Privacy Policy

Last updated: October 31, 2026

SellWinners is operated by Kokoriko, 6 rue d'Armaille, 75017 Paris, France. Kokoriko is the controller of the personal data described in this policy.

This policy explains what personal data SellWinners collects when you use our website, API and MCP server, and how we use it.

What we collect

• Account data: your name, email address and a securely hashed password. If you turn on two-step verification, we also keep what your authenticator app, passkey or backup codes need to check your codes; never your device's own secrets.
• About you and your business: after you sign up we ask for your country, what you are looking for, how you heard about us, your business and its revenue range, your team's size and your role, and you may add a phone number and a photo. We use them to set up your account and to understand who uses the Service, and our analytics tool receives the choices you pick, never your name, phone number or photo. Deleting your account deletes them; to have them deleted sooner, contact us.
• Billing data: handled by Stripe. We store your Stripe customer and subscription identifiers and plan status, never your full card details.
• Usage data: for each API and MCP request we log the time, endpoint or tool name, status code, response time and which of your keys or connected apps was used, to meter your plan and show you usage. We keep request logs for 30 days and daily totals for billing history.
• Network address: for requests to a public share link, which need no API key, we keep the IP address they come from (for IPv6, its /64 network) in our request logs to limit abuse, for 30 days by default and never more than 90.
• Recently viewed shops: when you open a shop in Explore on our website, we keep it on your account so the Shops page can list the shops you viewed last: the last 8, each for up to 90 days. Clear history on the Shops page empties the list at any time, and deleting your account deletes it.
• Saved views: when you save a view on a list page of Explore, we keep its name and the search it holds (its words, filters, sort and layout) on your account until you delete it in Manage views; deleting your account deletes them.
• Ad hook generator: when you write ad hooks, the niche, product and choices you enter are sent to the provider that runs the tool for us, so it can write them. We don't keep what you enter or the hooks you get; with your account we only keep how many you write each month, for your plan's allowance, and the time of each one you write today, for the fair-use limits.
• Technical data: the IP address used to sign up, used to prevent abuse. Your theme choice is saved on your account (or in your browser if you aren't signed in). When you open a page with a form protected by our security check, your IP address and browser details are also checked by Cloudflare (see below).

We don't log the contents of your search queries in your account history beyond the endpoint path.

Signing in with Google or Microsoft

If you choose Continue with Google or Continue with Microsoft, you sign in on Google's or Microsoft's own page and we ask only for basic sign-in information. We receive:

• your name and email address, and whether that provider has confirmed the address;
• an account identifier from that provider, so we recognise you the next time you sign in.

We don't receive your Google or Microsoft password, and we don't ask for access to your email, files, contacts, calendar or anything else in those accounts.

We use this information only to create your SellWinners account, sign you in and keep your account secure. It is stored with your account on our own sign-in servers and account database, protected as described under Security, and never sold, shared with others or used for advertising. Our use of information received from Google follows the Google API Services User Data Policy, including its Limited Use requirements.

We keep it for as long as your account exists. Deleting your account deletes it from our systems. You can also remove SellWinners's access at any time from your Google or Microsoft account settings; you can then still sign in with your email address (choose Forgot password to set a password if you never made one).

Security check on our forms (Cloudflare Turnstile)

To keep automated sign-ups and spam away, we run a security check, Cloudflare Turnstile from Cloudflare, Inc., on our contact form and on the pages where you sign up, log in or reset your password, including our sign-in pages. It usually finishes on its own; sometimes it asks you to tick a box. When the check runs, which is as soon as one of these pages opens, Turnstile receives:

• your IP address;
• technical details of your browser and connection, such as its user agent and how it connects (TLS characteristics);
• which page and website the check runs on.

When you send the form, our server also sends your IP address and the check's one-time result to Cloudflare to confirm it. Turnstile doesn't read what you type into the form.

We use the result only to decide whether to accept the form, on the basis of our legitimate interest in protecting the Service and its users from abuse. We don't keep the result, and we keep your IP address for about an hour to limit repeated attempts. Cloudflare uses these signals for us to tell people from automated programs and, as its own controller, to improve that detection; they aren't used for advertising or to follow you across websites. Cloudflare, Inc. is based in the United States; transfers there rely on the safeguards in Cloudflare's data processing terms. How Cloudflare handles and keeps this data is set out in the Cloudflare Turnstile Privacy Addendum.

The check needs JavaScript. If it can't run for you, email us at support@sellwinners.com.

