Privacy Policy

Information you give us.

• Account: your email, chosen password (stored as a salted bcrypt hash — we never see or store the plaintext), and optionally your name.
• OAuth sign-in: if you sign in with Google or Apple, we receive a verified identifier ("sub") from the provider along with your email and, on first sign-in, your name. We never receive your Google or Apple password.
• Communications: if you email us or subscribe to a newsletter, we retain that message and your email address.

Information we collect automatically.

• Session data: we store a hashed identifier for each active login session, along with the approximate IP address and user agent that created the session, so you can review and revoke sessions and so we can detect token abuse.
• Usage: pages visited, deals clicked, and referrer information, used to improve editorial selection and detect fraud.
• Cookies & local storage: we store an authentication token in your browser so you stay signed in across visits. See "Cookies" below.

• To provide and personalize the Service — including saving your account, curating deals, and recommending products;
• To authenticate you and secure your account, including rate-limiting sign-in attempts and detecting session token reuse;
• To communicate with you — for example, sending account-related emails such as email verification and password resets;
• To measure the effectiveness of our editorial picks and affiliate placements;
• To comply with legal obligations and enforce our Terms of Service.

We share personal information only in these limited situations:

• Service providers that help us operate Sift Deals — for example, our hosting provider (Render), our database host, and our transactional email provider. These providers process data only on our behalf and under written contracts.
• Retailers and affiliate networks: when you click a deal, the destination retailer and the associated affiliate network receive standard referral data (such as the referring URL and an affiliate tag). Their privacy policies then apply.
• Legal requirements: when required by law, court order, or to protect the rights, safety, or property of Sift Deals, our users, or the public.
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to the acquirer honoring this Policy.

We do not sell your personal information.

We use browser local storage to keep you signed in between visits. We use lightweight analytics to understand which deals are popular. Affiliate networks may set cookies to attribute purchases you make at retailer sites — this is how we're able to keep the Service free.

You can clear your browser storage and cookies at any time from your browser settings. Doing so will sign you out of Sift Deals.

If you use Google Sign-In or Sign in with Apple, we receive an identity token that Google or Apple cryptographically signs. We verify the token against the provider's public keys and use only the following fields: subject identifier ("sub"), email, verified-email flag, and (on first sign-in only) your name.

Sift Deals does not receive any other data from your Google or Apple account, and we do not have permission to act on your behalf with those services. You can revoke Sift Deals' access at any time from your Google Account or Apple ID settings.

• Account data: for as long as your account is active. When you delete your account, we remove your profile data within 30 days.
• Session tokens: hashed and stored until they expire or you sign out; revoked tokens are retained for up to 30 days for reuse-detection.
• Support emails: retained for up to 24 months so we can follow up on prior conversations.
• Legal / financial records: retained as required by tax and accounting laws.

Depending on where you live, you may have the right to:

• Access the personal information we hold about you;
• Correct information that is inaccurate;
• Delete your account and associated personal information;
• Export a copy of your data in a portable format;
• Object to or restrict certain processing;
• Opt out of marketing emails at any time via the "unsubscribe" link.

To exercise any of these rights, email privacy@siftdeals.com from the address associated with your account.

Sift Deals is intended for parents, caregivers, and adults shopping for children — it is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, please contact us and we will delete it.

We use industry-standard measures to protect your data, including TLS encryption in transit, bcrypt password hashing, hashed session tokens, rate limiting on sensitive endpoints, and least-privilege access to production systems. No system is 100% secure, but we work hard to make Sift Deals a trustworthy home for your account.

We're based in the United States. If you access Sift Deals from another country, please be aware that your information may be transferred to, stored in, and processed in the United States, where privacy laws may differ from those of your jurisdiction.

We may update this Policy from time to time. When we do, we'll change the "Last updated" date at the top and, if the changes are material, notify you by email or a banner on the site.

Questions about this Privacy Policy? Reach us at privacy@siftdeals.com.