Your privacy.

Vouchernaut stores only the information needed for the features you choose to use. If you create an account, we keep your name and email address, the stores you follow, and your cashback, claims and any payout details you give us, so we can pay what you earn. If you sign in with Google, Google shares your name, email address and profile picture with us: we keep the name and email address, and Google's ID for your account so it can sign you in again, but not the picture or anything else from Google. Newsletter signup stores your email address, selected topics and consent history. Marketing emails require confirmation. Personal links in emails let you change preferences or unsubscribe without logging in. Delivery, bounce and complaint events are recorded; suppressed addresses are excluded from campaigns.

A contract reminder from the internet checker stores your email address, whether the contract is broadband, mobile or energy, as much of its end date as you give us (the day, the month, the year, or that you're not sure), the postcode you checked (for broadband and mobile only, whose emails link what's available there), and the provider if you choose one from the list. We use it only to email you before the contract ends, as the box you tick says: with the day, once, 30 days before it ends (or straight away, if that's passed); with the month, once, on the 1st of the month before it ends (or straight away, if that's passed); with the year, once, on 1 February of the year it ends (or straight away, if that's passed), to ask for the exact date; and if you're not sure, twice, on the next 1 February and the next 1 November (before April's price rises and Black Friday), to ask when it ends. Energy reminders need at least the year, and a contract with no end date brings no email. Every email has a link to change the date. It isn't used for anything else and doesn't sign you up to the newsletter. We also keep the wording you agreed to and when you confirmed, as a record of your consent, and for a day a one-way hash of your internet address, so nobody can flood the form. Nothing is sent until you confirm your address from the email we send, and a request you don't confirm is deleted within three days. We delete a reminder 60 days after the latest its contract could end (the last day of the month or year you gave), or 18 months after you set it if you weren't sure and haven't added the date. To cancel sooner, use the link in any of our emails, which deletes it straight away.

If you have an account, My household keeps your broadband, mobile and energy: who provides each (the name you type, if it isn't listed), as much of each end date as you know, and your postcode if you add it. Reminders are off unless you tick the box for a contract; then they go to your account's email address on the same days as above, with a link back to your account to change the date and one that turns them off without signing in. We keep the wording you agreed to and when. Broadband and mobile reminders link to what's available at your household's postcode, so changing it changes that wording, which we record again. We clear a contract's end date and turn its reminders off 60 days after the latest it could end. Your household is deleted with your account, and the privacy page below shows, downloads or erases it, with any internet checker reminders for your address.

Store cards (vouchernaut.com/cards) keeps your loyalty cards on your phone. The camera's picture and any photo you pick are read on your device to find the barcode, and are never uploaded or kept. Signed out, your cards stay in this browser and their numbers never reach us (to show a card's codes and deals, the page asks us for them by its scheme alone); anyone using the browser can see them, and clearing its site data deletes them. Signed in, this browser also keeps a copy of your cards, the cards your families share with you, and your families' names and members' names, so they open at the till with no signal; a card scanned with no signal waits there until it reaches your account. The copy on the phone isn't encrypted, so anyone using this browser while you're signed in can see it, and it's deleted when you sign out, your session ends or someone else signs in here. So the page opens with no signal, this browser also keeps a copy of it, its files and the card logos, never anything about you. With an account, we keep each card's number, its barcode type, the scheme it belongs to (recognised from the number, or the one you pick) and when you added or changed it. We encrypt each number before we store it (the key is on our servers, which is how we can show your cards on any device you sign in on), and keep a keyed hash of it so the same card isn't saved twice. Cards on your phone move into your account by themselves if you follow a sign-up link on /cards and come back signed in within a day; otherwise they stay on the phone until you tap Save. We keep your cards to provide the service you asked for, which is our lawful basis: our contract with you. An open card shows its stores' live codes and deals and, if you're signed in, products you watch there whose price has dropped. We don't read your points or what you buy with your cards, and don't pass them to the stores, the schemes or anyone you haven't shared them with. A brand with a verified store page here can see how many members keep its card and how many share it with a family, only once at least 25 do and never who they are, and our editors see the exact numbers to choose which stores to work on; that's our legitimate interest in running the site, and the numbers never identify you. With analytics consent, the page records what you do on it, such as scanning, sharing or showing a card at the till, with the card's scheme, its barcode type, counts and any offer you tap, never a card's number, a name or an email address. A card stays until you delete it, which deletes it at once for you and everyone you shared it with. Deleting your account deletes your cards, and the privacy page below includes them in your download and deletes them if you erase.

