Privacy Policy

1. Scope of This Policy

This Policy applies to information collected through the DealNest website itself — the pages you browse, the search and category tools, and the deal-alert email signup. It does not apply to:

• Third-party retailer websites you're taken to when you click "Get Deal" (each retailer has its own privacy policy governing what happens on their site);
• Any other website or app that may link to DealNest; or
• Information you provide directly to a retailer, payment processor, or shipping carrier once you leave DealNest to complete a purchase — we never see or handle that information.

DealNest is a deal-discovery and price-comparison resource. We do not sell products, process payments, ship goods, or create user accounts. Every purchase you make after clicking through from DealNest happens entirely on the retailer's own website, under their own terms and privacy practices.

2. Information We Collect

2.1 Information You Provide Directly

The only information we ask you to provide is your email address, and only if you choose to sign up for deal-alert emails through the signup popup or the "Never miss a deal again" form in the footer. We do not require an account, username, password, or any other personal information to browse, search, or use the Site.

If you contact us by email (for example, to submit a deal, ask a question, or make a privacy request), we will naturally receive whatever information you choose to include in that message — typically your email address, name if you provide one, and the content of your message.

2.2 Information Collected Automatically

Like most websites, our hosting and infrastructure providers automatically log certain technical information whenever you visit, including:

• Your IP address (used momentarily to estimate your general region — see Section 6 — and logged by our hosting provider for standard operational and security purposes);
• Browser type and version, device type, and operating system;
• Pages visited, time spent, referring page, and general usage patterns;
• Approximate geographic region (country/city level, derived from IP address — never precise GPS location, and we never ask your browser for location permission).

We do not currently run a dedicated analytics platform (such as Google Analytics) on the Site. The technical logging described above is the standard, baseline logging performed by our web hosting/CDN provider, Cloudflare, as part of delivering the Site to you and protecting it from abuse.

2.3 Information Stored in Your Browser

We use your browser's local storage and session storage (not traditional cookies — see Section 5) to remember a small amount of state, such as whether you've already subscribed to deal alerts or dismissed the signup popup. This information stays on your own device and is not transmitted to us as a separate data collection event.

2.4 Information We Do Not Collect

To be direct about what we don't do: DealNest does not collect payment card numbers, bank details, government ID numbers, passwords, precise GPS coordinates, biometric data, or any "special category" data (such as health, religious, or political information). We have no login system, so we never collect or store passwords of any kind.

3. How We Use Your Information

We use the limited information described above for the following purposes:

• To send deal-alert emails to subscribers, roughly every three days starting from the day you sign up, highlighting one deal from our current catalog that we think is worth checking out.
• To operate and improve the Site, including understanding which pages and features are used, diagnosing technical issues, and keeping the Site secure against abuse (spam, scraping, denial-of-service attempts, and similar).
• To personalize your experience in small ways — for example, showing a location banner that reflects your approximate region, or remembering that you've already seen or dismissed the deal-alert popup so we don't show it again unnecessarily.
• To respond to you if you email us with a question, deal submission, or privacy request.
• To comply with legal obligations where applicable, and to enforce our Terms & Policies.

We do not use your information for automated profiling that produces legal or similarly significant effects, and we do not use your email address for anything beyond the deal-alert purpose you signed up for.

4. Our Legal Basis for Processing

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar requirements, we rely on the following legal bases to process your information:

• Consent — for sending you deal-alert emails, which is an opt-in action you take yourself by submitting your email address. You can withdraw this consent at any time (see Section 13).
• Legitimate interests — for baseline technical logging, fraud/abuse prevention, and understanding aggregate Site usage, where those interests are not outweighed by your rights and interests.
• Legal obligation — where we are required to retain or disclose information to comply with applicable law.

