Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains how YummyPenny, LLC, doing business as YummyPenny (“YummyPenny,” “we,” “us,” or “our”), collects, uses, discloses, stores, and protects personal information when you access or use our website, paid subscription dashboard, data tools, account features, communications, checkout flow, and members-only community, including our Discord community (collectively, the “Service”).

YummyPenny is a paid subscription information service. We aggregate discount, price, availability, product, and price-history data from third-party retailers and data sources, generate algorithmic price-drop estimates and related informational outputs, and make that information available through a gated web dashboard and members-only community.

YummyPenny does not sell, ship, stock, warehouse, fulfill, broker, or guarantee any third-party retail products. We sell access to information about products offered by other companies.

The Service is intended only for users who are at least 18 years old.

In short: we record how members use the Service, tied to their account, and we may sell or share personal information with third parties. You can opt out of any sale or sharing at any time at Do Not Sell or Share My Personal Information, or by turning on Global Privacy Control. We never sell payment-card information or other sensitive personal information.

1. Scope of This Policy

This Policy applies to personal information we collect when you:

• visit our website;
• create or manage a YummyPenny account;
• purchase, renew, cancel, or manage a subscription;
• access the dashboard;
• use price-tracking, watchlist, alert, prediction, or map features;
• connect Discord or join the YummyPenny Discord community;
• contact support;
• interact with our emails;
• use checkout, billing, or account-deletion features;
• otherwise interact with the Service.

This Policy does not apply to the privacy practices of third-party retailers, marketplaces, Discord, Stripe, Google, Cloudflare, or other third-party services that we do not own or control. Those third parties may have their own privacy policies and terms.

2. Personal Information We Collect

Account Information

We may collect:

• email address;
• name, username, or display name;
• the login links we email you (there are no passwords) and, if you connect it, your Discord account;
• account ID;
• subscription status;
• account settings;
• account deletion requests;
• support requests and communications.

Payment and Billing Information

Payments are processed by Stripe or another third-party payment processor. We do not store full credit-card numbers.

We may receive and store limited billing and subscription information, such as:

• Stripe customer ID;
• Stripe subscription ID;
• payment status;
• invoice records;
• billing cadence;
• plan type;
• renewal date;
• cancellation status;
• limited payment-method details, such as card brand, expiration month/year, and last four digits, if provided by Stripe;
• billing email;
• billing address or tax-related billing information, if provided.

Stripe may collect and process additional payment, device, transaction, and fraud-prevention information under Stripe’s own privacy policy and terms.

Discord Information

If you connect Discord, use Discord OAuth, or join the YummyPenny Discord community, we may collect or receive:

• Discord user ID;
• Discord username;
• display name;
• avatar or profile image;
• Discord email address, if provided through OAuth;
• server membership status;
• role or access status;
• information needed to verify subscription-based access;
• what you type into the bot's slash commands and DM settings, including a home ZIP code, product or brand mutes and watches;
• support tickets and review text you send the bot, with any photos you attach (up to nine per review);
• receipt photos you submit to confirm a register price. We read them by optical character recognition to extract the store, date, item and price; a receipt can also carry the last four digits of a card or a loyalty identifier, which we do not use.

Photos and messages you send on Discord are stored on Discord's servers under Discord's terms; we keep the extracted text and the link to the photo.

Discord’s own privacy policy and terms govern Discord’s collection, use, and processing of information on Discord’s platform.

Dashboard, Watchlist, and Usage Information

We may collect information about how you use the Service, including:

• products viewed;
• retailers viewed;
• searches;
• filters;
• watchlists;
• saved products;
• saved locations or zip codes;
• alert preferences;
• notification settings;
• dashboard interactions;
• price-history tools used;
• algorithmic prediction tools accessed;
• referral pages;
• error logs;
• feature usage;
• timestamps and activity logs.

