Privacy Policy

Last updated: October 18, 2026

deal rim is a deals aggregator. We try to collect as little personal information as possible while still showing you relevant deals. This policy explains what we collect, why, and the choices you have.

1. Approximate location

To power the "Deals near you" feature, our hosting provider attaches your approximate city, state, and country (derived from your IP address) to each page request. We use it only to localize deal content — for example, showing local-pickup listings near your city. IP-based location is approximate (often just the nearest metro area), and you can always override it with a ZIP code, which is stored only in your browser. We never collect precise GPS location unless you explicitly tap a "use my precise location" button, which is now available in the "Deals near you" module. Tapping it triggers an explicit browser permission prompt; your raw coordinates never leave your device — they are reverse-geocoded in your browser into a ZIP code, and only the ZIP is used to find closer local-pickup deals.

2. Interests and deal interactions (stored on your device)

If you pick interest categories or click on deals, we store those preferences and a per-category interaction score in your browser's localStorage. This data is used only on your device to rank a "Picked for you" row — it is never sent to our servers or shared with anyone. Clearing your browser storage removes it. If you enable the "Do Not Sell/Share" opt-out below (or your browser sends a Global Privacy Control signal), we stop recording deal interactions entirely. Viewing a deal page also adds that deal to a "Recently viewed" list stored only in your browser's localStorage, used to show a "pick up where you left off" row on the homepage — subject to the same opt-outs, and removable with the Clear button or by clearing storage. The "Watch for deals" keyword list on the homepage is stored the same way — only in your browser's localStorage, never sent to our servers — and is subject to the same opt-outs; removing a keyword deletes it from your device. The "Watch similar" button on a deal page adds that deal's product keywords to the same keyword list, so new matching deals appear in your Watch section — same on-device storage, same opt-outs. The "Follow this store" button on store pages adds that store (its id and name) to a store-follow list stored the same way, so the homepage can flag that store's new deals in your Watch section — only on your device, never sent to our servers, and subject to the same opt-outs; unfollowing a store removes it. The "Track price" button on a deal page stores that deal's id, title, price, and store in your browser's localStorage so the homepage can show a "Price drops" strip when a tracked deal gets cheaper — only on your device, never sent to our servers, and subject to the same opt-outs; untracking a deal removes it. An optional target price you set next to the button is stored alongside the entry and flags drops that reach it. We also store the time of your last homepage visit in your browser's localStorage so the homepage can show a "new deals since your last visit" catch-up banner — only on your device, never sent to our servers, and subject to the same opt-outs; clearing your browser storage removes it.

3. Affiliate links

Some outbound deal links are affiliate links, meaning we may earn a commission if you buy through them — at no extra cost to you. Current and planned affiliate partners include the eBay Partner Network (eBay links), Impact, and CJ Affiliate. We plan to add Google AdSense for display ads in the future; Google Funding Choices consent tooling and Consent Mode v2 will be enabled before any personalized ads load. Affiliate partners receive only the fact that a click came from dealrim — we do not send them your interests or interaction history.

4. Analytics

We use PostHog (self-declared analytics, posthog.com) to understand how the site is used — for example, page views, deal clicks, \"Picked for you\" card views, interest-picker completions, searches, and use of the location module. Search events include the words you type into the search box (lowercased, truncated to 80 characters) so we can see what shoppers look for and can't find — for example, which buying guides to write next. We also keep our own first-party count of searches that return zero results (query text only, lowercased and truncated, with anything shaped like an email address or phone number removed) so we can see content gaps without any third party; this server-side count is skipped entirely when your browser sends a Global Privacy Control signal. We do not send PostHog your ZIP code, precise coordinates, or full deal-interaction history, and session recordings are turned off. Events are capped per session to keep collection minimal. PostHog loads only if you have not enabled the \"Do Not Sell/Share\" opt-out below and your browser is not sending a Global Privacy Control signal — with either opt-out, analytics is fully disabled and nothing is sent. We also record page-load performance through the same analytics channel — Core Web Vitals measurements (page paint timings and layout-shift scores). These are timing numbers only; they contain no personal data, and they are subject to the same opt-outs. We also record JavaScript error messages through the same analytics channel — the error text only, truncated to 120 characters (no stack traces, file names, or page URLs) — so we can find and fix bugs that break the site in visitors' browsers. These are subject to the same opt-outs and the same per-session event cap.

