UdiWatchLegal
Privacy
We store the email you submit, a password hash, an API key, the UDI-DIs and SRNs you watch, the last public snapshot of each watch, and the audit trail of real diffs. If you set a webhook, we store that URL and a signing secret. When you subscribe, Stripe stores the card. We store the Stripe customer id and subscription id, not the card number.
The session lives in this browser until you sign out. Signing out revokes it on the server. The hosting logs (including Cloudflare) may record IP addresses for security. Rate limits keep a short-lived count of requests per IP and then drop it.
Cookies and analytics
We ask before we use analytics. Only if you click Accept do we load Google Analytics 4 (Google Ireland Ltd.). It sets the cookies _ga and _ga_* on udiwatch.com for up to 2 years, and tells us which pages are visited and which buttons are used, such as starting a trial or adding a watch. Google does not store full IP addresses for GA4. We do not use it for ads, and we do not send your email, your watch list contents, password-reset links or payment details. Search terms on the public directory may be sent; they are codes and names from the public register.
Your choice is kept in the cookie uw_consent for 6 months, on all udiwatch.com sites. Decline and nothing is sent to Google. Change your mind at any time with “Cookie settings” in the footer, or in the account menu in the app; declining also removes the _ga cookies.
The app keeps your session, theme and sidebar choice in this browser's local storage. Those are needed for the app to work and are not used for tracking.
We send mail for a watch change, and for a password reset when you ask. We do not sell the list.
Public device pages repeat fields that are already public in EUDAMED. They are not your private watch list.
You can delete the account in the app. That removes the users, watches, events, and keys, and cancels a Stripe subscription. You can also write to [email protected] from the account address.