We keep an activity log for every signed-in member. While you are signed in, our own servers record each page you open and each search, filter and sort you use (including the terms you search for), with the time, the kind of device, browser and operating system, and the website that sent you, and store it against your account. We remove anything in a web address that looks like a login token or other credential before it is stored, and we do not store your IP address in this log. The log is kept as described in section 11, is included when you download your data, and is deleted when you delete your account.

Price, Product, and Resale-Related Inputs

If you use features that allow you to save, organize, compare, or analyze products, we may process information related to those actions, including selected products, tracked retailers, target prices, saved deal criteria, product categories, alert thresholds, and historical dashboard interactions.

We use this information to provide and improve the Service. We do not guarantee any resale outcome, profit, retailer availability, order acceptance, or marketplace eligibility.

Location and Map Information

The member dashboard and product pages show nearby stores on a Google Map, the account page turns your home ZIP code into coordinates through Google's geocoding service, and the terminal draws its own map from tiles we host on Cloudflare R2 (Cloudflare receives your IP address when a tile is requested). For these features we collect:

• zip code;
• city and state;
• approximate location;
• store-location searches;
• map interactions;
• location-related search queries;
• other location information you choose to provide.

We never ask for precise device location; distance is measured from the ZIP code you give us. When a Google Map loads, Google processes map interactions, the map's centre, your IP address and device information under Google's own terms and privacy policy.

Device, Log, and Technical Information

We may automatically collect:

• IP address;
• browser type;
• device type;
• operating system;
• referring URL;
• pages viewed;
• timestamps;
• session identifiers;
• cookie identifiers;
• authentication logs;
• security logs;
• fraud-prevention signals;
• crash or diagnostic information.

Communications

If you contact us, we may collect your email address, the contents of your message, attachments or screenshots you provide, support-ticket history, responses from us, and metadata associated with the communication.

3. How We Collect Information

We collect information:

• directly from you when you create an account, subscribe, contact us, save products, configure alerts, or use features;
• automatically when you use the website, dashboard, or emails, including the activity log described in section 2 while you are signed in;
• from Stripe or another payment processor when you subscribe or manage billing;
• from Discord when you connect Discord or use Discord OAuth;
• from Cloudflare and other infrastructure providers that help secure and deliver the Service;
• from Google Maps if map or location features are enabled;
• from Google Analytics, for visitors who are not signed in, on our public pages;
• from service providers that help us host, operate, secure, email, or improve the Service.

4. How We Use Personal Information

We use personal information to:

• provide, operate, and maintain the Service;
• create and manage accounts;
• authenticate users;
• process subscriptions, payments, renewals, cancellations, invoices, failed payments, and billing disputes;
• provide dashboard access;
• verify subscription-based Discord access;
• operate watchlists, alerts, product tracking, price history, predictions, and map features;
• send transactional emails, account notices, billing notices, security alerts, and service updates;
• send marketing emails where permitted;
• provide support;
• detect, prevent, and investigate fraud, abuse, scraping, unauthorized access, security incidents, chargebacks, and Terms violations;
• enforce our Terms of Service, Refund Policy, community rules, and other policies;
• improve, debug, test, and analyze the Service;
• analyze how each member and members as a group use the Service, including inferring product, retailer, category, store and location interests;
• create aggregated, de-identified and account-level datasets, reports and insights about shopping, pricing, clearance and demand;
• sell, license or share personal information and datasets with third parties as described in section 7 and in "Sale and Sharing of Personal Information" in section 15, unless you have opted out;
• develop new features and new products, including data products;
• maintain records for legal, tax, accounting, compliance, and business purposes;
• respond to lawful requests and legal process;
• protect the rights, safety, property, and security of YummyPenny, users, third parties, and the Service.

5. Algorithmic Features and Predictions

YummyPenny may provide algorithmic price-drop predictions, product signals, trend analysis, rankings, alerts, or other informational outputs.

We may process dashboard usage, watchlists, price-history interactions, product selections, and related data to provide and improve these features.

