Your privacy.

Vouchernaut stores only the information needed for the features you choose to use. If you create an account, we keep your name and email address, the stores you follow, and your cashback, claims and any payout details you give us, so we can pay what you earn. If you share a code, we keep it with what you told us about it and an editor's answer; once it's live, your first name shows beside it only if you chose that, and deleting your account deletes what you sent us, while a code we added stays on the store's page without your name. If you sign in with Google, Google shares your name, email address and profile picture with us: we keep the name and email address, and Google's ID for your account so it can sign you in again, but not the picture or anything else from Google. Newsletter signup stores your email address, selected topics and consent history. Marketing emails require confirmation. Personal links in emails let you change preferences or unsubscribe without logging in. Delivery, bounce and complaint events are recorded; suppressed addresses are excluded from campaigns.

A contract reminder from the internet checker stores your email address, whether the contract is broadband, mobile or energy, as much of its end date as you give us (the day, the month, the year, or that you're not sure), the postcode you checked (for broadband and mobile only, whose emails link what's available there), and the provider if you choose one from the list. We use it only to email you before the contract ends, as the box you tick says: with the day, once, 30 days before it ends (or straight away, if that's passed); with the month, once, on the 1st of the month before it ends (or straight away, if that's passed); with the year, once, on 1 February of the year it ends (or straight away, if that's passed), to ask for the exact date; and if you're not sure, twice, on the next 1 February and the next 1 November (before April's price rises and Black Friday), to ask when it ends. Energy reminders need at least the year, and a contract with no end date brings no email. Every email has a link to change the date. It isn't used for anything else and doesn't sign you up to the newsletter. We also keep the wording you agreed to and when you confirmed, as a record of your consent, and for a day a one-way hash of your internet address, so nobody can flood the form. Nothing is sent until you confirm your address from the email we send, and a request you don't confirm is deleted within three days. We delete a reminder 60 days after the latest its contract could end (the last day of the month or year you gave), or 18 months after you set it if you weren't sure and haven't added the date. To cancel sooner, use the link in any of our emails, which deletes it straight away.

If you have an account, My household keeps your broadband, mobile and energy: who provides each (the name you type, if it isn't listed), as much of each end date as you know, and your postcode if you add it. Reminders are off unless you tick the box for a contract; then they go to your account's email address on the same days as above, with a link back to your account to change the date and one that turns them off without signing in. We keep the wording you agreed to and when. Broadband and mobile reminders link to what's available at your household's postcode, so changing it changes that wording, which we record again. We clear a contract's end date and turn its reminders off 60 days after the latest it could end. Your household is deleted with your account, and the privacy page below shows, downloads or erases it, with any internet checker reminders for your address.

