Privacy policy

OfferAdd is built to know as little about you as possible. This page says exactly what we collect, why, and how to delete it.

What we collect

• Your email address, to sign you in with a one-time code. There are no passwords.
• Your email address if you ask us to email you the install link (on a phone): used once to send it. We keep only a scrambled copy for two days, so the same address isn’t emailed twice.
• Signed-in devices: the browser or device and IP address of each sign-in, so you can see where you’re signed in (Settings → Signed-in devices).
• Your card offers, read by the OfferAdd extension from your bank’s offers page: the store, the deal and its terms, the expiry date, whether it’s added or used, the store’s logo address, and the last 4 digits of the card it’s on.
• Your cards: bank, last 4 digits, a name you choose, and which card product it is (e.g. “Gold Card”).
• Your settings: watchlist, email preferences, store categories you changed, household sharing, and a referral code.
• Billing status if you subscribe. Payments are handled by Stripe; we never see or store your payment card.
• Error reports from the website and app when something crashes: the error message, a short technical trace of where in our code it happened, the page and the app version. They aren’t linked to your account and never include your offers.

What we never collect

• Full card or account numbers, bank passwords, balances or transactions from your bank’s pages.
• Your statements. When you match a statement, it’s read in your browser and never uploaded; we only store which offers it confirmed.
• Anything from shopping sites. The optional checkout helper reads only the page address to spot the store.
• Analytics or tracking where you sign in, in the dashboard, in the extension or in the app. (The ad tags on our public website are under “Our ads”.)

Location (phone app, coming soon)

If you allow it, the app uses your location to show stores near you that have your offers. To find those stores it sends the store names and a rough area (about 1 km) to Mapbox, never your exact position or card details. Store alerts use background location only if you turn them on.

Logos and card pictures

The dashboard shows store logos and card pictures loaded directly from banks’ and their partners’ image servers (the same images your bank’s offers page shows). Like any image on the web, the server that sends it can see your IP address. OfferAdd strips the referrer, so those servers aren’t told which page asked for it.

Our ads

We advertise on TikTok, Meta (Facebook and Instagram), Google and Reddit. To see which ads work and to show our ads to people who visited, the public pages of offeradd.app load those networks’ ad tags, also called pixels. They tell each network which of those pages you opened and whether you clicked Add to Chrome, along with your browser, IP address and that network’s cookies.

The ad tags never run where you sign in and use your dashboard (app.offeradd.app), in the extension or in the phone app, so no ad network can see your account, offers or cards.

Also, when you arrive from one of our ads, the website keeps the ad’s click ID (a code the network adds to the link) in your browser for up to 90 days. If you then click Add to Chrome or create an account, our server tells that ad network, and only that one, with the click ID, your browser type and the page: never your email address, account, IP address, offers or cards. Sign-ups in the extension are never reported. We keep these reports for 90 days.

If your browser sends Global Privacy Control, none of this happens: no ad tags, and nothing kept or reported. You can also turn it off for this browser here:

Who we share it with

We don’t sell your data. Apart from the ad tags and ad click reports above, we don’t share it for advertising. We use these services to run OfferAdd:

• Supabase: database and sign-in. Every row is locked to your account.
• Stripe: subscriptions and payments.
• Postmark: sign-in codes, one reminder a few days before your free trial ends, and the emails you opt in to.
• Mapbox: maps and store lookups in the app.
• Vercel: hosts this website.
• Cloudflare: our domain and DNS; visits to this website pass through its network.
• TikTok, Meta, Google and Reddit: the ad tags on our public pages and the ad click reports above, for our ads only.

If you set up household sharing, the person you invite can see your offers and cards (read-only) until either of you ends it.

Optional reports from the extension

If you turn on “Help catch bank page changes” in the extension, it reports when a bank’s offers page can’t be read, with only the bank and the extension version: no account, address or offer data. It’s off unless you turn it on.

If you remove the extension, a page opens asking why. Answering is optional, and your answer is saved without your email or account. That page has no ad tags.

Keeping and deleting your data

Your data stays until you delete it. In Settings you can export everything, delete all your data, or delete your account, which removes everything and cancels any subscription. The extension also keeps a copy of your offers on your computer until you remove the extension.

Children

OfferAdd isn’t meant for anyone under 18.

Changes

If we change this policy in a way that matters, we’ll tell you by email before it takes effect.

Questions? Email admin@offeradd.app, or write to OfferAdd LLC, 30 N Gould St Ste R, Sheridan, WY 82801.