Privacy policy
Last updated: October 24, 2026
This policy explains what data Reducart collects when you use the website and the browser extension, why, and how to exercise your rights.
Controller: KILIAN PEYRON. Contact: privacy@reducart.com.
Data we collect
Without an account (extension only)
- An anonymous identifier created when you install the extension, with no name or email.
- Each time you run a code attempt: the store, the codes tried, whether one worked and the discount obtained.
- Clicks on a store link, recorded with an opaque reference so a purchase can be attributed to Reducart.
- When you say whether a code still works: your answer and an identifier derived from your IP address (a hash computed with a secret key; the address itself is not stored), only to count one answer per person per code.
With an account
- Your name and email address.
- A password, stored only in hashed form.
- A session cookie or token that keeps you signed in, with the IP address and browser of the session.
- Your favorite stores and your "this code still works / does not" answers.
What the extension does not do
The extension reads a page only when you click it. It does not track your browsing, read your other tabs, or press the pay button for you.
Why we use it
- To run the service: find a store's codes, try them, manage your account.
- To attribute a purchase to Reducart so the store can pay a commission (legitimate interest).
- To measure which codes work and remove the ones that do not (legitimate interest).
- To protect the service from abuse, including per-IP request limits (legitimate interest).
Who we share it with
We do not sell your data. Some of these providers are located outside the European Union; transfers rely on GDPR safeguards (standard contractual clauses).
- Hosting: Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA (vercel.com).
- Database: Supabase (supabase.com).
- Affiliate networks and stores: the opaque click reference, never your name or email.
- Authorities, where the law requires it.
How long we keep it
- Anonymous extension accounts: deleted automatically after about 30 days without an active session.
- Accounts with an email: for as long as you keep them; deleted on request.
- Click and attempt logs linked to an account: only as long as that account exists.
Your rights
You can ask for access to, correction or deletion of your data, restriction or objection to processing, and portability.
You can delete your account yourself from the Account page: the account, saved stores and sessions are erased. Your answers about codes are kept with no link to you, because they help other visitors.
For other requests, write to privacy@reducart.com. You can also complain to your data protection authority (in France, the CNIL).
Cookies
Reducart uses a single session cookie, needed to sign in. There are no advertising cookies and no third-party analytics.
Security
We apply appropriate technical and organizational measures. No system is perfectly secure, so we cannot guarantee absolute security.
Changes
We may update this policy; the new version is posted on this page with its date.
Contact
privacy@reducart.com