Watching a product's price (Watch the price, in the shop on the site and in the app) keeps your email address, the product, its price when you started watching, any target price you set, when you asked and confirmed, and the price and date of our last email about it, so the same price isn't sent twice. Watching the lowest price of something several shops sell (Watch the lowest price, on its page comparing those shops) keeps the same, with the item's barcode number and its lowest total across those shops (the price plus delivery where the shop says what delivery costs) in place of the product and its price, and the email names whichever shop is cheapest that morning. Watching a game's lowest price on one platform, such as Steam or PlayStation (Watch the lowest price, on the game's page), keeps the same, with the game and the platform in place of the product, and the lowest price on that platform at any shop selling it, in any edition, and whether that shop adds fees at checkout; the email names the shop, the edition and the form (a key, a download or a boxed copy). Watching a gift card's or membership's lowest price, such as a PlayStation Store card or Game Pass (Watch the lowest price, on its page), keeps the same, with the card or membership in place of the product, and the lowest price at any shop with a UK code for it in stock, with the fee that shop's feed gives, if it gives one, and whether that shop adds fees at checkout; the email names the shop and its fees. Signed out, you give your email address and tick a box that says "Email me when this product's price drops, with a link to buy it. Nothing else, and you can stop any time." (with a target price, it asks to hear when the product is that price or less), and we keep those words as a record of your consent. We send a link to confirm, which works for 24 hours, and nothing else until you do; a request you don't confirm is deleted within two days of its link stopping working. While it waits, we keep a keyed one-way hash of your internet address, so nobody can flood the form, and clear it when you confirm. Signed in, one tap starts a watch for your account's email address, with no email to confirm. We email you after the price drops, or once it reaches your target, from 9am UK time, at most once a day for each address, with every watch that's due. Links to buy go through our tracking link like any link on the site, and every price-drop email has a link to stop each watch in it and one to stop every watch at your address. For a watch you started or changed signed in, the email can also come as an alert in your browser or the app if you've turned alerts on there, and you can turn price-drop alerts off on their own. A watch doesn't sign you up to the newsletter, but if you get the Weekly or deal alerts, their For you section shows products and lowest prices you watch that are now cheaper than when you started, and we may choose which of our newsletter emails go to you by whether you watch a price. A watch stays until you stop it, which deletes it straight away: from the link in any of its emails or, signed in, from the product, the comparison page, the game's or gift card's page or your account. We delete watches 90 days after the store stops listing the product, after fewer than two shops sell the item, after no shop sells the game, or after no shop has an offer for the gift card or membership, and the ones you started or changed signed in when you delete your account; deleting your account doesn't stop the ones you started signed out. The privacy page below includes every watch at your address in its download, whether you started it signed in or signed out, and deletes them all if you erase.

Asking to hear when something sold out is back (Tell me when it's back, on a sold-out product in the shop, or on the page comparing shops when none of them has it in stock) keeps your email address, the product (or the item's barcode number), its price when you asked, when you asked and confirmed, and when we emailed you and the price that email gave. Signed out, you tick a box that says "Email me once when this product is back in stock at this shop, with a link to buy it. Nothing else, and you can stop any time." (on a comparison page, any of its shops), we keep those words as a record of your consent, and confirming your address works as it does for a price watch; signed in, one tap is enough. We email you once, between 8am and 9pm UK time, as soon as a shop selling it says in its product feed that it's in stock, with every watch of yours that came back at the same time in one email. For a watch you started signed in, it can also come as an alert in your browser or the app if you've turned alerts on there, and you can turn back-in-stock alerts off on their own. Its links to buy go through our tracking link like any link on the site. The watch then ends. We keep it 30 more days, so the email's Watch the price link works (it starts a price watch for the same address, as above), then delete it. If it isn't back after 120 days, we delete it and send one last email saying so. It isn't used for the Weekly, deal alerts or choosing which of our emails go to you. You can stop it from the link in its emails or, signed in, from the product, the comparison page or your account, which deletes it straight away. The privacy page below includes it in its download and deletes it if you erase.

Following a price list (Tell me if it goes up, under the plans on a cost page at vouchernaut.com/cost) keeps your email address, the lists you follow (up to 20), when you asked, and a record of each rise email we send you: when, and whether it was delivered. Signed out, you give your email address and tick a box that says "Email me when a price I follow goes up: one email per rise, nothing else. I can stop from any email.", and we keep those words as a record of your consent; we send a link to confirm, which works for 24 hours, and nothing about the list until you do. Signed in, one tap follows the list for your account's confirmed email address. We email you once for each price rise we record on a list you follow, never for a cut or for a rise that took effect more than 30 days before we recorded it. The email links only to our own pages, with no codes and no links to buy. Following a list doesn't sign you up to the Weekly or any other email. Every rise email has a link that stops that list and one that stops every price rise email, and signed in you can stop them from your account's Emails page. The privacy page below includes the lists you follow and the rise emails we sent you in its download, and forgets them if you erase.