How we use it

To provide and secure the Service, meter usage and enforce plan limits, process payments, send essential account emails (such as password resets and confirmations), respond to support requests and comply with legal obligations. We don't sell your personal data and we don't use it for advertising.

Live chat

Our website, including your dashboard, has a live chat so you can write to our support team. It is run for us by Satisfy (app.satisfy.chat). The chat loads from Satisfy when you open it or accept cookies, and then on each page while your conversation is going; until then nothing is sent to Satisfy. Once it has loaded, Satisfy receives your IP address, technical details of your browser and the address of the page you are on. When you write to us in the chat, Satisfy also receives your messages.

When you are signed in and your email address is confirmed, we tell the chat who you are: your name, email address and account id, with a signature from our server that shows it really is you, so our support team can see who is writing. Signed out, or before you confirm your email, you write as an anonymous visitor.

Once it has loaded, to keep your conversation going from page to page, the chat stores a cookie on this website, cw_conversation, and once it knows who you are, a second one, cw_user_Rs4eHduQAnEWyTMHRQuY1MUg. Signing out removes them, so the next person on a shared computer starts a new conversation. For the same reason, your browser's local storage keeps the account id the chat was last told about.

Affiliate program

People can recommend SellWinners through our affiliate program, with a link that carries their affiliate code. When you open such a link, we count one click for that code: we keep only the number of clicks per code and day, never your IP address or anything else about you. To count your click once, a scrambled form of your IP address stays in our server's memory for 30 minutes; it is never stored.

If you accept cookies, we keep a first-party cookie, sw_ref, with the affiliate's code and the day of the click, for 30 days, renewed when you open an affiliate's link again: the last link you opened counts. If you decline, or make no choice, nothing is stored in your browser for this: the code travels in the addresses of the pages you open during your visit, and while you sign in with Google or our sign-in service we keep it on our server with your sign-in, for an hour at most. Declining after accepting deletes the cookie.

When you sign up with an affiliate's code (from their link, the cookie, or typed in the Referred by field), we record which affiliate referred your account, and when you pay for a plan we record the commission they earn on it: its amount, its date and whether it was refunded. Affiliates see only counts and amounts, never your name, your email address or what you do on SellWinners. We do this on the basis of our legitimate interest in running our affiliate program and paying our affiliates, and keep the cookie only with your consent.

If you join the program as an affiliate, we keep your code, your clicks per day, the accounts you referred, your commissions and your payouts for as long as you are an affiliate, and the records of payouts as long as accounting law requires.

When you apply as an affiliate, we keep the social accounts you name and how you plan to promote us, to check them. To keep the program fair, we count the clicks on affiliate links that come from a paid ad, by the ad's own marker in the link, and we compare the network a referred account signs up from with the networks its affiliate uses, and the card it pays with with the affiliate's cards. Networks are kept only as scrambled codes that can't be turned back into an address, and nobody sees another person's network or card.

To pay you, we use Stripe, which pays into your bank account: Stripe collects your identity and bank details itself, under its own privacy policy, and we keep only the reference and status of your Stripe account.

Product analytics (PostHog)

To learn which parts of SellWinners people use, where they get stuck, what goes wrong and what makes them buy or leave, we use PostHog, from PostHog Inc. PostHog keeps this data for us in the European Union (Frankfurt, Germany).

• Before you choose, or if you decline cookies: our pages send PostHog the page you open, the page you came from, how far you scroll, the buttons and links you click, how fast the page loaded, errors it hit, and your browser, device type and screen size. PostHog may work out your approximate location (country and city) from your IP address. Nothing is stored in your browser for this but your choice, once you make it. To count visitors, PostHog turns your IP address and browser details into a code that changes every day and can't be turned back into them, so it can tell visits apart within a day but can't follow you from one day to the next.
• If you accept cookies: PostHog also keeps a cookie and local storage on this website, so your visits join up into sessions, and it notes where your pointer moves to draw maps of where people click and look (heatmaps). It records how pages behaved during your visit so we can replay it to find problems; everything you type, and API keys, links and codes shown on the page, are hidden in the recording, and on Explore all of the page's text is. It may show you a short survey, and it may show you one of two versions of a page to learn which works better (an A/B test). You can change your choice at any time under Cookie settings at the bottom of every page; declining after accepting deletes what PostHog kept in your browser.
• When you're signed in: the records carry your account number, and still no cookie is used unless you accept cookies. Your choice is kept in the browser you make it in, so another browser asks again. Our server also tells PostHog what happens on your account: signing up and in, confirming your email, your plan, purchases, renewals, cancellations (with the reason you give Stripe), failed payments, API keys created or revoked, AI assistants connected, and your use of the API, the MCP server and the web app (which feature, the result and how long it took; never what you searched for). Your PostHog profile shows your email address, name and plan, so we can reach you about what we learn. This doesn't depend on the cookie choice, as it stores nothing in your browser.

