Privacy & Cookies Policy
Last updated: June 24, 2026
This Privacy & Cookie Policy explains how YummyPenny, LLC, doing business as YummyPenny (“YummyPenny,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information when you access or use our website, paid subscription dashboard, data tools, account features, communications, checkout flow, and members-only community, including our Discord community (collectively, the “Service”).
YummyPenny is a paid subscription information service. We aggregate discount, price, availability, product, and price-history data from third-party retailers and data sources, generate algorithmic price-drop estimates and related informational outputs, and make that information available through a gated web dashboard and members-only community.
YummyPenny does not sell, ship, stock, warehouse, fulfill, broker, or guarantee any third-party retail products. We sell access to information about products offered by other companies.
The Service is intended only for users who are at least 18 years old.
1. Scope of This Policy
This Policy applies to personal information we collect when you:
- visit our website;
- create or manage a YummyPenny account;
- purchase, renew, cancel, or manage a subscription;
- access the dashboard;
- use price-tracking, watchlist, alert, prediction, or map features;
- connect Discord or join the YummyPenny Discord community;
- contact support;
- interact with our emails;
- use checkout, billing, or account-deletion features;
- otherwise interact with the Service.
This Policy does not apply to the privacy practices of third-party retailers, marketplaces, Discord, Stripe, Google, Cloudflare, or other third-party services that we do not own or control. Those third parties may have their own privacy policies and terms.
2. Personal Information We Collect
Account Information
We may collect:
- email address;
- name, username, or display name;
- login credentials or authentication information;
- account ID;
- subscription status;
- account settings;
- account deletion requests;
- support requests and communications.
Payment and Billing Information
Payments are processed by Stripe or another third-party payment processor. We do not store full credit-card numbers.
We may receive and store limited billing and subscription information, such as:
- Stripe customer ID;
- Stripe subscription ID;
- payment status;
- invoice records;
- billing cadence;
- plan type;
- renewal date;
- cancellation status;
- limited payment-method details, such as card brand, expiration month/year, and last four digits, if provided by Stripe;
- billing email;
- billing address or tax-related billing information, if provided.
Stripe may collect and process additional payment, device, transaction, and fraud-prevention information under Stripe’s own privacy policy and terms.
Discord Information
If you connect Discord, use Discord OAuth, or join the YummyPenny Discord community, we may collect or receive:
- Discord user ID;
- Discord username;
- display name;
- avatar or profile image;
- Discord email address, if provided through OAuth;
- server membership status;
- role or access status;
- information needed to verify subscription-based access.
Discord’s own privacy policy and terms govern Discord’s collection, use, and processing of information on Discord’s platform.
Dashboard, Watchlist, and Usage Information
We may collect information about how you use the Service, including:
- products viewed;
- retailers viewed;
- searches;
- filters;
- watchlists;
- saved products;
- saved locations or zip codes;
- alert preferences;
- notification settings;
- dashboard interactions;
- price-history tools used;
- algorithmic prediction tools accessed;
- referral pages;
- error logs;
- feature usage;
- timestamps and activity logs.
Price, Product, and Resale-Related Inputs
If you use features that allow you to save, organize, compare, or analyze products, we may process information related to those actions, including selected products, tracked retailers, target prices, saved deal criteria, product categories, alert thresholds, and historical dashboard interactions.
We use this information to provide and improve the Service. We do not guarantee any resale outcome, profit, retailer availability, order acceptance, or marketplace eligibility.
Location and Map Information
If and when we offer map-based features, store-location tools, zip-code search, distance filters, or geographic product features, we may collect:
- zip code;
- city and state;
- approximate location;
- store-location searches;
- map interactions;
- location-related search queries;
- other location information you choose to provide.
If a feature requests precise location, we will request permission where required. You may decline precise-location access, but some map or nearby-store features may not function properly.
If Google Maps features are used, Google may process location-related information, map interactions, search queries, IP addresses, device information, latitude/longitude coordinates, or other information under Google’s own terms and privacy policy.
Device, Log, and Technical Information
We may automatically collect:
- IP address;
- browser type;
- device type;
- operating system;
- referring URL;
- pages viewed;
- timestamps;
- session identifiers;
- cookie identifiers;
- authentication logs;
- security logs;
- fraud-prevention signals;
- crash or diagnostic information.
