This policy explains what personal data is processed when you use bestonlinecoupon.com (“the site”, “we”, “us”), why, and what rights you have. We have written it with the EU General Data Protection Regulation (GDPR) in mind. The site is hosted on a server in Germany and is used by visitors from many countries.
1. Who is responsible
The controller for the processing described here is the operator of bestonlinecoupon.com. You can reach us for all privacy matters at [email protected].
2. Summary
- You can use the site without an account and without giving us your name or email.
- Our web server keeps short-lived technical logs for security, deleted after about 14 days.
- Google Analytics 4 is only loaded if you click “Accept” in the cookie banner.
- When you click through to a store, the affiliate network and the store set their own cookies.
- We do not sell your personal data.
3. What we process and why
3.1 Server logs
When you visit a page, our web server automatically records technical information. This includes your IP address, the date and time, the requested address, the HTTP status code, the referring page and your browser’s user-agent string. We use this to deliver the site, to detect and prevent abuse and attacks, and to fix errors.
Legal basis: our legitimate interest in operating a secure and working website (Art. 6(1)(f) GDPR).
Retention: logs are deleted automatically after about 14 days. If a specific security incident has to be investigated, the relevant entries may be kept until it is resolved.
3.2 Google Analytics 4 (only with your consent)
If you click “Accept” in the cookie banner, we load Google Analytics 4. This tool helps us understand how the site is used, for example which pages are visited and how visitors arrive. Google Analytics then sets cookies (such as _ga) and processes usage data, including an online identifier and your IP address. Under Google’s own processing, the IP address is not logged or stored in Google Analytics 4. We have not enabled advertising features, Google Signals or data sharing for advertising.
If you click “Reject” or make no choice, Google Analytics is not loaded and no analytics cookies are set. The site uses Google’s Consent Mode with all storage types set to “denied” by default.
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, and such transfers are covered by the European Commission’s adequacy decision for that framework.
Legal basis: your consent (Art. 6(1)(a) GDPR and, for storing and reading cookies, § 25(1) TDDDG / Art. 5(3) of the ePrivacy Directive).
Retention: Google Analytics user-level data is kept for the retention period configured in our Google Analytics account, at most 14 months. The _ga cookies expire after up to 2 years unless you delete them or withdraw consent.
Withdrawing consent: use the “Cookie settings” link in the footer and choose “Reject” at any time. We then stop loading Google Analytics and remove its cookies for our domain.
3.3 Remembering your cookie choice
Your choice in the cookie banner (“granted” or “denied”) is stored in your browser’s local storage under the key boc_consent, so we don’t ask again on every page. It is not sent to our server. You can remove it at any time by clearing site data in your browser.
Legal basis: storing this is strictly necessary to respect your choice (§ 25(2) TDDDG; Art. 6(1)(c) and (f) GDPR).
3.4 Clicking through to a store (affiliate links)
Buttons such as “Show code”, “Get deal” and “Visit store” send you through an address on our site starting with /go/. From there you are forwarded to the store, usually via an affiliate network such as CJ, Awin, Impact, Rakuten Advertising or AvantLink. For each offer we count how often its link was clicked. This count is a plain number and is not linked to you.
When you arrive at the network or the store, they collect data and set cookies or similar identifiers. They use these to record that you came from us, so that a purchase can be attributed and a commission paid. This processing happens on their websites under their own privacy policies, and they are responsible for it. Please check the privacy policy of the store and network concerned. See also our affiliate disclosure.
3.5 Store logos
Some store logos are loaded directly from servers operated by the stores or their affiliate networks. When your browser loads such an image, that server receives your IP address and browser information, as with any web request. We request these images without sending the address of the page you are viewing.
Legal basis: our legitimate interest in showing recognisable store logos (Art. 6(1)(f) GDPR).
3.6 “Code didn’t work?” reports
If you report that a code did not work, we record the report against that coupon. To prevent the same report being sent repeatedly or abused, we store a one-way hashed (salted) version of your IP address for 24 hours. We cannot reverse it into your IP address.
Legal basis: our legitimate interest in keeping listed offers accurate and preventing abuse (Art. 6(1)(f) GDPR).
Retention: the hashed value is deleted automatically after 24 hours. The report count on the coupon contains no personal data.
3.7 Emails you send us
If you email us, we process your email address, your message and any other details you include, in order to answer you.
Legal basis: our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR), or steps taken at your request (Art. 6(1)(b) GDPR).
Retention: we delete the correspondence once your enquiry is fully dealt with, unless we are legally required to keep it longer.
4. Cookies
The site itself does not set cookies for ordinary visitors. Cookies are only set:
- by Google Analytics, and only after you click “Accept” (see 3.2);
- by affiliate networks and stores after you click through to them (see 3.4);
- by WordPress for people who log in to manage the site.
5. Who receives data
- Our hosting provider, which operates the server in Germany on our behalf under a data processing agreement.
- Google, for Google Analytics, only if you have consented.
- Affiliate networks and stores, only when you choose to click through to them.
We do not sell, rent or trade your personal data, and we do not share it for other companies’ advertising.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data deleted (Art. 17);
- restrict processing (Art. 18);
- receive your data in a portable format (Art. 20);
- object at any time to processing based on our legitimate interests, on grounds relating to your particular situation (Art. 21);
- withdraw your consent at any time with effect for the future, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).
To exercise these rights, email [email protected]. We may need to ask for information to confirm your identity. Please note that we usually cannot link server logs or analytics data to a named person.
You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work or where you think an infringement took place.
7. No automated decisions
We do not make decisions about you based solely on automated processing, and we do not build profiles of individual visitors.
8. Children
The site is not aimed at children, and we do not knowingly process personal data of children.
9. Security
The site is served only over encrypted HTTPS connections. We take reasonable technical and organisational measures to protect the data we process.
10. Changes to this policy
We will update this policy when the site or the law changes. The date below shows when it was last changed.
Last updated: September 28, 2026