To share cards, you start a family and invite people by email or with a link. We keep the family's name and who's in it. Everyone in it sees that name and the name on each member's account. Only the person who started a family can invite people, and only they see email addresses: those of the invitations still open, and of people asking to join through a link. The invitation comes from Vouchernaut with their name and the family's, can only be accepted by signing in with the address it went to, and runs out after a week if it's ignored. We send it because they asked us to, in our legitimate interest in passing it on. They can also make a join link, which works for a week; making a new one or switching it off stops the old one. Anyone the link reaches can see, without an account, the family's name, the first name of the person who shared it, how many people are in it and which kinds of card it shares, never a card's number. To ask to join, someone needs an account with a confirmed email address; we email their name and address to the person who made the link, who lets them in or says no, and tell that person's phone too if they've turned on notifications. The email carries a link that answers the request without signing in for 48 hours, or until the join link ends if that's sooner; opening it decides nothing until Approve or No is tapped. Someone asking sees none of the family's cards until they're let in. While they wait they can pick cards of their own to share, which we keep with the request and share only once they're in. Someone let in is emailed to say so, and their request is deleted. Someone turned down is told only that it wasn't accepted. A request ends when the link it came through is switched off or stops working. A link, and any requests made through it, including ones turned down or ended, are deleted 30 days after the link stops working. We keep only a scrambled form of each link, never the link itself, and to stop links being guessed we count how often each internet address opens them, in our servers' memory only. The invitation, its address and whether it was accepted, declined, cancelled or ran out stay with the family until it ends or the person who sent it deletes their account, and our log of account changes (a family started, renamed or ended, invitations sent and answered, people leaving or removed, and who did each) records the address too. Sharing a card is your decision, under your card scheme's own terms, so check your card's terms. Once you share one, everyone in that family can see its number, barcode and scheme and your name, and show it at the till, but can't change or delete it. Where a scheme lets points or a balance be spent at the till, they could spend those too, so share those cards with people you trust. A shared card stops showing for them, from the next time they open their cards with a connection, once you stop sharing it, delete it, leave or are removed from the family, or the family ends; we can't take back what they've already seen. Deleting your account ends any family you alone started and takes your cards out of the rest.

Signing in uses a session cookie. Cookie settings let you accept, reject or customise optional analytics, advertising and third-party media separately from email preferences. Media consent allows embedded Google Maps, Spotify, SoundCloud, YouTube, TikTok, Instagram and Reddit content across the site; these services may use cookies and collect usage data. The choice is saved in this browser for 180 days and can be withdrawn in Cookie settings. With analytics consent, events recorded while you have no connection wait in this browser, up to 50 for up to a week, and are sent once you're back online; withdrawing consent deletes them. With advertising consent, we store Google ad click identifiers and selected campaign parameters for up to 90 days, linked through an HttpOnly cookie. Outbound affiliate links use a random reference, which we match to network-reported sales and commission. Google identifiers are not included in merchant links. Rejecting or revoking advertising consent removes the attribution record for this browser. Without that consent, outbound clicks use an unlinked reference. Configured owned sites may exchange a signed reference with consent on both sites.

The Vouchernaut browser extension downloads our list of store websites and checks the sites you visit against it on your own device. The addresses of sites that aren't stores we cover, and your searches, never leave your browser. When you're on a store we cover, the extension asks our site for that store's codes. Signing in from the extension opens our sign-in page, and the extension checks with our site until you're in; it never sees your password or your Google account. If you're signed in to Vouchernaut, it uses your existing session to show your wallet balance, where your cashback goes and whether you follow the store. Copying a code sends nothing but the fact it was opened. Only when you tap to activate cashback, open a deal or shop an offer does the extension send you through our tracking link, like any link on this site, which records the click so a sale can be credited. Saying whether a code worked, following a store and opening a code are recorded as they are on the site. The extension's sidebar follows the tab you're on in the same way: it checks the address against our list on your device and asks our site only for the store you're on. Away from a store it shows the same codes, price drops, poll and sponsored space to everyone, chosen without looking at what you browse. If you're signed in it also shows your own wallet, new codes at stores you follow, price drops on products you watch, offers for your saved store cards, a contract in My household ending soon and events near your household's postcode, all read from your account rather than from the sites you visit. Answering a poll there is recorded as it is on the site. The extension keeps its settings, the stores you've hidden it on, your answers about codes (for a day) and this session's activations in your browser. It doesn't read or collect what you type, your basket or your payment details, and it never sells or shares browsing data. It fills a shop's promo-code box only when you ask it to. Removing the extension deletes what it stored in your browser.

AI assistants such as ChatGPT and Claude can look things up on Vouchernaut through our MCP server (vouchernaut.com/mcp). It needs no account and receives only what the assistant sends to look something up: a store, product, phone, place or search words. We keep a count of calls by tool and by assistant, with a keyed hash of the calling address (or of the assistant's own anonymous user reference, when it sends one) so we can apply fair-use limits, and the words searched for, to see what's useful; never your name, email or conversation. Codes the server hands out are counted as opened, as they are on the site, and links it gives go through our tracking link like any link here.

To see, correct or delete what we hold about you, or to ask anything about this notice, email [email protected].

Verified status. When you verify once with Vouchernaut, as a student, NHS staff or another group, we keep the email address you proved, which group it showed you belong to and when your status ends. We keep these as we keep any verification we run, and delete a status 90 days after it ends or you remove it. Brands whose offers you unlock with it, or that you share it with on their own site, learn only that you're verified, not your email address, unless you choose to share details with them for an offer. You can remove a status from your account, which ends it everywhere, and see, download or erase everything we hold for an email address.

When you verify as a student, key worker or another group for a brand's discount, Vouchernaut runs the check for that brand. See, download or delete your verification data, your household and your contract reminders, and download or delete your store cards.