These features are informational only. They are not financial, investment, tax, legal, business, inventory, or resale advice. We do not use algorithmic predictions to make decisions that produce legal or similarly significant effects about you.

6. Transactional and Marketing Emails

Transactional Emails

Transactional emails are service-related messages, including account emails, login or verification emails, billing emails, subscription confirmations, renewal notices, cancellation confirmations, failed-payment notices, security alerts, material policy updates, and support messages.

You may not be able to opt out of transactional emails while maintaining an account or subscription.

Marketing Emails

Marketing emails may include product updates, promotional offers, feature announcements, newsletters, educational content, and community updates.

If we send marketing emails, you may unsubscribe using the link in the email or by contacting us at [email protected].

7. How We Disclose Personal Information

Service Providers and Subprocessors

We use third-party providers to operate the Service.

These providers may process personal information as necessary to provide services to us or to you. Their own privacy policies may also apply to their independent processing.

Data Partners, Purchasers, and Advertisers

We may sell, license or otherwise make personal information available to third parties for their own purposes. The recipients can include data partners and data brokers, retailers, brands and manufacturers, market-research and analytics firms, investment and financial firms, and advertisers and advertising networks, and their purposes can include research, analytics, product development, and marketing or advertising, including advertising targeted using activity across different websites and services.

The categories that may be sold or shared are listed in section 15. We never sell or share payment-card information or any other sensitive personal information, and we never sell or share information about anyone who has opted out (section 9). Recipients must agree in writing to use the information only for the purposes we disclose to them and to comply with applicable privacy law.

Third-Party Retailers and Links

The Service may display information about third-party retailers, brands, products, prices, discounts, availability, or offers. If you click a third-party link, visit a retailer, or purchase from a retailer, that interaction is between you and the third party.

We are not responsible for third-party retailers’ privacy practices, product practices, pricing, policies, transactions, or websites.

Legal, Compliance, and Safety Disclosures

We may disclose information if we believe it is reasonably necessary to:

• comply with law, legal process, subpoenas, court orders, or government requests;
• enforce our Terms, Refund Policy, or community rules;
• detect or prevent fraud, abuse, scraping, security threats, or illegal activity;
• protect the rights, property, safety, or security of YummyPenny, users, or others;
• respond to chargebacks, billing disputes, tax matters, accounting requirements, or regulatory inquiries.

Business Transfers

If YummyPenny is involved in a merger, acquisition, financing, sale of assets, restructuring, bankruptcy, or similar transaction, personal information may be disclosed or transferred as part of that transaction.

With Your Direction or Consent

We may disclose information when you direct us to do so, consent to the disclosure, connect a third-party account, or use a feature that requires disclosure to function.

8. Cookies and Similar Technologies

Our Cookie Policy lists every cookie and similar technology we use, what each is for, how long it lasts, and how to control it. In short:

• A signed session cookie keeps you signed in for seven days and is strictly necessary. Your theme choice is kept in browser storage as yp-theme.
• We use Google Analytics 4 on public pages to learn how visitors find us. It sets cookies beginning _ga. We do not run Google Analytics inside the member area: if you are signed in, no Google analytics tag loads on any page you see.
• Inside the member area we record your activity ourselves, on our own servers, as the activity log in section 2 describes. It uses your existing sign-in session and sets no extra cookie, and nothing in it is sent to Google.
• Before a page view is reported we rebuild the address so only the page path and a short list of campaign parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content, gclid) are sent. Search terms and any token in a link we email you never reach Google.
• We honour Global Privacy Control: when your browser sends it, the Google analytics tag does not load at all, and we treat the signal as an opt-out of the sale and sharing of your personal information (section 9).
• If you opt out of sale or sharing while signed out, a yp_no_sale cookie remembers that choice on your browser and applies it to your account when you next sign in.
• Stripe sets cookies on its own checkout and billing pages; Google may set cookies on pages that show a Google Map. We use no advertising or retargeting cookies.

