Privacy Policy
Effective date: October 15, 2026
This Privacy Policy explains how SavingsNote ("we", "us", "our") handles personal information when you visit savingsnote.com (the "Site"). You don't need an account to use the Site, and we never ask for your name, address or payment details.
1. Who we are
The Site is operated by SavingsNote, a sole proprietorship. For data protection law purposes (including the EU and UK GDPR), SavingsNote is the "controller" of the personal information described here.
- Privacy contact: privacy@savingsnote.com
2. Summary
- We collect basic technical and usage information, and a log of the store links you click.
- We use it to run the Site, confirm commissions with stores, and measure our advertising.
- We don't sell your personal information for money. Our use of Google and Microsoft advertising cookies may count as "sharing" or "targeted advertising" under some US state laws, and you can opt out.
- Visitors from the EEA, UK and Switzerland are asked for consent before analytics or advertising cookies are used.
- We honor the Global Privacy Control (GPC) browser signal.
3. Information we collect
Information collected automatically
- Device and connection data: IP address, browser type, operating system, device type, language and referring web address. We use your IP address to estimate your country. We don't store it in our click log, but our hosting provider may keep it briefly in security and error logs.
- Usage data: pages viewed, links clicked, time spent and similar interactions, collected through analytics tools where enabled.
- Outbound click log: when you click a link to a store (for example "Get Code" or "Get Deal"), our
server records a random click reference, the store and offer, the page you clicked from, the date and time, your
country, your device type (mobile, tablet or desktop), and any advertising identifiers in the address you arrived
on: the Google Ads click ID (
gclid,gbraid,wbraid), the Microsoft Advertising click ID (msclkid) and campaign tags (utm_parameters). - Cookies and similar technologies: see section 7 and our Cookie Policy.
Information you give us
- Emails: if you contact us, we receive your email address and whatever you choose to write.
- Privacy choices: your cookie and advertising choices, stored in your browser.
Information from third parties
- Affiliate networks and stores report back to us when a visit we referred leads to a purchase. These reports contain the click reference we sent, the order date, the order value or commission, and order status. They don't include your name or contact details.
We don't collect sensitive personal information (such as health, financial account or precise location data).
4. How we use information and our legal bases
| Purpose | Information used | Legal basis (EEA/UK/CH) |
|---|---|---|
| Operate, secure and fix the Site, and prevent fraud and abuse (including fake clicks) | Device and connection data, click log | Legitimate interests in running a secure, working website |
| Send you to the store you chose and get credited for the referral | Click log | Legitimate interests in earning commissions that fund the Site |
| Reconcile commissions with affiliate networks | Click log, network reports | Legitimate interests |
| Understand how the Site is used and improve it | Usage data, analytics cookies | Consent (where required); otherwise legitimate interests |
| Measure and optimize our search advertising, including reporting conversions to Google Ads and Microsoft Advertising | Advertising cookies, ad click IDs, network reports | Consent (where required); otherwise legitimate interests |
| Reply to your messages and requests | Email correspondence | Legitimate interests; legal obligation for rights requests |
| Comply with law and defend legal claims | Any of the above, as needed | Legal obligation; legitimate interests |
Where we rely on legitimate interests, we've weighed them against your rights, and you can object at any time (see section 10). We don't use your information for automated decisions that have legal or similarly significant effects on you, and we don't build profiles of individual shoppers.
5. Who we share information with
- Service providers who process data on our behalf under contract: Cloudflare, Inc. (hosting, content delivery, security and our click log database) and GitHub, Inc. (website code hosting, which contains no visitor data).
- Analytics and advertising partners: Google LLC (Google Analytics, Google Ads) and Microsoft Corporation (Microsoft Advertising). When enabled and permitted by your choices, their tags collect information directly from your browser. We also upload ad click IDs and conversion values to them so they can measure our ads. They may use this information as described in their own privacy policies: how Google uses information from sites that use its services and the Microsoft Privacy Statement.
- Affiliate networks and stores: when you click to a store, your browser goes to the store or its affiliate network (for example Impact, CJ, Rakuten Advertising, Awin or Partnerize), together with our random click reference. They receive your IP address and device data directly from your browser and may set their own cookies. Their handling of your information is governed by their privacy policies.
- Legal and safety: authorities, courts or advisers, where required by law or needed to protect rights, safety or property.
- Business transfers: a buyer or successor if the Site is sold or transferred. This policy will continue to apply to information collected under it.
6. Advertising, "sale" and "sharing"
We don't sell personal information for money. However, some US state privacy laws define "sale", "sharing" or "targeted advertising" broadly enough to include letting advertising partners such as Google and Microsoft collect online identifiers through cookies on our Site. In the past 12 months, we may have disclosed identifiers (cookie IDs, ad click IDs, IP address) and internet activity (pages viewed, clicks) to Google and Microsoft in this way.
