Privacy policy

Everything here works without an account. Search, build, check a shop’s quote, read the guides — not one page asks you to sign in. If you never sign in, we hold nothing that points at you.

There is an optional sign-in, by a link sent to your email. No passwords exist in this system at all, hashed or otherwise. If you use it we store your address and a list of the devices you are signed in on, set out below.

Either way, we have installed no user-tracking tools of any kind.

This is the whole of it. Your email address, lower-cased, which is both your account name and where the sign-in link goes; and one row per device you are signed in on, holding when it was signed in, when it was last used, when it expires, and the line your browser sends saying which browser and operating system it is — which we show back to you as “Chrome · Windows”. We never ask for a name, a phone number, an address or payment details, and there is nowhere to enter them.

The token in your cookie is not stored in our database. What is stored is its SHA-256 hash, so a copy of our database would let nobody sign in as you. The same is true of the sign-in links we email.

You can see every device you are currently signed in on, and end any or all of them, on the account page.

A sign-in link lasts fifteen minutes, and its row is deleted a day after it expires — including when you asked for a link and never clicked it, so that this table does not become a list of people who once considered signing up.

Expired sessions are deleted too. A session lasts thirty days from its last use, and never more than ninety days from the day it was created, however often it is used.

Your address and the account itself stay until you ask us to remove them. There is no delete-account button on the site yet; ask through the contact page and we will.

Sign-in emails are sent through Resend, which has to see your address in order to deliver the message.

If you choose Continue with Google, your browser is sent to Google to prove who you are, which means Google knows you are signing in to this site. Two things come back to us and nothing else: your email address and a Google account id — a code that stands for you and does not change even if you change your email address. We keep that code so the same Google account finds its way back to the same PartLocks account. We do not ask for your name or your profile picture, and Google does not send them. If the email address Google gives us matches an account you already made with an emailed link, the two are joined rather than a second account being created.

Apart from Resend and Google, no outside service receives anything from us. The fonts are served from our own server, so your browser makes no request to Google when an ordinary page loads — only when you press the Google sign-in button.

• No passwords of any kind — the system does not use them.
• No names, phone numbers, postal addresses or payment details.
• No record of which parts you viewed, what you searched for, or what you built — not even while signed in.
• No Google Analytics, no Facebook Pixel, and no behavioural or cross-site tracking. Visitors are counted with Umami, which sets no cookie, stores no per-visitor identifier, and reports only totals — pages opened, country, device type and referring site. Added on 24 September 2026 because Shopee’s API application asks for a monthly visitor figure and we had none.
• We do not sell or trade visitor data with third parties.

We store the theme you picked (Blueprint or Daylight) in your browser’s localStorage, so the page does not flash the wrong colours the next time you open it. That value never leaves your device, is never sent to our server, and you can remove it by clearing site data in your browser.

The build you are assembling on the build page is held in that page’s own URL, so you can copy the link to carry on later or send it to someone else. We do not save your build in any database.

There is exactly one cookie — the one that says you are signed in — and it is set only if you sign in. No advertising cookie, no analytics cookie. That is why this site has no cookie consent banner to dismiss: there is nothing to ask about.

The web server keeps ordinary access logs: IP address, timestamp, the page requested, any query passed through the search page’s URL, and the browser type. These logs exist to keep the site running and to debug it. They are not used to build user profiles and are not linked to individuals.

This site is operated by TERNARY THAILAND, which is the data controller for the purposes of this policy. To exercise any of the rights set out below, or to ask anything about your personal data, use these details.

Registration number

3160100074239

Address

95/34 Moo 1, Ratchaphruek-345 Road, Lam Pho, Bang Bua Thong, Nonthaburi 11110, Thailand

Phone

(66) 02-474-0326

The report an error / contact page has no form that stores anything — it links out to external channels such as LINE or email. If you write to us, we see only what you send through that channel, and we keep it only as long as we need to reply and to fix what was wrong. Those external channels have privacy policies of their own.

Right now the site carries no affiliate links and is not connected to shop prices. We are waiting on affiliate API approval from Thai e-commerce platforms. The suggested prices on product pages come from a distributor’s own file — nothing about you is sent anywhere to produce them.

Once that is connected, links to products will carry an affiliate code so the platform knows the buyer came from PartLocks. Following such a link takes you to that platform’s own site, which may set cookies and collect data under its own policy. We receive no personal data about buyers from the platform, and commission never affects the order prices appear in — as set out in how we rank prices.

If you have never signed in, we hold no personal data about you, so there is nothing to request access to or delete.

If you have: all we hold is your email address and your list of sessions. You can view and end sessions yourself at any time on the account page. For a copy of what we hold, or to delete the account entirely, write to us through the contact page from the address you registered.

If we ever start collecting more — a price-drop alert, say — we will update this page before switching it on, and date the change.

20 September 2026: Google sign-in was added and went live the same day. This page used to say we would update it before switching that on. We switched it on first and updated the page a few hours later, which is not what it said, so the discrepancy is recorded here rather than the sentence being quietly deleted.

14 September 2026: sign-in by emailed link was added. It went live on 13 September and this page was a day behind it.