Privacy Policy

Deals Copier is a Chrome extension and an official website (dc.flasktoken.com). This policy explains what data we collect, why we collect it, and what you can do about it.

1. The browser extension

The extension runs entirely in your browser. Captured deal data (titles, prices, images, copy) is processed locally and never transmitted to our servers unless you explicitly export it.

• No background telemetry.
• No usage analytics inside the extension.
• No third-party trackers in the popup or content scripts.

The one exception is a report you choose to send us yourself — see section 3 for exactly what leaves your browser in that case.

2. Account data

If you create an account on the official site, we store:

• Your email address (used for login and verification).
• A salted PBKDF2 hash of your password (100,000 iterations).
• An active session row per logged-in device — you can revoke it anytime.

We never receive or store your plaintext password.

3. Email

We use Resend to deliver verification and notification emails. The email address you provide is shared with Resend for delivery only; it is not used for marketing without your consent.

If you submit a report through our Report a problem page, your message, email address, basic device details (browser, operating system, language, timezone), and any screenshots you attach are sent to our support inbox at support@flasktoken.com. We keep a copy so we can follow up with you, and use it only to investigate your report.

If you open that page from the extension, it also fills in a few technical details that help us reproduce the problem: the extension version, the interface language you have selected, and — when you are on a supported store's product page — that store's domain and the address of the page you are viewing.

• The page address is included only when you actively submit the report. We never collect, store, or transmit it in the background, and we do not track the pages you browse.
• Everything after the ? is stripped from that address before it is sent, so tracking parameters and any affiliate tag of your own are never included.
• The address is visible in the form and editable — clear the field if you would rather not share it. Your report is still sent without it.

4. Newsletter

If you subscribe to the newsletter without an account, we store only the submitted email address. Unsubscribe via the link in any newsletter email, or by contacting us.

5. Payments

Payments are processed by PayPal. We store order IDs and statuses for record-keeping, but we never see or store your full card numbers. PayPal webhooks are verified by signature before being recorded.

6. Cookies

The site uses a single session cookie when you log in. It is httpOnly, Secure, and SameSite=Lax. No tracking cookies are set.

7. Analytics

The site uses Cloudflare's privacy-friendly, cookie-free analytics. It reports aggregate traffic counts only — no cross-site tracking, no fingerprinting.

8. Your rights

You may request export or deletion of your account data at any time. Email privacy@flasktoken.com and we will respond within 30 days.

9. Changes to this policy

We update this page whenever our practices change. The "Last updated" date above reflects the most recent revision. Material changes will also be posted to the changelog.

10. Contact

Questions? Email privacy@flasktoken.com.