You can opt out at any time on Your Privacy Choices. We also treat a Global Privacy Control signal from your browser as a valid opt-out. We have no actual knowledge of selling or sharing the personal information of anyone under 16.
7. Cookies and similar technologies
We use a small number of cookies and browser-storage items. Some are needed for the Site to work, and others are for analytics and advertising. Our Cookie Policy lists each one with its purpose and duration.
- EEA, UK and Switzerland: analytics and advertising cookies are off until you choose "Accept" in our banner.
- Everywhere else: they're on by default, and you can turn them off on Your Privacy Choices.
Browsers' "Do Not Track" setting has no agreed standard, so we don't respond to it. We do respond to Global Privacy Control, as described above.
8. How long we keep information
| Information | Retention |
|---|---|
| Outbound click log | 180 days, then automatically deleted |
| Hosting security and error logs | A few days (Cloudflare's standard log retention) |
| Google Analytics data | 14 months (the retention period set in Google Analytics) |
| Affiliate network reports (no direct identifiers) | As long as needed for accounting and tax records, typically up to 7 years |
| Emails and privacy requests | Up to 2 years after the matter is closed, or longer if required by law |
| Cookies and browser storage | See the Cookie Policy |
9. International transfers
We and our service providers process data in the United States and other countries. When personal information from the EEA, UK or Switzerland is transferred to countries without an adequacy decision, we rely on our providers' safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or the EU-US Data Privacy Framework and its UK and Swiss extensions where the provider is certified.
10. Your rights in the EEA, UK and Switzerland
You have the right to:
- access the personal information we hold about you and get a copy;
- have inaccurate information corrected;
- have information deleted;
- restrict how we use it;
- receive it in a portable format;
- object to processing based on legitimate interests;
- withdraw consent at any time on Your Privacy Choices. This doesn't affect processing already carried out;
- complain to your local data protection authority, such as your EU member state's authority, the UK Information Commissioner's Office (ico.org.uk) or Switzerland's FDPIC.
11. Your rights as a US resident
Depending on your state (including California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with comprehensive privacy laws), and to the extent those laws apply to us, you may have the right to:
- Know and access the personal information we've collected about you, including its categories, sources, purposes and recipients;
- Delete personal information we've collected from you;
- Correct inaccurate personal information;
- Data portability: receive a copy in a usable format;
- Opt out of the sale or sharing of personal information and of targeted advertising (see section 6);
- Appeal our decision on your request, by replying to our response. If we deny your appeal, you can contact your state Attorney General;
- Non-discrimination: exercising these rights won't change the coupons, prices or service you get.
Notice at collection (California)
| Category | Examples | Purposes | Sold or shared? | Retention |
|---|---|---|---|---|
| Identifiers | IP address, cookie IDs, ad click IDs, click reference | Site operations, security, commission tracking, ad measurement | Shared with Google and Microsoft for advertising (opt out available) | Section 8 |
| Internet or network activity | Pages viewed, links clicked, referring page | Analytics, ad measurement, commission tracking | Shared with Google and Microsoft for advertising (opt out available) | Section 8 |
| Approximate geolocation | Country, derived from IP address | Showing the right consent options, fraud prevention | No | Section 8 |
| Commercial information | Order value or commission reported by a store (no product details) | Commission reconciliation, ad measurement | Conversion values are shared with Google and Microsoft | Section 8 |
Sources: you and your browser, our analytics and advertising partners, and affiliate networks. We don't collect sensitive personal information.
12. How to make a request
Email privacy@savingsnote.com with the subject "Privacy request", and tell us what you'd like us to do. Because we don't hold names or emails for visitors, we may ask for information that helps us find your data, such as the approximate date and time of your visit and the device you used. If we can't reasonably link any data to you, we'll explain why.
- We respond within 30 days (EEA/UK/CH) or 45 days (US states), and may extend this where the law allows. If we do, we'll tell you.
- You can use an authorized agent. We may ask for proof that they're authorized to act for you.
- To opt out of advertising cookies you don't need to email us: just use Your Privacy Choices or turn on GPC.
13. Children
The Site is meant for adults and isn't directed at children. We don't knowingly collect personal information from children under 13, or under 16 in the EEA and UK. If you believe a child has given us personal information, contact us and we'll delete it.
14. Security
The Site is served only over encrypted connections (HTTPS). Our click log holds no names or contact details and can only be accessed with a secret key. No system is completely secure, but we take reasonable measures to protect the information we hold.
15. Changes to this policy
We'll post any changes on this page and update the effective date at the top. If a change is significant, we'll make that clear on the Site.
16. Contact
Questions about this policy or your information: privacy@savingsnote.com.