Privacy Policy

1. Overview

SnagDeals collects the minimum data needed to operate. We do not sell, rent, or share your personal information with third parties for marketing purposes.

2. Information we collect

Google OAuth sign-in

When you sign in with Google we receive your Google account email address, display name, and profile picture URL. We store these in our database to identify your account and display your avatar in the interface. We do not receive or store your Google password, phone number, or any other Google account data beyond what the OAuth flow provides.

We use this information solely to authenticate you, to apply the invite-allowlist check (matching your email against the list of authorised users), and to personalise your in-app experience (saved deals, alert preferences).

Email magic-link sign-in

If you request a magic-link sign-in, we store your email address in our Auth.js verification token table long enough to validate the one-time link and sign you in. The sign-in email is delivered through Resend and expires automatically after a short window.

Location preference

If you set a location preference (postal code / forward sortation area) to surface nearby store deals, we store that coarse location string in your account preferences. We do not collect GPS coordinates, precise addresses, or device location signals. You can clear or change this preference at any time from your account settings.

Alert email address

If you enable deal alerts, we store the email address you specify in your account preferences. This address is used exclusively to send you deal alert emails via Resend. You can disable alerts or change the address at any time from your account settings.

Saved deals and searches

Products you save and searches you save are stored in our database and linked to your account. This data is used to power deal alerts and to restore your saved deals across sessions.

Analytics and session recording

We use self-hosted Umami for cookieless, privacy-friendly analytics. Umami collects anonymous page-view counts and aggregate event data (e.g. how often a filter is used). It does not use cookies, does not fingerprint devices, and does not collect any personally identifiable information.

We also use Umami’s session-replay feature to record visitor interactions (mouse movements, clicks, scrolls) as you browse the site, so we can see where the experience is confusing or broken. The recording captures the structure of the page and your interactions with it — not your account data. The following safeguards apply:

• Sensitive fields are masked. All text inputs — and email and password fields in particular — are replaced with ████ in recordings; we never see what you type. The masking level is set to “moderate” by default.
• Sign-in and account forms are blocked. Password and email inputs and sign-in/authentication forms are fully blocked from capture, so credentials are never recorded even visually.
• Do Not Track is honoured. If your browser sends a Do Not Track signal, no recording takes place.
• Recordings are deleted on a rolling basis. Raw recordings are automatically purged after a limited retention window (currently 60 days).

All analytics and replay data are stored on our self-hosted Umami instance (in Canada) and are never shared with third-party analytics services.

Rate-limiting and abuse prevention

To protect the service, we apply per-IP rate limiting in our web application layer. Request counts per IP are tracked in Redis with a short rolling window (typically minutes). We do not permanently store IP addresses or build profiles from them.

Server logs

Standard HTTP access logs (IP address, URL, response code, timestamp) may be retained for a short period for debugging and operational purposes.

3. Email deals digest & price-drop alerts (no account needed)

You can sign up to receive emails from SnagDeals without creating an account. Two programs use these signups: a weekly deals digest (from the homepage, an occasion page, or a quiet browse prompt) and per-product price-drop alerts (the “notify me” option on a product page). Signing up here does not create a SnagDeals account — accounts stay invite-only — and this list is kept separate from any account data.

What we collect

• Your email address (stored in lowercase).
• The language you were using when you signed up (English, French, or Chinese), so we can write to you in that language. If we can’t tell, we default to English.
• For a per-product price-drop alert only: which product you asked about, so we can let you know when that item’s price falls again or it comes back in stock. No other browsing history is attached to your email.
• Which signup surface you used (for example, the homepage digest box versus a product alert) and the dates you signed up and confirmed.
• A unique, unguessable web link that lets you unsubscribe in one click, included in every email we send you.

We do not collect a name, password, payment details, or precise location for these email signups. Entering your email address and submitting the form is all it takes.

How your consent works

We only add an email address that someone entered and submitted themselves — we never buy, guess, or auto-add addresses. We record your consent at the moment you submit the form and send a welcome email confirming your subscription. In keeping with Canada’s anti-spam law (CASL), every email we send identifies us (“SnagDeals · Toronto, Ontario, Canada”) and carries a working one-click unsubscribe link.

Who processes these emails

We send this mail through Resend, the same email provider used elsewhere on the site. Your email address is shared with Resend only so it can deliver a message you asked for. We also keep a short internal log of each send — which subscriber it went to, which email it was (welcome or weekly digest), a per-edition key so you are never sent the same edition twice, and Resend’s message id for delivery and bounce tracing. That log does not store the contents of the email.

Unsubscribing and your data

• Every email includes a one-click unsubscribe link. Clicking it — or using your mail app’s built-in unsubscribe — stops all further email immediately.
• When you unsubscribe we mark your address as unsubscribed and keep that record so we know not to email you again. We do not add you back unless you sign up again yourself.
• We never sell, rent, or trade these email addresses, and we do not share them with anyone other than Resend to deliver the emails you asked for.
• To have your email address and its send history deleted entirely, email us (see the Contact section below) and we will remove it.

4. How we use your information

• Authenticate your account and enforce the invite allowlist.
• Personalise your browsing experience (preferred location, saved searches).
• Send deal alert emails you have opted into.
• Send the weekly deals digest and per-product price-drop alerts you signed up for, with no account required (see section 3).
• Detect and mitigate abuse via rate limiting.

We do not use your data for advertising, analytics profiling, or any purpose beyond operating the service.

5. Third-party services

We use a small number of third-party services to operate SnagDeals:

• Google OAuth — handles authentication. Your sign-in is governed by Google’s Privacy Policy.
• Resend — email delivery for deal alerts, sign-in links, and the account-less deals digest / price-drop alerts (section 3). Your email address is transmitted to Resend only when a message you asked for needs to be sent.
• Cloudflare Tunnel — proxies traffic to our self-hosted server. Cloudflare may log requests as part of their network operations.

6. Data storage

Your account data is stored in a self-hosted PostgreSQL database on a private server in Canada. Nightly encrypted backups are stored in Backblaze B2 cloud storage.

7. We do not sell your data

We do not sell, rent, trade, or otherwise transfer your personal information to outside parties for commercial purposes.

8. Your rights

You can at any time:

• Change or clear your location preference in account settings.
• Change your alert email address or disable alerts in account settings.
• Delete individual saved items or saved searches.
• Unsubscribe from the deals digest or price-drop alerts using the one-click link in any email (see section 3).
• Request deletion of your account and all associated data by emailing us.

9. Data source and scraping

SnagDeals collects publicly listed prices and product information from Canadian retailer websites using automated HTTP requests. We do not log in to retailer accounts, circumvent access controls, or harvest personal data from retailer sites.

Scraped prices and inventory levels are snapshots in time and may be stale. Always confirm price and availability with the retailer before driving to a store.

SnagDeals is not affiliated with or endorsed by any retailer whose prices appear on this site.

10. Changes to this policy

This policy may be updated at any time. Continued use of SnagDeals after an update constitutes acceptance of the revised policy.

11. Contact

Questions or data-deletion requests? Email hello@snagdeals.ca.