5. Newsletter

Currently paused — the newsletter signup is temporarily disabled and we are not collecting new email addresses. When it returns: if you sign up for deal emails, we store your email address and subscription status (pending, confirmed, unsubscribed). Signup uses double opt-in: we email you a confirmation link (valid 24 hours) and only send newsletters after you click it. Every newsletter includes an unsubscribe link, and you can also unsubscribe anytime via the site. We never sell your email address or share it with advertisers; it is used only to send the emails you asked for. If you enable the "Do Not Sell/Share" opt-out, we still honor your existing newsletter subscription (you asked for those emails), but we will not use your address for anything else.

6. Community deal submissions

If you submit a deal for review, we store what you entered — the deal title, link, price, and any optional store name, description, image link, or alias — so a human can review it before publication. Approved deals appear on the site like any other deal. We do not require an account to submit, and we never sell or share submission data with advertisers; it is used only to review and, if approved, publish the deal.

7. Deal votes

If you rate a deal ("Was this a good deal?" on deal pages), we store one vote per deal per visitor so the totals stay honest. We do not require an account, and we never store your raw IP address for this: your vote is keyed to a one-way hash of your IP plus the deal, which cannot be reversed. Your browser also keeps a local list of which deals you voted on (in localStorage) so the buttons remember your choice — you can clear it with your browser storage. We never sell or share vote data with advertisers.

8. Deal discussion

If you comment on a deal ("Discussion" on deal pages), we store what you wrote — your comment text, the optional display name you entered, and the time it was posted — so it can appear on the deal page. If you mark a comment as helpful, we store one helpful vote per comment per visitor so the totals stay honest. If you report a problem with a deal ("Report it" on deal pages), we store the reason you picked and your optional note so our team can review the deal — reports are never published. We do not require an account for any of these, and we never store your raw IP address: each comment, helpful vote, and report carries a one-way hash of your IP, used only to investigate spam or abuse, which cannot be reversed. Comments containing links are held for human review before they appear. We never sell or share comment or report data with advertisers.

9. Community forums

If you post in the community forums, we store what you wrote — the discussion title and message or reply text, the optional display name you entered, and the time it was posted — so it can appear in the forum. We do not require an account, and we never store your raw IP address for this: each post carries a one-way hash of your IP, used only to investigate spam or abuse, which cannot be reversed. Posts containing links are held for human review before they appear. We never sell or share forum data with advertisers.

10. Push deal alerts

If you enable browser deal alerts, we store your push subscription (a browser-generated endpoint plus encryption keys), your alert keyword, and your optional max price so we can notify you when a matching deal appears. Alerts are strictly opt-in: nothing is sent unless you explicitly enable them, and you can disable them anytime with one click (which deletes the subscription from our servers). We never use push subscriptions for advertising, and we do not share them with third parties. The "Do Not Sell/Share" opt-out does not block alerts you explicitly requested, but we will never sell or share your subscription data regardless.

11. Server logs

Like most websites, our servers keep standard request logs (IP address, page requested, timestamp) for security and debugging. Logs are not used for advertising.

11. Do Not Sell or Share My Personal Info

Under California, Texas, Colorado, Connecticut, Virginia, Montana, Oregon, Delaware, New Hampshire, and New Jersey privacy laws, you have the right to opt out of the "sale" or "sharing" of your personal information for targeted advertising. We do not sell personal information today, but you can still record a standing opt-out with us:

Opt out of sale/sharing of my personal info

This sets a flag in your browser telling dealrim to treat you as opted out: we disable deal-interaction tracking, fully disable analytics (PostHog loads only when you have not opted out), and will not enable personalized ads for you. We also honor the Global Privacy Control (GPC) browser signal automatically — if your browser sends Sec-GPC: 1, you are opted out without needing to click anything.

12. Your other rights

Depending on your state, you may have the right to know what personal information we hold about you, correct it, or delete it. Because we store almost nothing server-side, most requests can be satisfied by clearing your browser storage. For anything else, contact us (see below).

13. Children

deal rim is not directed at children under 13, and we do not knowingly collect information from them.

14. Changes

We will update this page when our practices change (for example, when analytics or AdSense are added). The "Last updated" date at the top reflects the latest revision.

15. Contact

Questions about this policy? Reach us at [email protected].