9. Your Right to Opt Out of Sale and Sharing; Global Privacy Control; Do Not Track

We may sell personal information and share it for cross-context behavioral advertising, as section 7 describes. You can tell us not to, at any time, free of charge, and it will not change your membership, its price, or the features you get:

• use the Do Not Sell or Share My Personal Information page, linked at the bottom of every page. Signed in, it opts out your account; signed out, it opts out that browser and then your account the next time you sign in on it;
• turn on Global Privacy Control in a browser or extension that supports it. We treat the signal as a valid opt-out of sale and sharing for that browser and, whenever you are signed in with it, for your account. The Google analytics tag also does not load for that browser at all;
• email [email protected] with the subject "Do not sell or share", or have an authorized agent do so where your state's law allows.

An opt-out takes effect as soon as we record it and stays in place until you choose to opt back in. It does not stop us using information to provide, secure, measure and improve the Service ourselves, and it does not cover aggregated or de-identified information that cannot reasonably be linked to you. "Do Not Track" has no agreed meaning, so we do not change our behavior in response to it beyond the practices described here.

10. Legal Bases for Processing

For users in jurisdictions where a legal basis is required, we may process personal information based on contract, legitimate interests, consent, and legal obligations.

We process information under contract to provide the Service, manage accounts, process subscriptions, provide dashboard access, verify Discord access, and deliver subscription features.

We process information under legitimate interests to secure, improve, analyze, debug, and enforce the Service; prevent fraud and abuse; communicate with users; and protect our business, users, and community.

We process information based on consent for certain cookies, marketing communications, precise-location features, or other processing where consent is required.

We process information under legal obligations to comply with tax, accounting, payment, billing, chargeback, legal, regulatory, and recordkeeping obligations.

11. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, operate our business, comply with legal obligations, resolve disputes, enforce agreements, prevent fraud, and maintain security.

We may retain de-identified, aggregated, or anonymized information that cannot reasonably identify you.

12. Account Deletion

You may request account deletion through https://yummypenny.com/account or by contacting [email protected].

Account deletion generally removes or deactivates your account profile, login access, dashboard access, and associated account data, including your activity log, where deletion is legally and technically required.

However, we may retain limited information where necessary for:

• tax records;
• accounting records;
• billing records;
• fraud prevention;
• chargeback defense;
• legal compliance;
• security logs;
• dispute resolution;
• enforcement of our Terms;
• backup integrity.

Deleting your account cancels any active subscription immediately. Your access ends at once and the remainder of a paid month or year is not refunded, except where the law requires. If you want to keep access to the end of the period you have paid for, cancel from your account page instead of deleting, and delete later.

Two things survive deletion, and we say so rather than leaving them under "fraud prevention": a record that a free trial was used (a normalised email address, a Discord ID, a payment-card fingerprint that is not a card number, and a Stripe customer ID), kept so a trial cannot be claimed twice; and your contributions (penny confirmations, deal reports and staff picks), which are kept without your name because other members rely on them. Cancelled or never-activated accounts that are not deleted by hand are removed automatically 90 days after they go inactive.

13. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These safeguards may include access controls, authentication systems, encryption in transit where appropriate, vendor security controls, logging and monitoring, payment processing through Stripe, Cloudflare security protections, and database and infrastructure controls.

No website, database, payment system, or internet transmission is completely secure. You are responsible for keeping the login links we email you and your connected Discord account to yourself, and for using a secure device and browser.

14. U.S. State Privacy Rights

Depending on your state of residence and applicable law, you may have rights to:

• confirm whether we process personal information about you;
• access personal information;
• correct inaccurate personal information;
• request deletion of personal information;
• obtain a copy of personal information in a portable format;
• opt out of targeted advertising;
• opt out of the sale of personal information;
• opt out of certain profiling that produces legal or similarly significant effects;
• appeal a denied privacy request, where required.