5. Cookies, Local Storage, and Similar Technologies

DealNest does not currently set traditional first-party tracking cookies of our own. Instead, we use two standard browser storage mechanisms:

• localStorage — used to remember, on your own device only, whether you've subscribed to deal alerts or dismissed the signup popup, so the Site can avoid showing it to you repeatedly. This persists until you clear your browser data.
• sessionStorage — used for short-lived state that only needs to last for your current browsing session and is automatically cleared when you close your browser tab.

Neither mechanism is used for cross-site tracking, advertising, or building a profile about you. You can clear both at any time through your browser's settings (typically under "Clear browsing data" or "Site settings"), and doing so will simply cause the Site to treat you as a first-time visitor again.

Our hosting provider (Cloudflare) and the third-party retailers you click through to may separately set their own cookies, subject to their own policies — see Sections 7 and 8.

6. Location and IP-Based Detection

To show you a relevant "Showing deals for [region]" message, the Site makes a lookup call to a third-party IP geolocation service (currently ipapi.co) using your IP address. This returns an approximate country and city — never a precise GPS location, and never anything requested via your browser's location permission prompt, because we don't use that API at all.

This lookup happens directly between your browser and the geolocation provider each time you load the homepage; we do not store the result on our servers, and we do not retain a history of your locations over time.

7. Affiliate Links and Third-Party Retailers

DealNest participates in, or may in the future participate in, affiliate marketing programs. This means that when you click a "Get Deal" button and are taken to a retailer's website, the link may contain a tracking identifier that lets the retailer or their affiliate network know the referral came from DealNest. If you make a purchase, we may earn a commission at no additional cost to you. Every deal listing includes a disclosure that we may receive a commission upon purchase.

Once you leave DealNest and land on a retailer's website, that retailer's own privacy policy and cookie practices govern any data collected about you from that point forward — including any cookies they or their affiliate network set to track the referral for commission purposes. We do not receive or have access to the personal information you provide to the retailer (such as your name, shipping address, or payment details) during checkout.

We encourage you to review the privacy policy of any retailer before making a purchase.

8. Third-Party Service Providers

We rely on a small number of third-party service providers to operate the Site. Each processes a limited slice of data on our behalf, strictly for the purpose described:

• Cloudflare Pages — hosts and serves the Site's static files, and provides standard CDN/security logging (IP address, request logs) as part of delivering the Site and protecting it from abuse.
• Supabase — stores the list of email addresses that have subscribed to deal alerts, in a database secured so that the public-facing Site can only add a new subscriber, never read the existing list back.
• Resend — a transactional email provider used to actually send the deal-alert emails to subscribers.
• ipapi.co — provides the approximate, IP-based location lookup described in Section 6.
• GitHub — hosts the Site's source code and the automation that sends scheduled deal-alert emails. GitHub does not receive your email address directly through normal operation of the Site.

Each of these providers has its own privacy policy governing how it handles data on our behalf, and we've chosen providers with a data-processing role limited to the specific function described above.

9. How We Share Information

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share information only in the following limited circumstances:

• With the service providers listed in Section 8, solely to operate the Site and send the emails you've signed up for.
• With affiliate networks and retailers, in the limited, indirect sense described in Section 7 — a click-tracking identifier in the outbound link, not a direct transfer of your personal information by us.
• If required by law, such as in response to a valid subpoena, court order, or other legal process, or where we believe in good faith that disclosure is necessary to protect the rights, property, or safety of DealNest, our users, or the public.
• In connection with a business transfer, such as a merger, acquisition, or sale of assets — in which case we would ensure any successor is bound by commitments consistent with this Policy, and would notify subscribers of any material change.

10. Data Retention

We retain your email address for as long as you remain subscribed to deal alerts, or until you ask us to delete it, whichever comes first. If you unsubscribe or request deletion, we remove your email address from our subscriber database; it is not retained in backups indefinitely beyond what's operationally necessary to keep the service running reliably.

Standard technical logs held by our hosting provider (Section 2.2) are retained only for the duration typical of that provider's operational and security needs, and are not something DealNest itself separately stores or reviews on a per-user basis.