Store cards (vouchernaut.com/cards) keeps your loyalty cards on your phone. The camera's picture and any photo you pick are read on your device to find the barcode, and are never uploaded or kept. Signed out, your cards stay in this browser and their numbers never reach us (to show a card's codes and deals, the page asks us for them by its scheme alone); anyone using the browser can see them, and clearing its site data deletes them. Signed in, this browser also keeps a copy of your cards, the cards your families share with you, and your families' names and members' names, so they open at the till with no signal; a card scanned with no signal waits there until it reaches your account. The copy on the phone isn't encrypted, so anyone using this browser while you're signed in can see it, and it's deleted when you sign out, your session ends or someone else signs in here. So the page opens with no signal, this browser also keeps a copy of it, its files and the card logos, never anything about you. With an account, we keep each card's number, its barcode type, the scheme it belongs to (recognised from the number, or the one you pick) and when you added or changed it. We encrypt each number before we store it (the key is on our servers, which is how we can show your cards on any device you sign in on), and keep a keyed hash of it so the same card isn't saved twice. Cards on your phone move into your account by themselves if you follow a sign-up link on /cards and come back signed in within a day; otherwise they stay on the phone until you tap Save. We keep your cards to provide the service you asked for, which is our lawful basis: our contract with you. An open card shows its stores' live codes and deals and, if you're signed in, products you watch there whose price has dropped. We don't read your points or what you buy with your cards, and don't pass them to the stores, the schemes or anyone you haven't shared them with. A brand with a verified store page here can see how many members keep its card and how many share it with a family, only once at least 25 do and never who they are, and our editors see the exact numbers to choose which stores to work on; that's our legitimate interest in running the site, and the numbers never identify you. With analytics consent, the page records what you do on it, such as scanning, sharing or showing a card at the till, with the card's scheme, its barcode type, counts and any offer you tap, never a card's number, a name or an email address. A card stays until you delete it, which deletes it at once for you and everyone you shared it with. Deleting your account deletes your cards, and the privacy page below includes them in your download and deletes them if you erase.

Your list (vouchernaut.com/list) works out the cheapest way to buy several things. Signed out, you keep one list, which stays in this browser and we don't store it: to price it, the page sends us only the barcodes or product numbers on it and how many of each, with nothing about you, and clearing the browser's site data deletes it. To stop the pricing being overloaded, we count those requests, and the opening of shared lists, by a keyed one-way hash of your internet address, held in memory for a minute. Signed in, you can keep several lists on your account, up to ten. We keep each list's name and, for each thing on it, a compare item's barcode or a product's number, how many, and when you added or changed it, so your lists are there on any device you sign in on. A list made signed out joins your account's first list on the first page you open signed in, and the browser's copy is then cleared. You can share a list by its link. Anyone with the link can read that list's name and what's on it, with the ways to buy it, but not your name or email address, until you stop sharing it; sharing it again makes a new link. The link stops working when you delete the list or your account. You can share a list as a wishlist instead: anyone with its link sees what's on it, with the lowest price we found for each thing, delivery included, at the shops we list, and can say they'll get something, giving a first name if they like. For each claim we keep the thing it's for, the name if one was given, when it was made, and a one-way hash of a secret that stays in the claimer's browser so they can undo it from there; we count claims by a keyed one-way hash of the claimer's internet address, held in memory for a minute. Others with the link see who's getting what. The list's owner never does: not on the list, not on its link while signed in, not in their download, and we don't tell them a claim was made. A claim is deleted when its thing comes off the list, when the claimer undoes it, or when the list or the owner's account is deleted; stopping sharing keeps claims for when the list is shared again. We keep claims on the basis of our legitimate interest in running wishlists for the people who share and use them; whoever made a claim can undo it from the browser they made it in, or ask us to delete it. You can also ask us to email you when a list on your account gets cheaper. We then keep, with that list, the words you agreed to, when you turned it on, the total we follow it from (its cheapest total with every shop's delivery known, without codes, when you turned it on) and which things and how many that total bought, when we last emailed you about it, and when we last priced it. From 9am each day we price the list once, and when that total has fallen by 5% or £1, whichever is more we email you, at most once a day, and send your devices an alert too if you've turned alerts on for price drops. After an email, we follow it from the total that email gave; when what's on the list changes, we start again from its new total. It stops when you turn it off, use the link in the email, or delete the list or your account. We keep your lists to provide the service you asked for, which is our lawful basis: our contract with you. Links from a list to shops go through our tracking links like any link on the site, and record that they came from a list, whether it was a shared one or a wishlist, and from which way of buying it. With analytics consent, the site records when you add something, how many things your list holds, and when you start, share or copy a list; on a wishlist, when someone says they'll get something (whether they gave a name, never the name) or undoes it. Your lists stay until you remove things or delete them. Deleting your account deletes them and their links, and the privacy page below includes them, with their names, whether each is shared as a list or a wishlist, any shared link and any watch, in your download and deletes them if you erase.

