Privacy Policy

Last updated: 19 September 2026

1. What we collect

If you create an account, we store:

• your email address and a salted hash of your password (never the password itself);
• optional profile details you choose to give us (display name, verticals, traffic types);
• your watchlist, followed networks, and any reviews or payment-proof images you submit;
• session records so you stay logged in.

For all visitors we process IP addresses transiently for rate limiting and abuse prevention. Page analytics are collected by our own self-hosted, first-party Umami instance — pages viewed, referrer, browser and coarse location. We also record a small number of product actions, such as opening the offer finder, submitting signup, saving research, following a network, and using a calculator. We also collect browser performance timings for page loading, interaction latency, and layout stability. The page/event analytics stream excludes authentication tokens, passwords, raw search text, and private calculator values. We separately store typed public search terms with their result counts, without attaching them to an account id, so we can find gaps in the offer catalog. When you are signed in, those page views are associated with your account id (an internal identifier, never your email) so we can understand how members use the product and help you when something goes wrong. We do not run third-party analytics or advertising trackers.

2. Cookies

We set functional cookies: aa_session (httpOnly, keeps you logged in), aa_authed and aa_uid (signed-in hints so pages can show your account state and link analytics to your account without reading the session), and aa_theme (your light/dark choice). After a successful signup, email verification, watch, follow, or saved search, a corresponding aa_event_*receipt can exist for up to two minutes so that action is counted once. It contains only a random receipt id, not the form contents or your email. We use no advertising cookies.

3. How we use your data

To operate and improve the service: authentication, password reset and verification emails, showing your watchlist and alerts, and displaying reviews you chose to publish (shown under your display name or the part of your email before the @ — never your full address). Aggregate analytics help us understand whether visitors find useful offers and where a journey fails.

4. Sharing

We do not sell or share personal data with third parties, except service providers strictly needed to run the product (e.g. an email delivery provider for password-reset mail) and where required by law.

5. Retention and deletion

Account data is kept while your account exists. To delete your account and its associated data (watchlists, sessions, reviews), contact support@cparadar.com from the account's email address.

6. Security

Passwords are hashed with scrypt; session tokens are stored only as hashes; uploads are validated and served with strict content-security headers. No system is perfectly secure — if we learn of a breach affecting your data, we will notify affected users.

7. Contact

Privacy questions: support@cparadar.com.