Privacy Policy

“Deal Brewery” is the name this site operates under. “We”, “us”, and “our” mean Deal Brewery. We are the controller of the personal data described below, the party responsible for deciding how it's used.

This policy covers the Deal Brewery website. If we launch a mobile app, we'll update it to cover the app too, and flag any new data the app collects, for example push notification IDs.

When you browse (no account):

• Basic request data: pages you view, approximate region at country level from your IP, browser type, and a session identifier kept in a cookie. We use this to keep the site running and to spot abuse.
• We do not build an advertising profile of you. We don't sell your data.

When you create an account:

• The username and email you give us at signup, and the password, stored as a one-way hash and never in readable form.
• Whether your email is verified.
• An avatar, if you choose to upload one.

When you post or interact:

• Deals, comments, and votes you submit, along with the time and your account. This is public on the site; other users can see it.
• Reports you make on deals or comments.

We do not collect payment card or banking details. Deal Brewery links out to merchants for purchases; you never pay us, and we never ask for card data.

We use your data to run Deal Brewery and to keep it useful and safe. Specifically:

• To provide the service: create and verify your account, show your posts and votes, and keep the feed working.
• To moderate: review reported content, enforce the acceptable-use rules, and remove spam or fraud.
• To communicate: send verification emails, security notices, and notices about changes to our terms or this policy where relevant.
• To secure and improve: detect abuse, debug issues, and understand which parts of the site get used, in aggregate and not as a profile of you.

We process your data on three legal bases: to perform the contract with you (running your account), for our legitimate interests (keeping the site safe and functional), and where we ask for your consent (optional cookies), which you can withdraw at any time without losing your account.

We use a small number of cookies and some browser-local storage. The essentials:

• Session cookie. Keeps you logged in. Without it, you'd sign in on every page.
• Email verification state. Remembered in local storage so the verification banner shows correctly.
• Resend cooldown. Stored locally to stop the verification email being spammed.

We don't use third-party advertising or tracking cookies. You can clear cookies and local storage in your browser; you'll just need to sign back in.

We don't sell your data. We share it only in these situations:

• Service providers that help us run the site, for example the service that delivers our email. They get only what they need to do that job, and they're bound to use it for nothing else.
• Legal requests. If applicable law or a lawful court order compels us, we will disclose what we are asked to. We will push back on requests that appear overbroad.
• Safety. Where we believe someone is using the site to cause serious harm and disclosure is needed to stop it.
• A change of ownership. If Deal Brewery is ever sold or merged, account data goes with it. We will notify you before that happens.

Your posts, comments, and votes are public on the site by design.

You have rights over your personal data:

• Access the data we hold about you.
• Correct it if it's wrong. You can edit your username and avatar from your profile.
• Delete your account and its data, subject to the retention rules in section 7.
• Export a copy of your posts and account data.
• Withdraw consent for the optional cookies and any non-essential processing, without losing your account.
• Escalate. If you think we've mishandled your data, tell us first. If we can't resolve it, you can raise it with the relevant authority.

To exercise any of these, write to [email protected] from the email on your account. We'll confirm your identity before acting, and we aim to respond within 30 days.

We keep your data only as long as we need it:

• Account data is kept while your account is open. When you close it, we delete your account details within a reasonable period, typically 30 days, except where we're required to keep records by law.
• Your posts, comments, and votes stay on the site while your account is open, and after closure unless you ask us to remove them. Content stays visible by default, but you can ask us to delete specific posts at any time.
• Server logs, request data and abuse signals, are kept for a short rolling period, typically 30 to 90 days, then deleted.
• Reports are kept long enough to act on them and to record what we did, then deleted.

We take reasonable steps to protect your data: passwords are hashed, the site runs over HTTPS, and access to account data is restricted to the people who need it. No method of storing or transmitting data is fully secure, though, and we can't promise one. If a breach happens that could affect you, we'll tell you and the relevant authority without undue delay.

Deal Brewery is not directed at anyone under 18, and we don't knowingly collect data from anyone under 18. The age requirement reflects the minimum age to enter a binding contract under applicable law.

If you believe we have collected data from someone under 18, write to [email protected] and we'll delete it.

We may update this policy as Deal Brewery changes or as applicable law develops. When we do, we'll change the “Last updated” date above and, for material changes, give notice on the site, by banner or a notice on the homepage, at least 7 days before the new policy takes effect. A material change is one that affects what we collect, why, who we share it with, or your rights. After the notice period, your continued use of the site means you accept the updated policy.

Privacy questions, access requests, and deletion requests go to [email protected]. We're the controller for the data described in this policy.