My games (vouchernaut.com/games/my) keeps the games you mark Want it, Own it or Not for me. Signed out, your marks stay in this browser and we don't store them: to show today's prices, the page sends us only the games' web addresses, with nothing about you, and clearing the browser's site data deletes them. To stop that pricing being overloaded, we count those requests by a keyed one-way hash of your internet address, held in memory for a minute. Signed in, we keep each game you mark, its mark and when you made it on your account, up to 2,000 games, so they're there on any device you sign in on. Marks made signed out join your account on the first page you open signed in, your account's mark staying where both marked the same game, and the browser's copy is then cleared, less any your account had no room for. Lists of games hide the ones you own or don't want in your browser: the page we send is the same for everyone. We keep your marks to provide the service you asked for, which is our lawful basis: our contract with you. With analytics consent, the site records when you mark a game, the mark and the page you made it on. Your marks stay until you take them off. Deleting your account deletes them, and the privacy page below includes them in your download and deletes them if you erase.

Photo search (vouchernaut.com/shop/snap) finds products that look like a photo, a screenshot or what's in front of your camera. It sends our server only the part you frame, as a small JPEG, with any barcode number your device read in it, and from the camera at most once a second. We match it against the shop's product photos and don't keep the picture. When faster live matches are on (they turn on by themselves on Wi-Fi), your device downloads the image model once from our own servers, reads the picture itself and sends only a list of numbers describing it. To stop anyone flooding it, we count searches by a keyed one-way hash of your internet address, kept only in our servers' memory and dropped soon after your last search. With analytics consent, we record that you searched, how long it took and the matches you open or mark as not it, never the picture.

To share cards, you start a family and invite people by email or with a link. We keep the family's name and who's in it. Everyone in it sees that name and the name on each member's account. Only the person who started a family can invite people, and only they see email addresses: those of the invitations still open, and of people asking to join through a link. The invitation comes from Vouchernaut with their name and the family's, can only be accepted by signing in with the address it went to, and runs out after a week if it's ignored. We send it because they asked us to, in our legitimate interest in passing it on. They can also make a join link, which works for a week; making a new one or switching it off stops the old one. Anyone the link reaches can see, without an account, the family's name, the first name of the person who shared it, how many people are in it and which kinds of card it shares, never a card's number. To ask to join, someone needs an account with a confirmed email address; we email their name and address to the person who made the link, who lets them in or says no, and tell that person's phone too if they've turned on notifications. The email carries a link that answers the request without signing in for 48 hours, or until the join link ends if that's sooner; opening it decides nothing until Approve or No is tapped. Someone asking sees none of the family's cards until they're let in. While they wait they can pick cards of their own to share, which we keep with the request and share only once they're in. Someone let in is emailed to say so, and their request is deleted. Someone turned down is told only that it wasn't accepted. A request ends when the link it came through is switched off or stops working. A link, and any requests made through it, including ones turned down or ended, are deleted 30 days after the link stops working. We keep only a scrambled form of each link, never the link itself, and to stop links being guessed we count how often each internet address opens them, in our servers' memory only. We delete each invitation and its address 30 days after its week is up, whether it was accepted, declined, cancelled or ignored, or sooner if the family ends or the person who sent it deletes their account. Our log of account changes (a family started, renamed or ended, invitations sent and answered, people leaving or removed, and who did each) records an invitation's address too, and we remove it from the log 30 days after that invitation's week is up, even if the invitation itself went sooner. Sharing a card is your decision, under your card scheme's own terms, so check your card's terms. Once you share one, everyone in that family can see its number, barcode and scheme and your name, and show it at the till, but can't change or delete it. Where a scheme lets points or a balance be spent at the till, they could spend those too, so share those cards with people you trust. A shared card stops showing for them, from the next time they open their cards with a connection, once you stop sharing it, delete it, leave or are removed from the family, or the family ends; we can't take back what they've already seen. Deleting your account ends any family you alone started and takes your cards out of the rest.