11. Data Security

We take reasonable, industry-standard steps to protect the limited information we collect. Notably:

• Our subscriber database uses row-level security rules so that the public-facing Site can only insert a new email address — it has no ability to read, list, update, or export the existing subscriber list. Only a separate, private credential — stored as an encrypted secret and never exposed in the Site's code — can read the full list, and that credential is used exclusively by the automated process that sends deal-alert emails.
• All traffic between your browser and the Site is encrypted in transit via HTTPS.
• We do not store passwords, because the Site has no login system.

That said, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. If we become aware of a security incident affecting your personal information, we will take reasonable steps to notify affected users and any relevant authorities as required by applicable law.

12. Your Privacy Rights and Choices

Regardless of where you live, you can exercise the following choices by emailing us at muhammad.amin2000@icloud.com:

• Access — ask what personal information (if any) we hold about you.
• Correction — ask us to correct inaccurate information, such as an email address with a typo.
• Deletion — ask us to delete your email address from our subscriber list. You can also do this instantly yourself by using the unsubscribe process described in Section 13.
• Objection / restriction — object to, or ask us to restrict, a particular use of your information.
• Portability — request a copy of your information in a portable format, where applicable.

We will respond to verified requests within a reasonable timeframe, and in any event within the timeframe required by applicable law (for example, 30 days under many EEA/UK frameworks, or 45 days under the CCPA). Because we collect so little information in the first place, most requests are simple for us to fulfill quickly.

13. Email Communications and Unsubscribing

Signing up for deal alerts is entirely optional and opt-in — we never add an email address to the list without you actively submitting it through the signup form. Deal-alert emails are sent roughly once every three days, starting on the day you sign up.

Every deal-alert email will include a way to stop receiving future messages. You may also unsubscribe at any time by emailing muhammad.amin2000@icloud.com with "unsubscribe" and the email address you'd like removed, and we will process it promptly.

14. Children's Privacy

DealNest is not directed to children under the age of 13 (or the equivalent minimum age in your jurisdiction), and we do not knowingly collect personal information from children. If you believe a child has provided us with an email address, please contact us at muhammad.amin2000@icloud.com and we will promptly delete it.

15. International Users and Data Transfers

DealNest is operated from the United States, and our service providers (Section 8) may process and store data on servers located in the United States or other countries. If you are accessing the Site from outside the United States, you understand that your information may be transferred to, stored, and processed in a country that may have different data protection laws than your own jurisdiction. Where required, we rely on appropriate safeguards (such as standard contractual clauses used by our providers) to protect information transferred internationally.

16. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Because there is currently no common industry standard for how to interpret DNT signals, DealNest does not currently respond differently to browsers with DNT enabled. As described throughout this Policy, we already minimize tracking by design — no advertising cookies, no cross-site profiling, and no analytics beyond baseline hosting logs.

17. Notice to California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), gives you specific rights, including the right to know what personal information we collect, use, disclose, and sell (we do not sell personal information); the right to request deletion; the right to correct inaccurate information; and the right to non-discrimination for exercising these rights. You can exercise any of these rights using the contact details in Section 12 or Section 20. We have not sold or shared (as those terms are defined under the CCPA) personal information in the preceding twelve months.

18. Notice to EEA, UK, and Swiss Users

If you are located in the European Economic Area, United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) or the UK GDPR may apply to our processing of your personal data. Section 4 describes the legal bases we rely on. You have the right to lodge a complaint with your local data protection supervisory authority if you believe our processing of your information does not comply with applicable law — though we'd genuinely appreciate the chance to address any concern directly first, at the contact details below.

19. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Site's functionality, or legal requirements. When we make material changes, we will update the "Last updated" date at the top of this page, and — where the change is significant — we may also note it prominently on the Site or notify active email subscribers. We encourage you to review this page periodically.

20. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how DealNest handles your information, please reach out — we're a small, independently run project and genuinely read every message:

See also our Terms & Policies for the rules governing use of the Site.