To opt out of sale, sharing or targeted advertising, use Do Not Sell or Share My Personal Information or Global Privacy Control (section 9). To exercise any other right, contact [email protected].

You can also download everything we hold about you, or delete your account and its data, yourself at any time from the Data & privacy tab of your account page, and you can turn marketing email off there or with the link at the bottom of any marketing email. For requests made by email we respond within 45 days, or within the shorter time your state's law sets, and we tell you if we need longer. If we decline a request we say why, and you may appeal by replying to our answer; appeals are decided within the time your state's law sets.

We may need to verify your identity before processing certain requests. Authorized agents may submit requests where permitted by law, but we may require proof of authorization and verification of the consumer’s identity.

15. California Privacy Notice

This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to us.

California Privacy Rights

California residents may have the right to:

• know what personal information we collect, use, disclose, sell, or share;
• access specific pieces of personal information;
• request deletion of personal information, subject to legal exceptions;
• request correction of inaccurate personal information;
• opt out of the sale or sharing of personal information;
• limit the use or disclosure of sensitive personal information where applicable;
• not be discriminated against for exercising privacy rights.

Categories of Personal Information Collected

We do not intentionally collect sensitive personal information for the purpose of inferring characteristics about you.

Sources of Personal Information

We may collect personal information from you, your device or browser, Stripe, Discord, Cloudflare, Google Maps, Google Analytics, Resend, Railway, other service providers, and your interactions with the Service.

Purposes for Collection, Use, and Disclosure

We collect, use, and disclose personal information for the purposes described in this Policy, including providing the Service, managing accounts and subscriptions, processing payments, providing Discord access, operating dashboard and map features, securing the Service, preventing fraud and abuse, sending transactional emails, providing support, complying with legal and accounting obligations, enforcing our Terms, improving the Service, creating datasets and data products, and selling or sharing personal information as described below.

Categories of Third Parties to Whom We Disclose Personal Information

We may disclose personal information to payment processors, hosting and infrastructure providers, email service providers, security and CDN providers, Discord, Google Maps, Google Analytics, professional advisors, legal or regulatory authorities, parties involved in business transfers, and other parties with your consent or direction. Unless you opt out, we may also sell or share personal information with the data partners, data brokers, retailers, brands, manufacturers, market-research and analytics firms, investment firms and advertisers described in section 7.

Sale and Sharing of Personal Information

We may sell personal information, and share it for cross-context behavioral advertising. The categories we may sell or share, to the recipients described in section 7, are:

• Identifiers: email address, username, account ID and Discord ID;
• Commercial information: subscription status and plan type;
• Internet or network activity: the member activity log (pages viewed, searches, filters), watchlists, saved items and alert preferences;
• Geolocation information: ZIP code and the approximate location derived from it, and store-location searches. We never collect precise device location;
• Inferences: product, retailer, category, store and location interests, and saved deal criteria.

We do not sell or share payment-related information, other sensitive personal information, support messages, or receipt photos. In the 12 months before the date at the top of this Policy we have not sold or shared personal information.

You can opt out with the Do Not Sell or Share My Personal Information page or with Global Privacy Control, as section 9 describes. We do not knowingly sell or share the personal information of anyone under 16; the Service is only for adults.

Google Analytics is not part of any sale. We use it only as a measurement service on public pages: Google Signals is not enabled, Google Analytics is not linked to Google Ads, and analytics data is not used to build or target advertising audiences. It does not run while you are signed in, and it does not run for any browser that sends Global Privacy Control.

Sensitive Personal Information

We do not use or disclose sensitive personal information for purposes that would require a right to limit under California law unless we provide the required notice and choice.

Where we process sensitive personal information, we do so for purposes such as account access, security, payment processing, fraud prevention, legal compliance, or providing requested features.

Minors

YummyPenny is strictly intended for users who are at least 18 years old.

We do not knowingly permit minors to create accounts, purchase subscriptions, access the dashboard, connect Discord, or participate in the YummyPenny community.

