Overview
You can browse stores, reveal codes and open deals on Coupo9 without signing up. If you choose to create an account, we store the few details needed to run it. Everything else we record is about offers (which code was revealed, whether it worked), not about you.
Who we are
Coupo9 is operated by Coupo9 Technologies, Bengaluru, India. We decide how the data described here is used, which makes us the data controller (or “data fiduciary” under India's Digital Personal Data Protection Act). See the legal information page for contact details.
What we collect
- Offer activity. When you reveal a code, open a deal or vote on whether a code worked, we record the offer, the time, the referring page and a session hash. On the website the hash is a one-way SHA-256 digest of your IP address and browser user agent; we store the digest, not the IP address or user agent themselves. It is used to count activity and stop the same visitor voting twice. In the extension and app, a random identifier created on install is used instead.
- Server logs. Our hosting and database providers keep standard request logs (IP address, time, requested URL, user agent) for security and debugging.
- Emails you send us. If you contact us, we keep the conversation for as long as we need it to deal with your message.
We do not currently run Google Analytics, Plausible or any other analytics script on the website. If that changes, this section and the cookie policy will be updated first.
Optional accounts
If you create an account, we store:
- your email address and a securely hashed password (handled by our authentication provider; we never see the password itself);
- the display name you choose;
- the stores and coupons you save;
- any store review you post, including its rating, text and your display name. Reviews are public on the store page.
We use these details only to sign you in, show your saved items and publish your reviews. We send account emails (such as confirmation or password reset) but no marketing email. You can delete your account at any time from your dashboard, which permanently removes your profile, saved items and reviews.
What we don't collect
- No phone numbers, postal addresses or payment details.
- No purchase details. Checkout happens on the store's site, not ours.
- No selling or renting of data to anyone.
- No advertising trackers, ad networks or fingerprinting scripts.
Browser extension
The address of the page you are on never leaves your device. The extension downloads our store list (name, logo and website address), caches it in your browser for up to 24 hours and matches your active tab against it locally. Only when a store matches does it request that store's offers from our database, and that request names the store, not the page you were on.
The extension stores on your device:
- the cached store list;
- your layout preference (grid or list);
- a random install identifier used to stop duplicate votes.
It asks for the tabs, storage and side panel permissions, contacts only our own backend, has no content scripts and does not read page content or anything you type. Uninstalling it deletes everything it stored.
Android app
The Android app reads the same public offer catalogue as the website. It needs no sign-in and requests only internet and network-state permissions. It records the same offer activity described above against a random identifier created on install. It does not access your contacts, location, camera, photos, microphone or files. Uninstalling the app removes what it stored on your device.
Cookies & local storage
The website sets cookies only when you sign in, to keep you signed in. Preferences such as light or dark theme, grid or list view, and a dismissed store banner are kept in your browser's local storage and never sent to us. Details are in the cookie policy.
Service providers
We use a small number of providers that process data on our behalf, under their own security and data-protection terms:
- Supabase: database, file storage and account authentication.
- Our web hosting provider: serves the website and keeps request logs.
- YouTube (Google): some guides embed videos in privacy-enhanced mode (youtube-nocookie.com). YouTube receives data only when you play a video.
These providers may store data outside your country, including outside India or the European Economic Area. Where the law requires it, those transfers rely on the provider's standard contractual safeguards.
Outbound & affiliate links
When you open an offer, you may pass through an affiliate tracking link before reaching the store. The merchant or affiliate network may set its own cookies to credit the visit to Coupo9. We do not pass your name, email or account details to them. Once you are on the merchant's site, their privacy policy applies. See the affiliate disclosure.
Data retention
- Offer activity records: kept while they help us measure which offers work. They contain a hash, not your IP address.
- Account data: kept until you delete your account.
- Reviews: kept until you or we remove them, or your account is deleted.
- Support emails: deleted once they are no longer needed.
- Server logs: kept for the provider's standard log period.
Your rights & deletion
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to its use, or withdraw consent. The GDPR & data rightspage explains each right under the GDPR and India's DPDP Act and how to use it.
The quickest routes: delete your account from your dashboard, uninstall the extension or app, or email hello@coupo9.com with the subject “Data request”.
Children
Coupo9 is meant for adults who shop online. Accounts are not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has created an account, tell us and we will delete it.
Changes to this policy
If we change what we collect, we update this page and the date above before the change takes effect.
Contact
Questions about privacy? Email hello@coupo9.com.