Privacy policy
2026-09-09
This is a deals site, not a shop. There is no basket, no payment and no customer account. This policy is short because it describes exactly what happens, and not much happens.
Who is responsible
AJ Investment UG (haftungsbeschränkt) Im Mittelvenn 39 52152 Simmerath Deutschland Email: alex@salewunder.com
When you open a page
Our host (Google Cloud Run, Google Ireland Limited) processes technically necessary server logs on every request: truncated IP address, timestamp, the address requested, and browser and operating system identifiers. This is needed to serve the site and to defend it against attacks (Art. 6(1)(f) GDPR). These logs are not combined with anything else.
Cookies and tracking
On this site we use the Meta Pixel and the Meta Conversions API (Meta Platforms, Inc.) to measure our ads on Facebook and Instagram. The Pixel sets a first-party cookie (_fbp) and, when you arrive from an ad, reads the click identifier (_fbc). We report three events: a page view, when you hand over your email address (sent to Meta only as an irreversible hash), and when you click through to a shop. Meta may combine this with what it knows about your Meta account to show you ads; you can control that in your Facebook or Instagram ad settings, and in your browser by blocking third-party scripts or cookies. We set no other analytics or advertising cookies. If you unlock a deal, your browser also remembers your email address locally on your own device (localStorage); it leaves your device only when you submit it yourself.
Unlocking deals and alerts
If you enter your email address to unlock a deal or to be told about an upcoming drop, we store the address, the market and section you were interested in, and the time. The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via the unsubscribe link in any email, or by writing to alex@salewunder.com. We delete the address on withdrawal.
Clicks on shop links
When you click through to a shop we record which deal it was, the time, the market and your browser identifier. Where an address is known, we store an irreversible hash of it rather than the address itself. That shows us which deals land without building a click profile tied to a person. The legal basis is our legitimate interest in measuring the site (Art. 6(1)(f) GDPR).
Going to the shop
The outbound link carries our partner tag. From the moment you click, the shop’s own privacy policy applies — what Amazon, Target or Walmart record is their decision, not ours.
Processors
- Google Ireland Limited — hosting, database and image storage (Google Cloud, European region).
- Resend, Inc. — sending notification emails. Transfer to the USA on the basis of the EU Standard Contractual Clauses.
- Discord Inc. (USA) — internal notifications to our own team channel about new sign-ups and daily totals. What is sent is the time, the market, the section and brand, and a masked form of the email address, not the full address.
- Meta Platforms, Inc. — ad measurement (Meta Pixel and Conversions API), US, Canadian and Australian pages only.
How long we keep things
Email addresses are kept until you withdraw consent. Click logs are deleted after 12 months. Server logs are deleted by the host on its own schedule.
Your rights
You have the right of access, rectification, erasure, restriction, data portability and objection. An informal email to alex@salewunder.com is enough. You may also complain to a supervisory authority; ours is the Data Protection Commissioner of North Rhine-Westphalia, Germany.