Skip to content

Privacy notice

Which data Discount Searcher processes, why, where it ends up, for how long, and how you can ask for it to be changed or deleted.

Who processes the data

The data controller is the DiscountSearcher Team, which runs the Discount Searcher application and this website. For any question or request about your data you can write to searcherdiscuont@gmail.com.

Which data and why

  • Account: username, email address (Gmail), date of birth and a value derived from the password (the password is never stored in clear text). They are used to create the account, verify it and sign you in.
  • Date of birth: we ask for it to prepare a version of the service designed for younger people, currently in development. For now sign-up does not check the age and the date is not used for anything else.
  • Sessions: for each sign-in, date and time, last use and the device name: for the application it is the computer name set in Windows, for the site the wording "Website". They are used to keep you signed in and to sign a device out remotely.
  • History: title and identifier of the last 100 deals you open, with the date (older ones are deleted automatically). It is used to show them in the sidebar, also from another computer.
  • Support tickets and applications: subject, category and messages written by you and by the team. They are used to handle your request.
  • Files attached to tickets and applications: they are not stored on the server; they are sent as attachments of the email the team receives.
  • Service emails: verification and password recovery codes, account change notices, ticket notices. We do not send newsletters or advertising.
  • Donations: those who choose to donate do so on PayPal, which handles the payment; this site never receives card details. From the project's PayPal account we see the name and email address attached to the donation, which we only use for bookkeeping and, possibly, to say thank you. Donating is not required to use the application.

To protect accounts, the server keeps for a short time, in memory only, the usernames with failed attempts (15 minutes) and the usernames and email addresses codes were requested for (up to 24 hours). This data also disappears every time the server restarts.

We do not collect payment data: purchases happen on the store's website. The site uses no cookies, no analytics and no advertising.

Minors

If you are under 14, signing up requires the consent of a parent or guardian. If you notice that someone under 14 signed up without that consent, write to us and we will delete the account.

What stays on your device

  • Website: after signing in, the session token and your username stay in the browser storage (localStorage) until you press "Sign out".
  • Application: the session token stays in a file (session.json) in the Windows application data folder (%APPDATA%\DiscountSearcher), so you are not asked to sign in at every start; "Sign out" deletes it.

Who receives the data

Discount Searcher uses these external services, which process data on our behalf or receive your IP address when you use them:

  • Supabase: the database with accounts, sessions, history and tickets, hosted in the European Union (Ireland).
  • Render: the server that receives the requests of the app and of the site, hosted in the European Union (Frankfurt, Germany).
  • Netlify: hosts this website.
  • PayPal: handles donations, for those who decide to make one.
  • Google (Gmail): sends the service emails; the emails of tickets and applications, with their attachments, stay in the project's Gmail mailbox.
  • Google Fonts: the fonts of the site are loaded from Google's servers, which therefore receive your IP address.
  • CheapShark and Steam: the application asks these services for the deals and the genres of the games; the requests start from your computer.

For how long

  • Account, history and tickets: as long as the account exists. When you ask for it to be deleted we also delete the history, the tickets and the related emails in the project's mailbox.
  • Sign-ups never confirmed: if you register and do not enter the code we send you, the account and its email address are deleted automatically after 7 days. You can sign up again with the same address whenever you like.
  • Sessions: a session expires after 30 days without use. Expired or signed-out sessions are deleted automatically 30 days after their last use.
  • Applications: if the application does not lead to joining the team, the email with its attachments is deleted from the project's mailbox within 12 months.

Your rights

You can ask to see the data concerning you, to correct it, delete it or receive a copy of it, and you can object to the processing. Username, email and password can be changed by yourself from the Profile panel of the application.

The application does not have a button to delete the account yet: to do that, or for the other requests, write to searcherdiscuont@gmail.com from the address linked to your account, or open a ticket.

If you believe your data is not handled correctly, you can contact the Italian data protection authority (Garante per la protezione dei dati personali) or the supervisory authority of your country.

Changes

If the way we process data changes, we update this page. Last updated: 2 October 2026.