Communications
If you contact us, we may collect your email address, the contents of your message, attachments or screenshots you provide, support-ticket history, responses from us, and metadata associated with the communication.
3. How We Collect Information
We collect information:
- directly from you when you create an account, subscribe, contact us, save products, configure alerts, or use features;
- automatically when you use the website, dashboard, or emails;
- from Stripe or another payment processor when you subscribe or manage billing;
- from Discord when you connect Discord or use Discord OAuth;
- from Cloudflare and other infrastructure providers that help secure and deliver the Service;
- from Google Maps if map or location features are enabled;
- from service providers that help us host, operate, secure, email, or improve the Service.
4. How We Use Personal Information
We use personal information to:
- provide, operate, and maintain the Service;
- create and manage accounts;
- authenticate users;
- process subscriptions, payments, renewals, cancellations, invoices, failed payments, and billing disputes;
- provide dashboard access;
- verify subscription-based Discord access;
- operate watchlists, alerts, product tracking, price history, predictions, and map features;
- send transactional emails, account notices, billing notices, security alerts, and service updates;
- send marketing emails where permitted;
- provide support;
- detect, prevent, and investigate fraud, abuse, scraping, unauthorized access, security incidents, chargebacks, and Terms violations;
- enforce our Terms of Service, Refund Policy, community rules, and other policies;
- improve, debug, test, and analyze the Service;
- develop new features;
- maintain records for legal, tax, accounting, compliance, and business purposes;
- respond to lawful requests and legal process;
- protect the rights, safety, property, and security of YummyPenny, users, third parties, and the Service.
5. Algorithmic Features and Predictions
YummyPenny may provide algorithmic price-drop predictions, product signals, trend analysis, rankings, alerts, or other informational outputs.
We may process dashboard usage, watchlists, price-history interactions, product selections, and related data to provide and improve these features.
These features are informational only. They are not financial, investment, tax, legal, business, inventory, or resale advice. We do not use algorithmic predictions to make decisions that produce legal or similarly significant effects about you.
6. Transactional and Marketing Emails
Transactional Emails
Transactional emails are service-related messages, including account emails, login or verification emails, billing emails, subscription confirmations, renewal notices, cancellation confirmations, failed-payment notices, security alerts, material policy updates, and support messages.
You may not be able to opt out of transactional emails while maintaining an account or subscription.
Marketing Emails
Marketing emails may include product updates, promotional offers, feature announcements, newsletters, educational content, and community updates.
If we send marketing emails, you may unsubscribe using the link in the email or by contacting us at [[email protected]].
7. How We Disclose Personal Information
Service Providers and Subprocessors
We use third-party providers to operate the Service.
| Provider | Purpose |
|---|---|
| Stripe | Payment processing, subscriptions, invoices, billing portal, fraud prevention, chargeback handling |
| Resend | Transactional and marketing email delivery |
| Railway | Hosting, database, backend infrastructure, application deployment |
| Cloudflare | DNS, CDN, security, bot protection, firewall, rate limiting, performance |
| Discord | OAuth login, community access, subscription verification, member roles |
| Google Maps | Map display, store-location tools, zip/location features, geographic search |
These providers may process personal information as necessary to provide services to us or to you. Their own privacy policies may also apply to their independent processing.
Third-Party Retailers and Links
The Service may display information about third-party retailers, brands, products, prices, discounts, availability, or offers. If you click a third-party link, visit a retailer, or purchase from a retailer, that interaction is between you and the third party.
We are not responsible for third-party retailers’ privacy practices, product practices, pricing, policies, transactions, or websites.
Legal, Compliance, and Safety Disclosures
We may disclose information if we believe it is reasonably necessary to:
- comply with law, legal process, subpoenas, court orders, or government requests;
- enforce our Terms, Refund Policy, or community rules;
- detect or prevent fraud, abuse, scraping, security threats, or illegal activity;
- protect the rights, property, safety, or security of YummyPenny, users, or others;
- respond to chargebacks, billing disputes, tax matters, accounting requirements, or regulatory inquiries.
Business Transfers
If YummyPenny is involved in a merger, acquisition, financing, sale of assets, restructuring, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction.
With Your Direction or Consent
We may disclose information when you direct us to do so, consent to the disclosure, connect a third-party account, or use a feature that requires disclosure to function.
