Privacy policy
This page describes what mega-deal.org records. It was written by reading the code that does the recording, so it is specific and short rather than long and generic. If anything here does not match what the site does, that is a bug in one of the two — tell us and we will fix it.
Short version: we write two kinds of row about browsing, and neither one carries your name, your email or your IP address. We hold your email address only if you typed it into a form here. Google Analytics and the affiliate networks we link to collect their own data under their own policies, and we do not control that part.
Last updated
What we record ourselves
- Affiliate link clicks. When you click an outbound link to a program we list, we write one row with three things: the id of the listing you clicked, the full URL of the page you clicked from, and that page’s path. No name, no email, no IP address, no cookie id.
- Tool page views. When you open a tool page we write one row with the id of that listing and a two-letter country code guessed from your browser’s time zone setting. If the time zone is not one we recognise the row says "Unknown". We do not read your IP address for this.
- Newsletter sign-ups. If you type your email into the newsletter popup we store the address in lower case, the word "exit_intent_popup" as the source, a status of "active", and the time the welcome email went out. Nothing else. If the address is already on the list we do not add a second row and we do not send a second welcome email.
- Listing submissions. If you use the "Submit tool" form to ask for a paid listing we store what you typed: the tool name, its website, your contact email, the description, the category and the plan you chose. The form then sends you to Lemon Squeezy to pay. Card details are entered on their site under their policy, never on ours.
Those rows live in our database at Supabase. The welcome email is sent by a small server function there and delivered by Resend, from and replying to the address at the bottom of this page.
Google Analytics
Every page on this site loads Google Analytics 4, property G-YETW0KD9XG. It sets its own cookies and Google collects what Google Analytics collects by default, which includes an approximate location derived from your IP address and information about your browser and device. We see aggregate reports in Google’s dashboard. We do not get a list of people.
We add one event of our own, click_outbound_tool, when you click an affiliate link. It carries the name of the tool, the destination URL, the type of listing, and which part of the page the link sat in.
What Google then does with that is governed by Google’s own privacy policy. We cannot change it and we will not pretend otherwise.
Third parties that set cookies on our pages
- Affiliate networks and vendors. Every outbound link here goes to a program’s own site or to an affiliate network. Once you land there, that company sets its own cookies to record that we sent you. That is how we get paid and it is out of our hands.
- Travelpayouts. Every page loads a script from tp-em.com that turns outbound links to Travelpayouts partners into tracking links, and some travel tool pages embed a search or price widget served from tp.media. Both set Travelpayouts’ own cookies.
We do not currently show a cookie banner, and none of the above waits for consent before it loads. The only opt-out we can offer you today is your browser’s own tracking protection, an extension, or blocking those domains. We would rather write that plainly than imply a choice that is not there.
What we keep in your browser
- mega_deal_newsletter_dismissed_at — a timestamp written when you close or submit the newsletter popup, so it stays away for seven days.
- A Supabase session key, used only by the admin sign-in page. If you never sign in, nothing is written there.
- Cookies set by Google Analytics and by the third parties above, under their own names.
Clearing this site’s storage in your browser removes ours. It does not remove rows already written to our database, for the reason in the next section.
What we cannot do, and why
The click rows and the page-view rows carry no name, no email, no IP address and no cookie id. That means we cannot tell you which of them are yours and we cannot delete "your" rows on request, because we would have no way to find them. We think that is a better trade than attaching an identifier to every click so that it could be deleted later.
Your email address is the opposite case. It is an identifier, we hold it deliberately, and we can find it and delete it the moment you ask.
Seeing what we hold, correcting it, deleting it
Write to the address at the bottom of this page. It reaches a person, not a ticket queue.
- To be told what we hold against your email address, ask and we will tell you.
- To come off the newsletter, ask and we will delete the row. There is no one-click unsubscribe link in the welcome email yet, so asking us is the way to do it today.
- To correct or withdraw a listing submission you sent us, ask.
If you are in the EEA or the UK, the rights you are used to — access, correction, erasure, objection — are exercised through that address. Where a request is about the click and page-view rows, the section above applies: it is not that we refuse, it is that those rows cannot be traced back to a person.
Where the data sits
The database and the welcome-email function run on Supabase. Email delivery is Resend. The site is served by Netlify. Analytics goes to Google. Each of those is a separate company with its own privacy policy, and data they handle may be processed outside the country you are reading this from.
Children
This site is aimed at adults evaluating business software and affiliate programs. It is not directed at children and we do not knowingly collect anything from them.
Changes to this page
When what we collect changes, this page changes in the same release and the date at the top moves with it. We do not keep an archive of earlier versions.
Who to write to
Privacy questions, access requests and deletion requests all go to hello@mail.mega-deal.org