Website Privacy Policy

Last updated: 28 October 2026

This notice applies to couponalert.app. For the app, cloud features, and browser extensions, see the app and extension privacy notice.

1. Controller

2. Delivering and protecting the website

The website is hosted by IONOS in Germany under a data-processing agreement. Your browser sends technical connection data to that infrastructure when requesting a page: in particular IP address, request time, requested address, browser/device request headers, and response information. A referring address may be included depending on your browser settings. The purpose is to deliver the website and identify technical failures or abuse. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in operating a secure, reliable public website. IONOS and our technical service providers receive the data needed for those tasks.

Connection data is needed to deliver the requested page. Operational logs are kept for troubleshooting and security for up to 30 days after creation; a specifically identified legal claim or legal obligation can require longer retention. This website does not require a user account.

3. Optional website analytics

We use optional PostHog analytics. We ask before loading PostHog or sending analytics events. Choosing “Reject analytics” leaves it off and does not reduce access to the website. No response is treated as consent. You can change your choice or withdraw consent at any time using “Analytics settings” in the footer.

If you agree, PostHog measures page visits and clicks on our download, information and pricing links, including the selected plan label. It receives technical browser/device and connection information, including your IP address when requests reach its servers. We use the EU collection endpoint. Cookieless measurement can derive pseudonymous visitor statistics from technical request data; “cookieless” does not mean no personal data is processed. We do not identify you by name or account, create person profiles, record sessions, or enable automatic capture of form inputs and page text. Query strings, URL fragments and referrers are excluded from analytics events.

The purpose is to understand interest in the website and improve its content. The legal basis is your consent, Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. Analytics events are retained for up to one year after collection; withdrawing consent stops future collection but does not itself erase events already collected. Contact us about erasure or access requests and we will assess what data can be associated with you.

PostHog processes this data on our behalf under a data-processing agreement, using its EU region. PostHog and its infrastructure providers receive the event data. EU collection does not by itself exclude processing or support access outside the EEA, including the United States. Applicable adequacy decisions or safeguards such as the standard contractual clauses in PostHog's processing agreement cover such transfers where applicable. You can request details and a copy of the safeguards from us. Further information is available in PostHog's privacy notice and data processing agreement.

4. Remembering your choice

We store only your analytics choice, its date, and the choice version in local browser storage. The choice expires after 180 days; on your next visit we remove the expired record and ask again. This necessary preference storage is based on Section 25(2)(2) TDDDG and Article 6(1)(f) GDPR, our interest in respecting and remembering your choice. It is separate from analytics and is not used as a visitor identifier. Clearing browser storage removes it. If storage is unavailable, your choice applies to the current page and analytics stays off on the next visit until you choose again.

5. Contact and external links

If you email us, we process your contact details and message to respond, using our email provider Webgo. Article 6(1)(b) GDPR applies to contractual or pre-contractual enquiries; otherwise Article 6(1)(f) applies to our interest in answering messages. We retain correspondence for up to 30 days after receipt, unless a specific legal obligation or legal claim requires longer retention. Please avoid sending sensitive information that is unnecessary for your enquiry.

Links to app stores, merchants, and other external sites take you to services with their own privacy practices. Those sites receive normal connection data when you open them. We do not sell your personal data or use it for automated decisions with legal or similarly significant effects.

Your choices and data-protection rights

Contact [email protected] to request access to your personal data, correction, erasure, restriction of processing, or a portable copy of data you provided where the GDPR conditions apply. We normally respond within one month. If a permitted extension is needed, we explain it within that month. Requests are normally free; we may ask for proportionate information to verify your identity.

You can withdraw consent at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing before withdrawal. Where processing relies on legitimate interests, you can object for reasons relating to your particular situation. If data were used for direct marketing, you could object to that use at any time without giving a reason.

You can complain to a supervisory authority, particularly in the EU country where you live or work or where an alleged infringement occurred. For a private business based in Bavaria, the competent authority is the Bavarian State Office for Data Protection Supervision (BayLDA). You do not have to contact us first.

Changes

We update this notice when processing changes. Where new consent is needed, updating this page does not replace asking for it.