Replying to a verdict or a question needs an account with a confirmed email address. We keep what you post, when you posted and changed it, the name it shows (the one you choose under Account, then Sign-in and details, or your first name, never your email address), that you agreed to the house rules and when (with a keyed hash of your internet address and your browser's details, as a record of the agreement), and which posts you marked helpful, which others see only as a count. Your posts show publicly, with that name, beside what they reply to until you delete them, and deleting your account deletes your posts and your marks. Once a verdict closes, an editor may choose a reply to it as one of its readers' picks and quote it, with that name, on the verdict's page and in the Vouchernaut Weekly email; the quote is read from your post each time, so deleting the post takes it out of any Weekly not yet sent. A person at Vouchernaut checks posts waiting for a check and every report, and we keep a record of each decision, what it was about and why for 12 months, to apply the house rules fairly and answer appeals; that's our legitimate interest in keeping the site safe. Reporting a post or a store review needs no account. We keep the reason, any note, and any email address you give, which we use once to tell you what we decided and then delete. To count each person's report once, the report keeps a keyed one-way hash of your account or, signed out, of your internet address, and for 30 days a keyed hash of your internet address, so nobody can flood reports or report the same thing twice from one connection. Signed in, a report is also linked to your account, and deleting your account deletes it. We delete a report 12 months after we've dealt with it, and the writer is never told who reported them. The privacy page below includes your posts, the helpful marks you gave and the reports you made in its download; erasing there deletes your posts and marks and takes your account and address off your reports. Where the law requires it, we pass illegal content, and what we hold about who posted it, to the police or the right authority.

Ballpark (vouchernaut.com/ballpark), the daily price game, needs no account. This browser keeps your guesses for the day you're playing, so a reload carries on, and the days you've finished, for your average and streak; clearing its site data deletes them. Each guess (and each call, in Higher or Lower) is sent to us as you make it, so we can answer it with its price, and from the first one we keep the day's guesses or calls and what they scored, with a cookie that gives this browser a random id (we keep only a keyed one-way hash of it) and, signed in, a keyed one-way hash of your account too, so each person's game counts once and carries on where they left it, and for 30 days a keyed one-way hash of your internet address, so nobody can flood it. We use only finished games, and only for how everyone did that day: how many played and, once 20 have, the average score and how many got each one close, never who. Signed in, we also keep each day you finish with your account, and when you sign in we add the days this browser finished before you did, from the games we kept, so your record follows you to any device you sign in on; deleting your account deletes that record, and the privacy page below includes it in your download and deletes it if you erase. The games themselves stay in each day's numbers: erasing, or deleting your account, leaves nothing in them that leads back to you.

Verdicts (vouchernaut.com/verdicts) asks one money question a day, and voting needs no account. So each browser and each account votes once, your browser keeps a random id in a cookie for a year, and beside your vote we keep a keyed one-way hash of it, and of your account if you're signed in, never your name or email address. For 30 days we also keep a keyed hash of your internet address, so nobody can flood the vote. Only the totals show. Replies to a verdict are reader posts, kept as described above. Members with a confirmed email address can send us a dilemma of their own. We keep its words, when you sent it, the box you ticked ("Vouchernaut may edit my dilemma and publish it without my name.") and when, and whether we used it or not. Only our editors see it as you sent it. If we make a verdict from it, we edit it as the box says and email you once when that verdict opens. We delete a dilemma we haven't used 90 days after you sent it, one we used 30 days after its verdict opens, and one we used for a verdict that hasn't opened 180 days after you sent it; the verdict stays on the site as ours, without your name. Deleting your account deletes your dilemmas, and the privacy page below includes them in its download and deletes them if you erase.

