Privacy

MTB Deals sets no cookies, loads no trackers, no analytics and no ads, and records nothing about a visit. This page says what the browser stores, what the server records, and what an email alert account holds.

Last changed: 10 November 2026.

Who is responsible

MTB Deals is run by Asbjørn Jørgensen. Reach the maker through awsbjorn.com.

What your browser stores

• The app keeps your saved deals, filters, target searches, followed shops and, when you sign in for alerts, the sign-in token in this browser's local storage (one entry, mtb-deals:v1). Nothing of it is sent anywhere unless you sign in, in which case your saved deals, target searches and followed shops sync to your account.
• A service worker keeps an offline copy of the page, the fonts, the last deals and their photos in the browser's cache, so the page (and the installed app) opens without a network.
• No cookies, no analytics, no trackers, no advertising, no third-party scripts. Clearing the site's data in the browser removes everything above.

What the server records

• Nothing per visit: no visitor log of our own, no identifiers.
• Outbound clicks: when you open a deal at a shop, the deal's id is counted once (per deal, per day, kept two days) for the "Popular" badge. No IP address, no browser details, nothing that identifies you.
• Rate limits: the endpoints that write (sign-up, sign-in, clicks) count requests per hashed IP address in hourly buckets, deleted after about an hour.

Email alerts

• Alerts are double opt-in: you enter an address, we send one confirmation mail, and nothing else goes out until you click it.
• Your account record holds: the email address, the confirm, manage and sign-in tokens, whether alerts are on, when it was created, confirmed and verified, your alert preferences, your saved deals, target searches and followed shops, where the alerts left off and when the last mails went out, and the devices signed in. It is used to send you the alerts you asked for and for nothing else.
• Mail is sent through Resend, our mail processor: it handles the address to deliver the mails and, when the mailing-list mirror is on, keeps the address and its unsubscribed flag in the "MTB Deals" segment and nothing else (no preferences, lists or searches).
• Every mail carries an unsubscribe link. Unsubscribing turns the alerts off; a record nobody is signed in on is deleted outright. "Delete account" on the Alerts tab removes the record, every token and the Resend contact at once. A record that was never confirmed is deleted after seven days.

Hosting

• The site runs on Netlify; the data store (the deals, the accounts) is in Frankfurt (eu-central-1). Netlify keeps its standard server logs for operating the platform.
• Product photos load from the shops' own image servers or through the site's image service, so a shop's server sees a request for its photo (with at most the site's origin as the referrer). Outbound links are the shops' own URLs with no affiliate or tracking parameters.

Your rights

You can see, change and delete everything yourself: the browser's data in the browser, the account on the Alerts tab (preferences, sign-out, delete). For anything else, reach the maker through awsbjorn.com.