Privacy

What we collect from readers

This release does not load Vercel Web Analytics or third-party ad scripts. Ordinary hosting request logs may still include IP addresses and requested URLs. For browser-local PDF processing and its boundaries, see our PDF file privacy notice.

We do not run advertising cookies, do not build a profile of you, and there is no newsletter and no reader account.

Cookies

The static edition has no login portal and does not set application cookies. In a server-hosted edition, the optional owner portal sets promotcha_admin_sessiononly after the site owner signs in at /admin. It is HttpOnly, SameSite=Strict and expires after 12 hours. It is never set for ordinary visitors and it contains no personal data — only a signed timestamp.

Outbound links

Clicking a product link takes you through /go/<tool>, which redirects you to the vendor. If the vendor's affiliate programme is active, the destination may include a tracking identifier so a commission can be attributed. That happens on the vendor's site, under the vendor's privacy policy, not ours.

The owner portal

The static edition has no owner portal or OTP endpoints. In the optional server-hosted edition, the owner portal is not a public service. To sign in, the owner either receives a one-time code on their own WhatsApp number or enters a long-lived access code held in the server environment. Phone numbers used for that purpose are processed only to deliver the code and are not stored in a database by this site.

Your rights

Since we hold no reader data, there is little to request or erase. If you believe we hold something about you, write to info@promotcha.app and we will look into it.

Changes

If this policy changes materially — for example if we add analytics — we will update this page and the “last reviewed” date above.