Privacy Policy

1. Introduction

ThriftShop ("we", "us", "our") is operated by Qalam Software. This Privacy Policy explains how we collect, use, and protect your information when you use our website (thriftshop.me), browser extension, and mobile applications (collectively, "Service").

We are committed to protecting your privacy and being transparent about our practices. This policy is designed to be clear and easy to understand.

2. Data We Collect

2.1 Data We DO Collect

Data Type	Purpose	Retention
Anonymous usage stats	Improve code rankings	Aggregated, indefinite
Code feedback (worked/didn't work)	Calculate success rates	Indefinite
Favorite stores (if logged in)	Personalization	Until account deletion
Language preference	Display content in your language	Until changed/deleted
Device type & browser	Bug fixing, compatibility	30 days
Email (if provided)	Account, notifications	Until account deletion

2.2 Data We DO NOT Collect

❌ Your browsing history (we only detect checkout pages)
❌ Your shopping cart contents
❌ Your payment information
❌ Your personal identity documents
❌ Your location (beyond country for code filtering)
❌ Data from other browser tabs
❌ Your passwords or login credentials

3. Mobile App - Accessibility Service (Android)

⚠️ Important Declaration - Accessibility Service Usage

ThriftShop uses Android's Accessibility Service EXCLUSIVELY to detect promo code input fields in shopping applications and automatically insert discount codes to help you save money.

🔒 We EXPLICITLY DO NOT:

❌ Read your emails or any messaging app content
❌ Access your passwords or login credentials
❌ View your credit card numbers or payment information
❌ Monitor your keystrokes outside of promo code fields
❌ Collect any personal or sensitive information
❌ Track your activity across other applications

Our Accessibility Service works as follows:

✅ What We DO

• Detect text input fields labeled as "promo", "coupon", "discount", "voucher"
• Insert promo codes into those specific fields only
• Work only in recognized shopping applications

How Detection Works

We scan view hierarchies for input fields with IDs or labels containing keywords like "promo", "coupon", "code", "voucher", "discount", "gutschein", "rabatt", etc. We do NOT read the content of any other fields.

Data Transmitted

Zero personal data is transmitted. We only send anonymous statistics about whether a code worked (success/failure count), never any information about you, your device, or your activities.

User Control

You can disable the Accessibility Service at any time in your device's Settings → Accessibility → ThriftShop. The app will continue to work (without auto-fill functionality).

4. Browser Extension Privacy

Our browser extension requires certain permissions to function. Here's exactly what each permission does:

activeTab

What it does: Allows us to detect when you're on a checkout page and find the promo code input field.

What we DON'T do: We don't read page content, form data, or anything else. We only look for checkout indicators and promo code fields.

storage

What it does: Stores your preferences (auto-apply on/off, language) locally on your device.

What we DON'T do: This data stays on your device. We don't upload your preferences to our servers.

5. iOS Safari Extension Privacy

On iOS, ThriftShop works as a Safari Web Extension. Similar to our Android app:

The Safari Extension ONLY:

• Detects promo code input fields on shopping websites
• Injects discount codes into those fields
• Stores preferences locally on your device

It cannot access other Safari tabs, your browsing history, passwords saved in Safari, or any data outside of the active shopping page.

6. How We Use Your Data

📊 Improve code rankings: Feedback helps us show the best codes first
🔧 Fix bugs: Technical data helps us identify and fix issues
📧 Communications: Send important updates (if you have an account)
📈 Analytics: Understand how our service is used (anonymized)

We NEVER use your data for: Targeted advertising, selling to third parties, building personal profiles, or tracking you across the web.

8. Affiliate Link Tracking

When you click an affiliate link, the merchant may place a cookie to track the referral. This is standard affiliate marketing practice and is handled by the merchant, not by ThriftShop.

We clearly mark affiliate links
We track aggregate click counts (not individual users)
The merchant's cookie policy applies to their site

9. Your Rights (GDPR)

Under GDPR and similar regulations, you have the right to:

Access

Request a copy of your data

Rectification

Correct inaccurate data

Erasure

Delete your data ("right to be forgotten")

Portability

Export your data in a standard format

Objection

Object to certain processing

Withdraw Consent

Withdraw consent at any time

To exercise these rights, contact: privacy@thriftshop.me

10. Data Security

We protect your data with:

HTTPS encryption for all data transmission
Encrypted database storage
Regular security audits
Limited employee access to data
GDPR-compliant hosting in the EU

11. Children's Privacy

ThriftShop is not intended for children under 16. We do not knowingly collect data from children. If you believe we have collected data from a child, please contact us immediately.

12. International Data Transfers

Our servers are located in the European Union. If you access our service from outside the EU, your data will be transferred to and processed in the EU, which has strong data protection laws.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:

Email (if you have an account)
In-app notification
Notice on our website

14. Contact Us

Data Controller: Qalam Software

Email: privacy@thriftshop.me

Website: thriftshop.me

Version History

Version	Date	Changes
1.0	2024-12-06	Initial version

🔒 Privacy at a Glance