We don't run it on our staff pages, on pages reached through a one-time link, on sign-in hand-overs or on two-step verification pages, and our pages remove codes, tokens, email addresses, API keys and your searches and filters before anything is sent. If your browser sends a Do Not Track or Global Privacy Control signal, our pages send PostHog nothing. We use it on the basis of our legitimate interest in understanding and improving the Service, and cookies and recordings only with your consent. PostHog processes the data for us under its data processing agreement. Deleting your account deletes your PostHog profile and its records.

Sharing

We share data only with service providers that help us run the Service, under appropriate confidentiality terms: Stripe (payments), Cloudflare (website delivery and security, including the security check on our forms, and visitor statistics), Satisfy (the live chat, see above), PostHog (product analytics, see above) and our hosting and email providers. Cloudflare also uses limited technical signals from the security check to improve its detection of automated traffic, as described above. We may disclose data if required by law.

Connecting an AI assistant (ChatGPT, Claude and others)

You can connect an AI assistant such as ChatGPT or Claude to your account: the assistant opens our sign-in page and you choose whether to allow it. Nothing is shared until you select Allow.

• What we keep about a connection: the app's name and the address it returns to, as the app gave them to us; when you connected it; and when it last made a request. Its access and refresh tokens are stored only as hashes.
• What the assistant sends us: for each tool it uses, the tool's name and the arguments the assistant chose for it, such as a search term, a brand or a board name. We don't receive your conversation with the assistant, your files or your account with that provider. Each call is logged and metered like an API request, as described above; search terms are kept only as that section says.
• What we send back: the result of the tool: SellWinners data and, for the tools that read them, your own boards, favorites, tracked brands and usage. The assistant's provider (for example OpenAI for ChatGPT or Anthropic for Claude) receives these results and handles them under its own privacy policy.
• Your controls: disconnect an app at any time under Settings → MCP → Connected apps; its tokens stop working at once. Deleting your account deletes its connections. A connection lasts until you disconnect it, or ends by itself after 60 days without use.

Protection against automated scraping

To keep automated scraping off the website, the web app's pages sign their requests, and we check them for signs of automation: whether your browser reports that automation software controls it, hidden links and addresses that only programs open, and how fast, how regularly and how continuously the web app is used. The API and the MCP server, which are for automation, are not checked this way.

When a check finds something, we keep a record with your account: what was found, the timing figures behind it, the IP address and the browser's user agent of the request, and the page or address involved. We use it, on the basis of our legitimate interest in protecting the Service, its data and its customers, to decide whether to block the account under our Terms of Service, and so our staff can review it if you contact us. Records that led to no block are deleted after 90 days; a record that led to a block or a ban is kept for as long as the account exists.

Cookies

We use essential, first-party cookies to keep you signed in: one on this website and one on our sign-in pages. Once you open it, the live chat also keeps a cookie on this website for your conversation with us, and a second one once it knows who you are (see above). If you accept cookies, PostHog keeps a cookie and local storage on this website for product analytics; your choice, accept or decline, is remembered in local storage (see above). If you accept cookies after opening an affiliate's link, we keep the sw_ref cookie with the affiliate's code (see above). We don't use advertising or third-party tracking cookies. The security check described above may keep a small technical value in your browser that it needs to work; it isn't used for advertising or tracking. The playground can remember your API key in your browser's local storage if you choose to. When you use one of our free tools, we keep a first-party cookie, sw_ft, with a random id that counts your uses of the tools each day. Those uses are counted under a coded form of that id and of your IP address, kept for two days, never the id or the address themselves.

Your rights

You can access and update your account details in the dashboard and delete your account at any time from Settings, which deletes your profile, keys and usage history. Billing records required by law are kept by Stripe. Depending on where you live, you may have additional rights (such as access, correction, portability or objection). Contact us to exercise them.

Security

Passwords are stored only as salted, slow hashes, and API keys only as hashes. Sign-in can be protected with two-step verification, which is required for our staff. All requests are authenticated and rate-limited. Our sign-up, log-in, password reset and contact forms also run the security check described above.

Contact

Privacy questions: support@sellwinners.com.