Privacy Policy
What we collect, why we collect it, how long we keep it, and how to exercise your rights.
This version reflects how the site actually handles data today. The final wording is still awaiting review by the site operator — we would rather show you an accurate draft flagged as pending than a confident-looking document that has not been checked.
Information we collect
If you only browse, we store a session cookie and the cookie-consent choice you made. If you create an account, we store your email address, a password hash, and the items you save, the stores you follow, the alerts you create and your email preferences. We do not ask for your name, address or phone number, and there is nothing on this site that requires them.
How we use information
To operate your account and the features you asked for: keeping you signed in, remembering saved items and alerts, sending the emails you requested, and answering privacy requests you submit.
Cookies and similar technologies
We use a small number of essential cookies, plus optional categories you control. The full list, with purpose and lifetime, is on our Cookie Policy page.
Analytics
Analytics is an optional category and is off unless you turn it on. No analytics script is loaded before you allow it.
Affiliate tracking
When you click an offer, we record the click on our servers — offer, merchant, timestamp, page type, referrer and campaign parameters — and forward you to the merchant. Unlike analytics, this server-side record is what makes the site sustainable, so it is treated as part of the affiliate category rather than as an optional extra. We do not store your full IP address: we keep only a salted, irreversible hash, used for abuse prevention. Server-side click records are not linked to your account identity.
Advertising
Advertising and retargeting pixels are an optional category and are off unless you turn them on. We currently load none.
Email communications
Two kinds of email exist and they are controlled separately. Account emails — address verification, password resets, security notices and alerts you asked for — are sent because you requested them or because the account needs them; they cannot be switched off with a marketing unsubscribe. Marketing emails — the weekly deals digest and new buying guides — are optional, off unless you opt in, and every one of them carries a one-click unsubscribe link.
Third-party services
We use a small number of service providers to run the site: a web server, a database, and optionally an email delivery provider. Any measurement or advertising provider is listed on the Cookie Policy page with its category and whether consent is required.
Data retention
Account data is kept while your account exists and is deleted or anonymised when you delete your account. Consent records are kept for longer, because we have to be able to show what you agreed to and when — after account deletion they contain no email address or other identifier. Export files expire automatically. Logs and temporary data are kept for a limited period and are not kept indefinitely.
Data security
Passwords are stored only as one-way hashes. Traffic is served over HTTPS. Sessions are encrypted, expire, and are rotated when you sign in or change your password. Access to personal data is restricted to what is needed to operate the site.
Data sharing
We do not sell personal data. We share data only with the service providers needed to run the site, and only what they need. Click records that we pass to affiliate networks identify the visit, not you.
Your rights
You can see and change your data from your account. You can export it, correct it, or delete the account entirely. The Privacy centre in your account is the front door for all of these requests.
Account deletion
Deleting your account removes your saved items, followed stores, alerts and email preferences, clears your login credentials, and anonymises your email address. A minimal record that the account existed and that you consented to things is kept in anonymised form, because we need to be able to demonstrate compliance.
Data requests
You can submit a data access, correction or export request from your account. Export files are generated on request and are available through a private, time-limited link.
International data transfers
Our servers are located in one region. If we later use a provider that stores data elsewhere, we will name it here and on the Cookie Policy page.
Children's privacy
This site is not directed at children, and accounts are not intended for them. If you believe a child has created an account, contact us and we will remove it.
Changes to this policy
The version number and effective date are shown at the top of this page. If we change the policy in a way that affects your choices, we will ask you to review it again.
Contact
Use the privacy request form in your account, or the contact details in the site footer.
Published version 1.0. Cookie Policy · Terms of Use · Affiliate Disclosure
Want your data or your account removed? Go to the privacy centre.