Last updated 9 September 2026
Who we are
This policy covers CouponTested at https://example.com. For any privacy question, write to hello@example.com.
What we collect
Information you send us
When you use the contact form we store the name, email address, subject and message you type, along with your IP address, your browser's user-agent string and the time you sent it. The IP and user-agent are kept for one reason: to block spam and abuse of the form.
Information collected automatically
Our web server keeps standard access logs (IP address, requested page, referrer, user-agent, timestamp). These are generated by the hosting platform and used for security and troubleshooting.
We count page views per store page as a single number. That counter is not tied to you and cannot be traced back to an individual.
Cookies
The site sets one cookie, a session cookie, which keeps the security token that protects the contact form from cross-site request forgery and keeps administrators signed in. It expires when you close your browser. We do not set advertising or tracking cookies. Full detail is on the cookie policy page.
Affiliate links
Some outgoing links are affiliate links. When you follow one, the store or its affiliate network may set its own cookies and record the referral. That processing happens under their privacy policies, not ours. We receive only aggregate reporting, never your name or payment details. See the affiliate disclosure.
Why we are allowed to hold this
- Your message: we process it to answer you, at your own request.
- IP and user-agent: our legitimate interest in keeping the form usable and free of abuse.
- Server logs: our legitimate interest in operating the site securely.
Who we share it with
Nobody, other than our hosting provider, which stores the data on our behalf. We do not sell personal data. We will disclose information if a valid legal request requires it.
How long we keep it
- Contact messages: up to 24 months, then deleted.
- Failed sign-in records: 7 days.
- Server access logs: as set by our hosting provider, typically 30 days or less.
Your rights
Depending on where you live, you may have the right to see a copy of the data we hold about you, correct it, delete it, restrict or object to how it is used, or complain to your data protection regulator. Email hello@example.com and we will action it. There is no charge.
Children
The site is not aimed at children under 13 and we do not knowingly collect their data. If you believe a child has sent us information through the contact form, tell us and we will delete it.
Security
Form submissions are validated on the server, database access uses prepared statements, and administrator passwords are stored only as one-way hashes. No website can promise perfect security, but we do not collect payment details or account passwords from visitors at all.
Changes
When this policy changes the date at the top of the page changes with it. Material changes will be flagged on the homepage.