Privacy policy

Who this covers

This policy is for Fair Go Finds (fairgofinds.au), run from Melbourne, Australia. “We” means the person who runs the site. You can reach us at deals@fairgofinds.au.

If you only browse

The site counts page views itself; it does not load Google Analytics or any advertising tracker, and sets no cookie until you sign in. To tell visitors apart for one day, it stores a one-way hash made from the day, your IP address, your browser’s user-agent string and a secret. The analytics record stores that hash rather than the raw address, and the visitor key changes every day. Alongside it the site keeps the page path, which site or app sent you (if the browser says), and any search term you typed into the site’s own search box. All of this is deleted after 90 days.

Your IP address is also used, briefly, to limit how fast one address can sign up, log in, post or vote. Those counters expire within the hour.

If you create an account

We keep:

• your email address, your handle, and a hash of your password (never the password itself);
• if you sign in with Google or Apple, the identifier that provider gives us for you, and nothing else from your profile;
• when the account was made, whether the email was confirmed, and your role and reputation on the site;
• the deals, comments, votes and reports you make. Deals and comments are public under your handle; votes and reports are shown only as totals;
• your alerts: the keywords, filters and where to send them. A push alert stores the subscription address your browser gives us; a Telegram alert stores the chat ID Telegram gives us after you link it;
• a session cookie (fgf_session) that keeps you signed in. We store only a hash of it, and it expires on its own.

Your email address is never shown on the site, never sold, and never given to a retailer. It is used to confirm your account, reset your password, send the alerts and digests you asked for, and, rarely, to tell you about a change to the site or these terms.

If you subscribe without an account

The weekly Friday digest keeps your email address and a confirmation token. We send a confirmation email first; digest emails start only after you confirm. Every digest carries an unsubscribe link that removes the subscription.

When you click through to a store

Every “Go to deal” link passes through the site so the click can be counted. The count is a number against the deal, not against you: no visitor hash is stored for clicks. From there you are on the retailer’s site, under its privacy policy. Where a link is an affiliate link, the affiliate network may set its own cookie so the retailer knows the sale came from here; see the disclosure page.

Who else handles the data

The site runs on Cloudflare, which processes every request (including your IP address) to deliver pages and block attacks, and which hosts the database. Cloudflare Turnstile checks that sign-ups come from people, not scripts when that protection is enabled. Emails are sent through Resend. Telegram delivers Telegram alerts, and your browser’s push service delivers push alerts. These providers may process information outside Australia under their own privacy policies.

Product images and store icons may load directly from retailers or their image hosts. Missing store icons may load from Google’s favicon service. Those requests reveal your IP address and browser information to the service hosting the image, even when you have not clicked through to a store.

How long things are kept

• Traffic counts and search terms: 90 days.
• Sessions and sign-in tokens: deleted when they expire.
• Account details, alerts and your posts: until you delete the account.
• Deals, price history and comments: kept as the site’s record. If you delete your account, your details are removed; deals and comments you posted may stay, no longer attributed to you, because other people’s replies and votes depend on them.

Your choices

You can manage your password and alerts from your account page. To change your handle or email, see everything the site holds about you, correct it, or delete the account, email deals@fairgofinds.au from the address on the account. We may need to verify your identity before acting on a request. If you think we have mishandled your information and are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Children

The site is not directed at children and does not knowingly keep accounts for them. If you believe a child has made one, email us and it will be removed.

Changes

When this policy changes, the date at the top changes with it, and a change that affects what is collected is announced on the site before it takes effect.