DealFinder

Privacy policy

This policy is a starting draft and must be reviewed by a qualified data protection advisor before launch. Replace the controller details below with your registered entity.

Who we are

DealFinder (the “controller”) — registered address to be completed. Contact: [email protected].

What we collect

  • Account — your email address and a hashed password. We never store your password itself.
  • Your activity in the product — saved searches, notification preferences, the decisions and sale prices you choose to record, and your personal capital ledger.
  • Billing — a Stripe customer reference and subscription status. Card details go directly to Stripe and never reach our servers.
  • Optional analytics — Google Analytics 4 records sanitized page and navigation paths and general technical usage data, but only after you accept optional analytics.

What we do not collect

We do not collect information about the sellers of the listings we show you, and we do not pass any seller's personal details to you. Deal data stored on your behalf references listings only by an opaque identifier.

Why we process it, and on what basis

  • Performing our contract with you — running your account, showing deals, storing your saved searches and results, taking payment.
  • Legitimate interests — keeping the service secure and preventing abuse.
  • Consent — optional analytics cookies only. You can withdraw consent at any time by clearing your browser storage for this site.
  • Legal obligation — retaining invoices for statutory accounting periods.

Cookies

Our session cookie is strictly necessary — without it you cannot stay signed in — so it is set without consent and is HttpOnly, meaning no script can read it. Google Analytics 4 and its analytics cookies load only after you accept them. We send the site origin and a sanitized pathname without the query string or hash. We do not intentionally send search terms, account identity, billing information, listing or seller information, or saved-search contents to Google. Activation also requires Enhanced Measurement to be disabled for our GA4 web stream, because that Google-side feature can send automatic navigation events that this application cannot sanitize.

To withdraw analytics consent, clear the site data/browser storage for dealfindr.net, reload the page, and choose “Reject optional” when the banner returns. Clearing all site data also removes the necessary session cookie, so you will need to sign in again.

Who we share it with

Stripe (payments), Google (Google Analytics 4), and our hosting provider act as providers/processors on our behalf. We do not sell your data and we do not share it with advertisers. Advertising storage and signals are disabled in our analytics configuration.

How long we keep it

For as long as your account exists. When you delete your account, your account, saved searches, notification preferences, recorded results and ledger are erased immediately. Invoice records are retained only where law requires it.

Your rights

  • Access and portability — download everything we hold about you as JSON from your account page, at any time.
  • Erasure — delete your account from the same page; it takes effect immediately.
  • Rectification — correct your details, or contact us.
  • Objection and restriction — contact us.
  • Complaint — you may lodge one with your national data protection authority; in Belgium, the Gegevensbeschermingsautoriteit / Autorité de protection des données.

Automated decision-making

We score listings, never people. No decision with legal or similarly significant effects is made about you automatically.

Transfers outside the EEA

Where a processor operates outside the EEA, transfers rely on the European Commission's standard contractual clauses.