§Privacy

Courtesy translation. The Spanish version is the only legally binding one; if the two differ, the Spanish version prevails. Read the binding Spanish version.

What data we process

• No user account: the site has no registration or login.
• Analytics (Google Analytics), only with your consent: if you accept it in the cookie notice, we measure visits in aggregate (page views, country, device type, origin). If you reject it or ignore it, Google Analytics is not loaded and nothing is collected. See cookies.
• Heatmaps and recordings (Microsoft Clarity), only with your consent: they record where you click, how far you scroll and how you move through a page, to detect what is not understood. With strict masking: the text is replaced by blocks in your browser before it is sent, so the recordings contain no codes, email addresses or anything you type. If you reject or ignore the notice, Clarity is not loaded. See cookies.
• Exit clicks: we count how many times each offer is used on our own infrastructure, in aggregate, without full IP addresses or individual profiles.
• Our own visit counter, without cookies: when a page is opened we add one to three counters — the day, the type of page and whether cookies were accepted — and, when a code is copied, a referral revealed, a share made or an offer link clicked, one more to the counter of that action and to that of that offer. No identifier, no IP address, no session is stored, nor anything that would let two visits be linked to each other: only aggregate numbers, on our own infrastructure (Cloudflare) and without third-party analytics tools. It does not read or write anything on your device, so it falls outside the cookie notice. It serves to know how many people the Google Analytics data represents, which only measures those who accept. See cookies.
• Live visitor counter: our own, without cookies or identifiers; aggregate data that is discarded after 30 minutes.
• “Suggest a code” form: what you write (store, code or link, conditions and, if you wish, an official link) is stored on our own infrastructure (Cloudflare) for a maximum of 30 days, only to check the promotion. We do not ask for an email, name or any contact details; we ask you not to write personal data in the text fields. It is not passed on to third parties.
• Anti-bot check (Cloudflare Turnstile): when you are about to press “show code” or “open offer” on a referral, we load Cloudflare’s Turnstile to check that whoever presses is a person and not an automated program. To do so, Cloudflare processes technical signals from your browser and connection, such as your IP address, user-agent and TLS fingerprint. It acts as our processor and also uses those signals as a controller to improve its bot detection, according to its Turnstile privacy addendum. We do not use it for measurement or advertising. Legal basis: our legitimate interest in keeping personal codes away from bots.

Google and Microsoft as data processors (encargados del tratamiento)

When you accept analytics, Google Ireland/LLC processes the measurement data as a processor, under the GDPR Data Processing Terms (Términos de Tratamiento de Datos del RGPD) that we have accepted. This may involve a transfer to the US with the safeguards provided by Google. In Google Analytics 4 your IP address is not stored.

The same applies to Microsoft Ireland Operations Ltd. for Clarity, which processes the masked browsing data as a processor and keeps it for a maximum of 13 months. You can withdraw your consent at any time by deleting the site’s cookies: when you return, the notice appears again and until you accept, neither of the two is loaded.

What we do NOT do

• We do not sell or pass on data to third parties.
• We do not use advertising or remarketing cookies, nor do we share data with Google for ads.
• We do not create user profiles ourselves.

Controller and rights

Controller of the site: private individual, contact at info@codigoscupones.com. As we do not collect identifying data or create profiles, there is hardly any processing of personal data; even so, for any query or to exercise the rights of access, rectification and erasure (GDPR/LOPDGDD, the Spanish Organic Law on Data Protection and Guarantee of Digital Rights, RGPD/LOPDGDD) you can write to that address.