We do not knowingly collect, sell, or share personal information of anyone under 18. If we learn that a person under 18 has provided personal information or created an account, we may delete the information, cancel the account, and terminate access to the Service.

Exercising California Rights

California residents may submit privacy requests by contacting [email protected].

We may need to verify your identity before fulfilling certain requests. You may also use an authorized agent where permitted by law.

We will not discriminate against you for exercising applicable privacy rights.

16. European, UK, Swiss, and International Users

YummyPenny is operated from the United States and is intended primarily for users located in the United States.

We do not intentionally target, market, advertise, or direct the Service to individuals located in the European Economic Area, the United Kingdom, or Switzerland. We do not currently maintain an establishment, data protection officer, EU representative, or UK representative in those jurisdictions.

If you access the Service from outside the United States, you understand that your information may be collected, processed, stored, and used in the United States and other jurisdictions where our service providers operate. These jurisdictions may have data-protection laws different from those in your location.

If we determine that additional international privacy-law obligations apply to our processing of your personal information, we will handle applicable rights and requests as required by law. We may also restrict, suspend, or decline access from jurisdictions where we determine that offering the Service would create compliance obligations we are not prepared to support.

If you are located in the European Economic Area, the United Kingdom, or Switzerland and believe you have privacy rights under applicable law, you may contact us at [email protected].

17. International Data Transfers

Because YummyPenny is based in the United States, personal information may be transferred to, stored in, or processed in the United States and other countries where our service providers operate.

Where required by applicable law, we rely on appropriate safeguards for international transfers, such as contractual protections or other lawful transfer mechanisms.

18. Children’s and Minors’ Privacy

The Service is not intended for minors. You must be at least 18 years old to use YummyPenny.

We do not knowingly collect personal information from anyone under 18. If we learn that a person under 18 has provided personal information, created an account, purchased a subscription, or joined the YummyPenny community, we may delete the information, cancel the account, and terminate access.

Parents or guardians who believe a minor has provided information to us may contact [email protected].

19. Third-Party Retailers, APIs, and Product Data

YummyPenny displays information about third-party retailers, products, brands, prices, discounts, availability, and offers.

Retailer names, product names, brand names, logos, and trademarks belong to their respective owners. We may reference them only to identify products, retailers, prices, or offers for informational purposes.

Third-party retailers and data sources may collect information from you if you visit their websites, use their apps, click their links, or purchase products from them. Their privacy policies and terms govern those interactions.

YummyPenny is not responsible for third-party retailer privacy practices, product listings, pricing, inventory, checkout, shipping, fulfillment, returns, warranties, or customer service.

20. Affiliate Links and Referral Tracking

If you refer a friend with your referral link, we store their email address on your account record so that the referral credit can be applied, until either account is deleted. Referral credits are bill credits, never cash.

If we use affiliate links, referral links, sponsored links, or compensated retailer relationships, we may receive compensation when you click links or make purchases through those links.

If affiliate or referral tracking uses cookies, pixels, or similar technologies, we will disclose that use and provide any legally required consent or opt-out mechanism.

YummyPenny remains an information service and does not become the seller, shipper, fulfiller, or guarantor of third-party products by using affiliate or referral links.

21. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time. The updated version will be posted with a new “Last Updated” date.

If changes are material, we may provide additional notice, such as by email, dashboard notice, checkout notice, or website banner.

Your continued use of the Service after an updated Policy becomes effective means you acknowledge the updated Policy.

A change that lets us use personal information in a materially different way applies only to information collected after it takes effect, unless you agree otherwise. In particular, personal information we collected before September 28, 2026, when an earlier version of this Policy said we did not sell personal information, is not sold or shared unless you agree to this version.

22. Contact Us

YummyPenny, LLC
Tyler Grove
2502 Leon St. Unit 307
Austin, TX 78705
Email: [email protected]

For billing questions, contact: [email protected]

For support questions, contact: [email protected]