8. Cookies and Similar Technologies
What Cookies Are
Cookies are small text files stored on your browser or device. Similar technologies may include local storage, session storage, pixels, tags, scripts, SDKs, and device identifiers.
These technologies help websites and applications remember information, maintain sessions, secure accounts, process payments, detect fraud, remember preferences, and understand usage.
Types of Cookies We Use
Strictly necessary cookies are required for the Service to work. They support login sessions, authentication, account access, subscription access, CSRF protection, security, fraud prevention, checkout, billing-portal access, load balancing, and cookie preference storage.
These cookies cannot be disabled through our cookie tools because the Service may not function without them.
| Cookie / Technology | Purpose | Approximate Duration |
|---|---|---|
sub_email |
Helps identify subscription/session access | Session or limited persistent period, depending on configuration |
| Session/auth cookies | Keeps you logged in and manages secure access | Session or limited persistent period |
| CSRF/security tokens | Helps protect forms and account actions | Session or limited persistent period |
| Cookie preference storage | Remembers cookie choices | Up to 12 months or as configured |
| Cloudflare security cookies | Security, bot management, firewall, rate limiting | Session to limited persistent period, depending on Cloudflare configuration |
| Stripe checkout cookies | Payment processing, fraud prevention, authentication | Duration controlled by Stripe |
Payment and Fraud-Prevention Cookies
Stripe may set cookies or similar technologies during checkout, payment processing, subscription management, billing-portal access, fraud prevention, authentication, and payment optimization.
Stripe may collect transaction data, device identifiers, IP address, browser data, payment interaction data, and fraud-prevention signals.
Examples of Stripe cookies may include __stripe_mid, __stripe_sid, m, pay_sid, and __Host-LinkSession. Stripe controls the duration and purpose of Stripe cookies under its own policies.
Security and Performance Cookies
Cloudflare may set cookies for security, bot detection, rate limiting, firewall protection, load balancing, fraud and abuse prevention, and performance.
Examples of Cloudflare cookies may include __cf_bm, cf_clearance, _cfuvid, and __cflb. Cloudflare controls the duration and purpose of Cloudflare cookies under its own policies and our Cloudflare configuration.
Functional Cookies
Functional cookies may remember account preferences, dashboard preferences, filters, display settings, saved choices, and cookie preferences.
Analytics Cookies
We currently do not use analytics cookies unless a cookie banner, cookie settings tool, or updated version of this Policy states otherwise.
If we add analytics tools, such as Google Analytics, Plausible, PostHog, or similar providers, we will update this Policy and, where required, request consent before setting non-essential analytics cookies.
Advertising and Targeting Cookies
We currently do not use advertising or cross-context behavioral advertising cookies unless a cookie banner, cookie settings tool, or updated version of this Policy states otherwise.
If we add advertising, retargeting, affiliate-tracking, or cross-context behavioral advertising technologies, we will update this Policy and provide legally required choices, including any required opt-out mechanisms.
Map and Location Cookies
If we use Google Maps features, Google may set cookies or similar technologies when map features load or when users interact with map, location, store-location, or geographic features.
Google may process map interactions, search terms, IP address, device information, browser information, location-related information, and latitude/longitude coordinates, if provided or enabled.
9. Cookie Consent and Controls
Where required by law, we will request consent before using non-essential cookies, such as analytics, advertising, retargeting, or certain third-party tracking cookies.
You may control cookies through:
- browser settings;
- device settings;
- private/incognito browsing;
- cookie deletion tools;
- our cookie settings tool, if available;
- opt-out mechanisms provided by third parties.
Blocking cookies may affect login, checkout, billing, subscription access, dashboard access, Discord verification, map features, saved preferences, or other Service functionality.
10. Do Not Track and Global Privacy Control
Some browsers send “Do Not Track” or Global Privacy Control signals.
We do not currently sell personal information for money or share personal information for cross-context behavioral advertising. If we engage in activity that requires honoring opt-out preference signals under applicable law, we will process legally required signals as required.
11. Legal Bases for Processing
For users in jurisdictions where a legal basis is required, we may process personal information based on contract, legitimate interests, consent, and legal obligations.
We process information under contract to provide the Service, manage accounts, process subscriptions, provide dashboard access, verify Discord access, and deliver subscription features.
We process information under legitimate interests to secure, improve, analyze, debug, and enforce the Service; prevent fraud and abuse; communicate with users; and protect our business, users, and community.
