Privacy policy

What we process

• Your searches - the term you search for (a store name) is used only to return your results and to build the public code base. We never link it to your identity.
• Codes you submit - the code, description and optional nickname you send through the “Add a code” form become public on the site, by the nature of the service. Don't put personal data in those fields.
• Votes (“Worked” / “Invalid”) - stored only as aggregate counts, with no link to you.
• Your IP address - processed technically and transiently for abuse prevention (rate limiting), for country detection (so we search your country's stores) and in the infrastructure's standard security logs. We build no profiles from it.
• Aggregate statistics - we use Vercel Analytics and PostHog (in "cookieless" mode), cookie-less services with no identifiers that track you from one day to the next: we see how many visitors we have, how long they stay, which codes get copied and which stores get searched - not who you are.

What we store in your browser

Only two preferences you choose explicitly, in localStorage: the language (RO/EN) and the theme (light/dark). We set no cookies - which is why you see no consent banner.

Third-party services

• Vercel and Neon (hosting, and the database, in Frankfurt, EU) - the infrastructure the site runs on.
• Google - store logos (favicons) load from Google's public service; your browser makes that request directly. It's the only third party your browser contacts - everything below is called exclusively from our servers.
• Serper and OpenAI - process public snippets from the internet to find and validate codes. We send them nothing about you, only the name of the store you searched.
• YouTube (Google), TikTok, Meta Platforms (Facebook/Instagram), Exa, Reddit and the public Arctic Shift archive - through their APIs we read the text of the public posts where codes appear, so we can verify each code's source. These services receive only the addresses of the public posts being verified - nothing about you.

Your rights (GDPR)

You have the right of access, rectification, erasure, restriction, portability and objection. In practice, the only data that could be associated with you is what you submit voluntarily through the form (e.g. a nickname). Write to us and we'll delete it: [email protected]. You can also lodge a complaint with the Romanian supervisory authority, ANSPDCP (dataprotection.ro).

Changes

If the service changes (for example, we add affiliate links or other tools that would require consent), this page is updated beforehand, and any consent mechanisms required by law will appear then.