Store pages carry questions about the shop that we publish, and readers answer them as posts like those above, except that every answer waits for a person at Vouchernaut to check it before anyone else sees it. Sending us a question about a shop needs an account with a confirmed email address and your agreement that we may edit and publish it without your name. We keep the question, the shop, when you sent it and agreed, and what we did with it, linked to your account, and only editors see it, never who sent it. If we publish a question made from yours, we email you once with a link to it; the published question is ours and doesn't name you. We delete a question you sent 90 days after you sent it if we didn't use it, or 30 days after we used it once the question made from it is published. Deleting your account deletes them, and the privacy page below includes them in its download.

Signing in uses a session cookie. Cookie settings let you accept, reject or customise optional analytics, advertising and third-party media separately from email preferences. Media consent allows embedded Google Maps, Spotify, SoundCloud, YouTube, TikTok, Instagram and Reddit content across the site; these services may use cookies and collect usage data. The choice is saved in this browser for 180 days and can be withdrawn in Cookie settings. With analytics consent, events recorded while you have no connection wait in this browser, up to 50 for up to a week, and are sent once you're back online; withdrawing consent deletes them. With advertising consent, we store Google ad click identifiers and selected campaign parameters for up to 90 days, linked through an HttpOnly cookie. Outbound affiliate links use a random reference, which we match to network-reported sales and commission. Google identifiers are not included in merchant links. Rejecting or revoking advertising consent removes the attribution record for this browser. Without that consent, outbound clicks use an unlinked reference. Configured owned sites may exchange a signed reference with consent on both sites.

The Vouchernaut browser extension downloads our list of store websites and checks the sites you visit against it on your own device. The addresses of sites that aren't stores we cover, and your searches, never leave your browser. When you're on a store we cover, the extension asks our site for that store's codes. Signing in from the extension opens our sign-in page, and the extension checks with our site until you're in; it never sees your password or your Google account. If you're signed in to Vouchernaut, it uses your existing session to show your wallet balance, where your cashback goes and whether you follow the store. Copying a code sends nothing but the fact it was opened. Only when you tap to activate cashback, open a deal or shop an offer does the extension send you through our tracking link, like any link on this site, which records the click so a sale can be credited. Saying whether a code worked, following a store and opening a code are recorded as they are on the site. The extension's sidebar follows the tab you're on in the same way: it checks the address against our list on your device and asks our site only for the store you're on. Away from a store it shows the same codes, price drops, poll and sponsored space to everyone, chosen without looking at what you browse. If you're signed in it also shows your own wallet, new codes at stores you follow, price drops on products you watch, offers for your saved store cards, a contract in My household ending soon and events near your household's postcode, all read from your account rather than from the sites you visit. Answering a poll there is recorded as it is on the site. The extension keeps its settings, the stores you've hidden it on, your answers about codes (for a day) and this session's activations in your browser. It doesn't read or collect what you type, your basket or your payment details, and it never sells or shares browsing data. It fills a shop's promo-code box only when you ask it to. Removing the extension deletes what it stored in your browser.

