Privacy
Last updated 5 October 2026
Rockad is run by Bernie Solutions AB, which is responsible for the personal data described here. If you have a question about it, or want to use any of your rights below, contact Bernie Solutions AB (contact details are being added to this page).
The short version
- You can search Rockad without an account, and we don't record who searched.
- We count page views with Vercel Web Analytics, which sets no cookies and doesn't tell us who you are. There are no ads or other tracking scripts.
- We only set the cookies needed for signing in and for things you ask for, listed under Cookies below.
What we collect, and why
Searches. When you search, we keep what you typed, the filters you chose, the results and when it happened, but nothing about who you are: no account, IP address or session. We use it to show you results and to learn what people look for, so the catalog gets better. Our basis is our legitimate interest in running and improving the catalog. Please don't write personal details such as names or phone numbers in a search.
To match your search by meaning, its text is sent to OpenAI. To pick out conditions in it, such as a platform or a price, the text is sent to Anthropic. Neither gets anything about who you are.
Your account. You sign in with a link we email to you, so we keep your email address and your sign-in session. If you list a product, we keep which Makers you belong to, the Listings you submit, and the Listings you Star. We need this to give you the account, so our basis is our agreement with you (the terms). We email you about your Listings, for example when one has been approved.
Removal requests. If you ask us to remove a Listing Rockad wrote about your product, we keep your name, email address and message, and send them to the people who run Rockad so they can act on it. We keep the request as a record of what was decided. Our basis is our legitimate interest in handling the request and being able to show how we did.
Views and visits. We count when a Listing is viewed and when someone follows it to the product's own site, with only the Listing and the time.
Page views. Vercel Web Analytics counts which pages are visited, so we can see how the site is used. With each page view it gets the page's address, the site you came from, your rough location (country and city) and your browser, operating system and type of device. We remove the part of the address after the page, where your search would be, and the code in links we email you. Vercel tells visitors apart by a hash made from each request instead of a cookie, and drops it after 24 hours, so we only see totals. Our basis is our legitimate interest in knowing how the site is used.
AI assistants. AI assistants can search Rockad for their users. Those searches are kept like any other search. To limit how many requests one client makes, we keep a one-way hash of its IP address combined with the date, for about a minute.
Technical data. Our hosting provider handles your IP address to deliver the pages to you and may keep it in request logs for a short time.
Who else handles the data
We don't sell personal data. These providers handle it for us, on our behalf:
- Supabase: the database, sign-in and stored images. Its servers are in Stockholm, Sweden.
- Vercel (USA): hosting the site and counting page views.
- OpenAI (USA): the text of searches, and of Listings, to match them by meaning.
- Anthropic (USA): the text of searches, and the product pages Makers ask us to read when suggesting a Listing.
Where a provider handles data outside the EU and EEA, the transfer relies on the safeguards in that provider's data processing terms: the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
How long we keep it
- Your account, until you ask us to delete it.
- A Star, until you remove it.
- Removal requests, as a record of what was decided.
- Searches, views and visits, which say nothing about who you are, for as long as they help us improve the catalog.
- The hash used to limit AI assistants, about a minute.
- The hash Vercel uses to count visitors, 24 hours.
Your rights
You can ask for a copy of your personal data, have it corrected or deleted, have its use restricted, object to how we use it, and get it in a form you can take elsewhere. To do so, contact Bernie Solutions AB (contact details are being added to this page). If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se).
Cookies
Rockad only stores what is needed for things you ask for, so it doesn't ask for consent (the Swedish Electronic Communications Act, chapter 9, section 28). There are no analytics or advertising cookies.
sb-…-auth-token: keeps you signed in. Set when you sign in, removed when you sign out.sb-…-auth-token-code-verifier: completes signing in with the link we email you.flipit-star-intent: remembers which Listing you wanted to Star while you sign in. Lasts an hour.flipit-colour-mode(stored in your browser, not a cookie): the colour mode you chose. Stays until you clear it.
Changes
If we change how we handle personal data, we update this page and the date at the top. If a change matters for your account, we email you.