Privacy Policy
the operator of Dealboja (“we”, “us” or the “Operator”) takes your privacy seriously. Dealboja has no sign-up, and you don’t need to give a name or email address to browse it. This policy explains what information is collected on the Dealboja website and app (the “Service”) and how it is used.
This English version is a translation provided for convenience. If it differs from the Korean original, the Korean original prevails.
1. Information we collect
Visit statistics (collected automatically)
To improve the Service and understand how it is used, we collect the following automatically.
- Random visitor ID — On your first visit, a random string that cannot identify you is created and stored in your browser’s storage (localStorage). It is used only to count return visits and is not linked to a name, email address or IP address.
- Device and visit details — Where you came from (search, social media and so on), campaign tags (utm), device type, operating system, browser information (User-Agent), screen size, time zone, language setting, and whether you use the app (added to your home screen)
- Engagement — Whether you scrolled or tapped the page, and how long it was on screen. Used to filter automated programs (bots) out of the statistics.
- Usage records — Daily page views, deal clicks, number of searches, and views and clicks per deal
- Search terms — Stored only as daily totals to see popular searches; who searched is not stored.
Dealboja does not use advertising tracking cookies or third-party analytics or ad-tracking tools.
IP addresses
By the nature of the internet, our server receives the IP address of the device that connects. Dealboja uses IP addresses only briefly (up to one hour) in server memory to prevent spam and click manipulation, and does not store them in its database. Our hosting provider may keep access logs for a period for security and operations.
Information you give us
- Posting a deal — The link, product name, price, coupon, notes and so on that you post are published as deal information. Please don’t include personal information.
- Posting an in-store deal — We receive one price tag/SKU (or receipt) photo, one or two product photos, and the store name, branch/city, region, end date and notes. The product photos and store/branch information are published on the deal page. The price tag or receipt photo is not published; it is used only for AI reading and review by the Operator.
- Photos are resized and re-saved before they are stored, which removes all metadata in them, such as where the photo was taken (GPS) and device information.
- If you tap “Use my location”, we receive your approximate location (two decimal places, about 1 km) to choose your region. It is not published.
- Receipts can show card numbers, names, member numbers or phone numbers. Please cover them before uploading. If the AI finds what looks like personal information in a photo, the deal is not published until the Operator has checked it.
- Contact form — We receive your name (optional), email address, message and any related link.
2. How we use it
- To provide the Service and to organize and translate deal information
- To analyze usage, improve the Service, and measure advertising and affiliate performance (as totals)
- To prevent spam, fraudulent clicks and abuse of the Service, and to keep it secure
- To answer your messages and handle copyright and privacy requests
- To meet legal obligations
3. Sharing and service providers
Dealboja does not sell personal information and does not share it with third parties for targeted advertising. To run the Service, we use the following providers.
- Hosting — Render (USA): runs the website and database
- AI processing — Google (Gemini), Anthropic (Claude) and others: translating and summarizing posted product links and product page content, and reading in-store price tag photos (product name, price, SKU). Price tag photos go to Google (Gemini) first, and to Anthropic (Claude) when Gemini is unavailable. Product photos are not sent to AI providers. Under their paid API terms, these providers do not use what we send to train their AI models. Visitor IDs, locations and contact messages are not sent.
- AI on the Operator’s computer — Translation and summaries, and photo reading when the providers above are unavailable, may be processed by an AI program on a computer the Operator manages directly. In that case nothing is sent to an outside provider.
When you click a deal link, you go to that store, and what happens next is governed by the store’s privacy policy. For affiliate links, the store or affiliate program may use its own cookies to confirm the purchase came from the link. We may disclose information to the extent required by law, such as under a court order.
4. How long we keep it
- Visit statistics: kept as daily statistics to show how the Service grows, in a form that cannot identify individuals.
- Contact messages: deleted when no longer needed after they are handled, and kept no longer than 2 years (unless needed, for example, for a legal dispute).
- Posted deals: kept until the deal ends or is deleted. In-store deals’ product and price tag photos are deleted along with the deal.
- Photos and content sent to AI providers: may be kept for a period for abuse prevention under each provider’s API terms, then deleted.
5. Your choices and rights
- Clearing your browser’s site data deletes the visitor ID, and you are counted as a new visitor afterwards. In a private (incognito) window it is deleted when you close the window.
- You can ask to see, correct or delete messages you sent or deals you posted. Please reach us by our contact page.
- California residents: Under the California Consumer Privacy Act (CCPA/CPRA) you have the right to know the categories and specific pieces of personal information collected, to request deletion or correction, to opt out of sale or sharing, and not to be discriminated against for exercising these rights. Dealboja does not sell personal information or share it for cross-context behavioral advertising.
We may ask for additional information to verify your identity when you make a request.
6. Children’s privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children. If we learn that information from a child under 13 has been collected, we delete it promptly.
7. Security
All communication is encrypted (HTTPS), and admin features are available only to authenticated operators. No transmission or storage over the internet can be guaranteed 100% secure.
8. Users outside the US
The Service is operated in the United States, and information is stored and processed on servers in the US. If you use it from outside the US, you agree to the transfer of your information to the US.
9. Changes to this policy
If this policy changes, we will post the new version on this page and update the effective date. We will announce important changes on the Service.
10. Contact
For privacy questions, please reach us by our contact page.