iPromotion is a personal, non-commercial project run by Khoa Dinh in Oulu, Finland, who is the controller of the personal data described here (contact details on the Contact page). This page explains what the site collects, why, and what you can ask for.
Without an account
- No tracking or ads. The site uses no analytics, advertising or tracking cookies.
- In your browser only: starred categories and whether the sidebar is collapsed are saved in your browser's local storage. They never leave your device unless you sign in.
- IP address: each request's IP address is used to limit abuse (for example, a few refreshes or photo checks per 10 minutes). Counters for costly actions are kept in our database for the length of that window and then deleted. Our hosting provider also keeps short-lived technical logs.
- Location (Food section, optional): only if you allow it, your browser's location is rounded to about 1 km and sent to our server to look up Wolt offers near you. The offers are cached for 30 minutes per area; the area is not linked to you.
With a Google account
- Account: signing in uses Google through Firebase Authentication. We store your name, email address, profile photo link, Google account ID, and when you signed up and last logged in, so we can keep your data and recognise you.
- Favorites: the categories you star, so they follow you across devices.
- Follow your discount: the dates you save (use-by or best-before), the product name and the location you type. Photos are shrunk in your browser and sent once to an AI model on Hugging Face to read the date; we do not store photos. We count your photo checks per day to keep the service free.
Why we use it (legal basis)
To provide the features you ask for (GDPR Art. 6(1)(b)), with your consent for location and photo checks (Art. 6(1)(a)), and our legitimate interest in keeping the service secure and free of abuse (Art. 6(1)(f)). We never sell your data or use it for advertising.
Who processes it
- Vercel: hosting; the server runs in Frankfurt, Germany.
- Neon: the database, in Frankfurt, Germany.
- Google Firebase: sign-in.
- Hugging Face and its inference providers: reading dates from photos.
Some of these companies are based in the United States; transfers rely on their standard contractual clauses or the EU–US Data Privacy Framework.
How long we keep it
Account data, favorites and saved dates are kept until you delete them or ask us to delete your account. Each account keeps at most 300 dates; the oldest is removed first.
Your rights
You can ask to see, correct, export or delete your data, or object to its use. Send your request by email (see Contact) and we will answer within 30 days. You can also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).
Changes
If this policy changes, the date at the top changes too. Significant changes will be shown on the site.