We process information based on consent for certain cookies, marketing communications, precise-location features, or other processing where consent is required.
We process information under legal obligations to comply with tax, accounting, payment, billing, chargeback, legal, regulatory, and recordkeeping obligations.
12. Data Retention
We retain personal information for as long as reasonably necessary to provide the Service, operate our business, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.
| Information Type | Typical Retention |
|---|---|
| Account information | While your account is active, plus a reasonable period afterward |
| Subscription and billing records | As required for tax, accounting, legal, fraud-prevention, and dispute purposes |
| Stripe customer/subscription identifiers | As needed for billing, accounting, chargebacks, and compliance |
| Dashboard usage and watchlist data | While your account is active or as needed to provide the Service |
| Support communications | As needed for support history, dispute resolution, and legal protection |
| Security logs | For a limited period reasonably necessary for security, fraud prevention, and abuse prevention |
| Cookie preferences | Usually up to 12 months or as configured |
| Backups | Until overwritten or deleted in the ordinary course of backup rotation |
We may retain de-identified, aggregated, or anonymized information that cannot reasonably identify you.
13. Account Deletion
You may request account deletion through https://yummypenny.com/account or by contacting [[email protected]].
Account deletion generally removes or deactivates your account profile, login access, dashboard access, and associated account data where deletion is legally and technically required.
However, we may retain limited information where necessary for:
- tax records;
- accounting records;
- billing records;
- fraud prevention;
- chargeback defense;
- legal compliance;
- security logs;
- dispute resolution;
- enforcement of our Terms;
- backup integrity.
Deleting your account does not automatically refund prior charges. To stop future subscription charges, you must cancel your subscription through the cancellation method provided unless the deletion workflow expressly confirms that your subscription has also been canceled.
14. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include access controls, authentication systems, encryption in transit where appropriate, vendor security controls, logging and monitoring, payment processing through Stripe, Cloudflare security protections, and database and infrastructure controls.
No website, database, payment system, or internet transmission is completely secure. You are responsible for keeping your account credentials confidential and for using a secure device and browser.
15. U.S. State Privacy Rights
Depending on your state of residence and applicable law, you may have rights to:
- confirm whether we process personal information about you;
- access personal information;
- correct inaccurate personal information;
- request deletion of personal information;
- obtain a copy of personal information in a portable format;
- opt out of certain targeted advertising;
- opt out of certain sales of personal information;
- opt out of certain profiling that produces legal or similarly significant effects;
- appeal a denied privacy request, where required.
To exercise rights, contact [[email protected]].
We may need to verify your identity before processing certain requests. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the consumer’s identity.
16. California Privacy Notice
This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us.
California Privacy Rights
California residents may have the right to:
- know what personal information we collect, use, disclose, sell, or share;
- access specific pieces of personal information;
- request deletion of personal information, subject to legal exceptions;
- request correction of inaccurate personal information;
- opt out of the sale or sharing of personal information;
- limit the use or disclosure of sensitive personal information where applicable;
- not be discriminated against for exercising privacy rights.
Categories of Personal Information Collected
| Category | Examples |
|---|---|
| Identifiers | Email address, username, account ID, Discord ID, Stripe customer ID, IP address |
| Customer records information | Billing contact information, limited payment-related records |
| Commercial information | Subscription status, plan type, invoices, purchase history with YummyPenny |
| Internet or network activity | Log data, dashboard usage, pages viewed, searches, watchlists, alerts, cookie data |
| Geolocation information | Zip code, approximate location, store-location searches, map interactions, precise location only if enabled and permitted |
| Inferences | Product interests, dashboard preferences, alert preferences, saved deal criteria |
| Sensitive personal information | Account login credentials, payment-related information handled by Stripe, precise geolocation if enabled |
We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you.
Sources of Personal Information
We may collect personal information from you, your device or browser, Stripe, Discord, Cloudflare, Google Maps, Resend, Railway, other service providers, and your interactions with the Service.
Purposes for Collection, Use, and Disclosure
We collect, use, and disclose personal information for the purposes described in this Policy, including providing the Service, managing accounts and subscriptions, processing payments, providing Discord access, operating dashboard and map features, securing the Service, preventing fraud and abuse, sending transactional emails, providing support, complying with legal and accounting obligations, enforcing our Terms, and improving the Service.