The Vouchernaut app for iPhone and Android shows the same codes, store cards and alerts as the site. When it's installed it makes a random id that stays on the phone; we keep only a keyed one-way hash of it beside each code you open and each answer about whether one worked, so one phone's answers count once and nobody can flood them. Signed in, the app keeps your session in the phone's secure storage, and as with a browser we keep the phone's internet address and the app's version and system with your session, for security and so Signed-in devices can show where you're signed in. If you turn on alerts, we keep the phone's push token with that session, and delete it when the phone signs out or within a day of the session ending. Alerts reach your phone through Expo's push service and then Apple's or Google's, which see the token and the alert's words, including the names in a family alert. We keep each alert we send you, to a phone or a browser, for 30 days with when you opened it, so you can find it again in the app under You, then Alerts; deleting your account deletes them, and the privacy page below includes them in its download. Store cards work as described above, with the app's own storage on the phone, which other apps can't read, in place of the browser's, except that cards kept on the phone move into your account by themselves when you sign in; the camera's picture and any photo you pick are read on the phone and never uploaded. A shop's page you share to the app, or a web address you paste into its search, is checked against our list of shops on your phone and isn't sent to us: the app asks our site only for the store it matches or, for a shop we don't list, for stores in the same category. If you tap Ask us to add it, we receive the shop's web address and count it for that day, with nothing about who asked. The guides, the shop and the site's other pages open inside the app as they do on the site, without the site's own analytics or advertising tags; videos and maps still wait for your tap. The stores you've opened lately, and the searches you opened something from, stay on the phone for the Stores tab's Recently opened and Recent searches; those lists aren't sent to us, and Clear removes them. Codes and deals you save stay on the phone and aren't sent to us: to show which are still listed, the app asks our site about them by their offer numbers alone, and the phone sets their reminders itself, so nothing about them goes through Apple, Google or us. If the app asks you to rate it, the rating goes to Apple or Google through their own prompt, and we don't see it. When the app checks for an update to its own screens, it sends Expo, which delivers them, its version and a random id for the install, nothing about you. If a screen stops working or an error closes the app, the app sends us what broke: the error's own words with long numbers, email addresses and the details of web addresses blanked, where in the app's code it happened, which screen it was (never which store or card), and the app's version and the phone's system, with nothing that says whose phone it is or who you are. We keep these reports for 30 days. Report a problem, under You, writes an email to us with the app's version and system filled in, which you can read and change before you send it. On Android, Google's barcode reader (ML Kit) sends Google diagnostic details about the phone and its own use, never the picture. To see what to improve, the app counts how it's used: the screens it shows and the pages of ours it opens, with the store or category they're about, the buttons you tap there (such as copying a code or showing a card), and the app's version and the phone's model and system. Each phone gets a random id that the app replaces every day, so these counts can't build up a history of you. They never include your name, email address, account, store cards, family, searches or anything you type, your internet address or where you are, and they're never used for advertising. PostHog, our analytics provider, keeps them for us on servers in Frankfurt under a data processing agreement and may not use them for anything else. They're kept for as long as PostHog keeps events on our plan: a year on its free plan, seven years on a paid one. Our lawful basis is our legitimate interest in improving the app, and the law allows this without asking first because you can object at any time: switch off Help improve the app under You, then Privacy, and the app stops at once and deletes its id. The app doesn't use your phone's advertising identifier, has no advertising tags and doesn't track you across other companies' apps or sites. Links to shops open in the phone's in-app browser and go through our tracking link like any link on the site. You can delete your account in the app (You, then Delete your account) or by emailing [email protected].

AI assistants such as ChatGPT and Claude can look things up on Vouchernaut through our MCP server (vouchernaut.com/mcp). It needs no account and receives only what the assistant sends to look something up: a store, product, phone, place or search words. We keep a count of calls by tool and by assistant, with a keyed hash of the calling address (or of the assistant's own anonymous user reference, when it sends one) so we can apply fair-use limits, and the words searched for, to see what's useful; never your name, email or conversation. Codes the server hands out are counted as opened, as they are on the site, and links it gives go through our tracking link like any link here.

To see, correct or delete what we hold about you, or to ask anything about this notice, email [email protected].

Verified status. When you verify once with Vouchernaut, as a student, NHS staff or another group, we keep the email address you proved, which group it showed you belong to and when your status ends. We keep these as we keep any verification we run, and delete a status 90 days after it ends or you remove it. Brands whose offers you unlock with it, or that you share it with on their own site, learn only that you're verified, not your email address, unless you choose to share details with them for an offer. You can remove a status from your account, which ends it everywhere, and see, download or erase everything we hold for an email address.

When you verify as a student, key worker or another group for a brand's discount, Vouchernaut runs the check for that brand. See, download or delete your verification data, your household, your contract reminders and your price watches, and download or delete your store cards and your list.

Reader posts and reports follow our house rules.

In the app: Cookie settings