data-processing agreements, check the applicable international-transfer mechanism and document any required transfer assessment. Contact us at [ADD PRIVACY EMAIL] if you need details about the safeguards used for a particular service.

How long we keep information

• Member account and saved finds: until you delete the account. Account deletion removes the active member record, saved products and active sessions from the site database.
• Sign-in links: 15 minutes; expired links are deleted during sign-in maintenance.
• Member sessions: up to 30 days; session tokens are invalidated when you sign out or delete the account.
• Affiliate-link click records: up to 12 months.
• Search inputs and uploaded images: not kept in the Darling Dupes database after the response is returned. SerpApi’s default retention is described above; its setting must be checked before launch.
• Resend and hosting provider logs: retained under those providers’ terms and settings.

Your rights

Depending on the law that applies, you may ask for access, correction, deletion, restriction, portability or objection to processing, and you may complain to your local EU data-protection authority. If you are in the UK, you can complain to the Information Commissioner’s Office. Email [ADD PRIVACY EMAIL] to make a request. You can delete a member account and saved finds from your account page; legal exceptions may require us to keep limited records.

Children and sensitive images

Do not upload photographs containing identifiable people, private documents or sensitive personal information. Image search is intended for product images. The service is not designed for children, and we do not knowingly create member accounts for children.

Changes and contact

We will update this notice if the products, providers or purposes change and will tell members about material changes. Privacy contact: [ADD A MONITORED PRIVACY EMAIL ADDRESS]. The operator should complete the legal name, contact email, EU-representative assessment and provider-transfer review before member registration is enabled.