Categories of Third Parties to Whom We Disclose Personal Information
We may disclose personal information to payment processors, hosting and infrastructure providers, email service providers, security and CDN providers, Discord, Google Maps, professional advisors, legal or regulatory authorities, parties involved in business transfers, and other parties with your consent or direction.
Sale and Sharing of Personal Information
We do not sell personal information for money.
We also do not currently share personal information for cross-context behavioral advertising.
If we ever engage in activity that constitutes a “sale” or “sharing” of personal information under California law, we will update this Policy and provide any required notices and opt-out mechanisms.
Sensitive Personal Information
We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law unless we provide the required notice and choice.
Where we process sensitive personal information, we do so for purposes such as account access, security, payment processing, fraud prevention, legal compliance, or providing requested features.
Minors
YummyPenny is strictly intended for users who are at least 18 years old.
We do not knowingly permit minors to create accounts, purchase subscriptions, access the dashboard, connect Discord, or participate in the YummyPenny community.
We do not knowingly collect, sell, or share personal information of anyone under 18. If we learn that a person under 18 has provided personal information or created an account, we may delete the information, cancel the account, and terminate access to the Service.
Exercising California Rights
California residents may submit privacy requests by contacting [[email protected]].
We may need to verify your identity before fulfilling certain requests. You may also use an authorized agent where permitted by law.
We will not discriminate against you for exercising applicable privacy rights.
17. European, UK, Swiss, and International Users
YummyPenny is operated from the United States and is intended primarily for users located in the United States.
We do not intentionally target, market, advertise, or direct the Service to individuals located in the European Economic Area, the United Kingdom, or Switzerland. We do not currently maintain an establishment, data protection officer, EU representative, or UK representative in those jurisdictions.
If you access the Service from outside the United States, you understand that your information may be collected, processed, stored, and used in the United States and other jurisdictions where our service providers operate. These jurisdictions may have data-protection laws different from those in your location.
If we determine that additional international privacy-law obligations apply to our processing of your personal information, we will handle applicable rights and requests as required by law. We may also restrict, suspend, or decline access from jurisdictions where we determine that offering the Service would create compliance obligations we are not prepared to support.
If you are located in the European Economic Area, the United Kingdom, or Switzerland and believe you have privacy rights under applicable law, you may contact us at [[email protected]].
18. International Data Transfers
Because YummyPenny is based in the United States, personal information may be transferred to, stored in, or processed in the United States and other countries where our service providers operate.
Where required by applicable law, we rely on appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.
19. Children’s and Minors’ Privacy
The Service is not intended for minors. You must be at least 18 years old to use YummyPenny.
We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information, created an account, purchased a subscription, or joined the YummyPenny community, we may delete the information, cancel the account, and terminate access.
Parents or guardians who believe a minor has provided information to us may contact [[email protected]].
20. Third-Party Retailers, APIs, and Product Data
YummyPenny displays information about third-party retailers, products, brands, prices, discounts, availability, and offers.
Retailer names, product names, brand names, logos, and trademarks belong to their respective owners. We may reference them only to identify products, retailers, prices, or offers for informational purposes.
Third-party retailers and data sources may collect information from you if you visit their websites, use their apps, click their links, or purchase products from them. Their privacy policies and terms govern those interactions.
YummyPenny is not responsible for third-party retailer privacy practices, product listings, pricing, inventory, checkout, shipping, fulfillment, returns, warranties, or customer service.
21. Affiliate Links and Referral Tracking
If we use affiliate links, referral links, sponsored links, or compensated retailer relationships, we may receive compensation when you click links or make purchases through those links.
If affiliate or referral tracking uses cookies, pixels, or similar technologies, we will disclose that use and provide any legally required consent or opt-out mechanism.
YummyPenny remains an information service and does not become the seller, shipper, fulfiller, or guarantor of third-party products by using affiliate or referral links.
22. Changes to This Policy
We may update this Privacy & Cookie Policy from time to time. The updated version will be posted with a new “Last Updated” date.
If changes are material, we may provide additional notice, such as by email, dashboard notice, checkout notice, or website banner.
Your continued use of the Service after an updated Policy becomes effective means you acknowledge the updated Policy.
23. Contact Us
YummyPenny
YummyPenny, LLC
Email: [[email protected]]
For billing questions, contact: [[email protected]]
For support questions, contact: [[email protected]]