Privacy Policy

HeyDeals helps Australian shoppers find the cheapest retailer for a product they're viewing. We're built to need as little of your data as possible.

You don't need an account to use HeyDeals. We don't ask for your name, email address, postal address, or payment details, and we don't have a login. We don't sell your data or use it for advertising. This policy explains the small amount of information we do handle and your rights under the Australian Privacy Act 1988 and the Australian Privacy Principles (APPs).

When you install the HeyDeals browser extension and visit a product page on one of our supported Australian retailers, the extension reads the product's name, price, and identifiers from the page so it can check whether the same product is cheaper elsewhere. That information is published on the retailer's own page. It isn't personal information about you, and the extension only runs on those specific retailer sites.

To submit these price observations and to prevent abuse of our service, the extension generates a random identifier (a UUID) the first time it runs. This identifier contains no personal information and is not a device fingerprint; it simply lets us group and rate-limit the price data an install sends. It is stored only inside the extension. You can reset it at any time by uninstalling and reinstalling the extension.

The extension does not read pages outside the supported retailer list, does not track your browsing history, and does not require you to sign in.

We use PostHog (posthog.com, hosted in the European Union) to understand how people find HeyDeals, how they move through our website, and whether the product is helping them. PostHog receives a set of product-usage and page-view events — for example visiting a page on our website, installing the extension, using it on a supported retailer page, or clicking through to a retailer — together with basic information about your browser and device and a pseudonymous identifier we use to group one person's or install's activity across sessions. When you click through to a retailer, that pseudonymous identifier is included in the link to our own redirect service so we can count the click; it appears in our server logs like any other request. PostHog also receives your IP address, which it uses to estimate your approximate location (such as your country or city) so we can understand which regions our visitors come from; we don't use it to identify you personally. We don't link the pseudonymous identifier to your name or email, and we don't send PostHog the contents of the pages you visit or your search queries. We keep this data for 90 days and then delete it.

We use Sentry (sentry.io, operated by Functional Software, Inc., in the United States) to detect and fix errors in HeyDeals. When something goes wrong, Sentry receives technical diagnostic information about the error: the error message and stack trace, the page path where it happened, your browser and device type, and the same pseudonymous identifier described above. For errors that occur while processing a request, it also receives the relevant request details. We configure Sentry to minimise the personal information it receives: IP addresses, cookies, and authorisation headers are dropped before any error is recorded, and Sentry's built-in scrubber removes common credential fields such as passwords and API keys. Sentry retains this data for 30 days and then deletes it.

PostHog processes analytics data in the European Union. Sentry processes error data in the United States. Sentry does not receive your IP address (we drop it before any error is recorded); PostHog receives your IP address to estimate approximate location, as described above. We don't send either provider your email address.

HeyDeals uses a small amount of local browser storage (including a cookie) to hold the anonymous analytics identifier described above. We don't use advertising or cross-site-tracking cookies.

HeyDeals helps you compare prices, but you buy from the retailer, not from us. When you click through to a retailer's website you leave HeyDeals, and that retailer's own privacy policy and terms apply to what you do there. A click-through is an ordinary web request the retailer receives like any other visit; we don't share your personal information with them.

We take reasonable steps to protect the limited information we handle from misuse, loss, and unauthorised access — including encrypting data in transit and at rest and restricting access to the systems that store it. No method of transmission or storage is ever completely secure, but we work to protect your information and review our practices as the service grows.

Under the Australian Privacy Principles you can:

• Ask what information we hold about you and request a copy of it. Because we don't run accounts, the only identifier tied to you is your extension's random install ID — tell us that ID and we can look it up.
• Ask us to correct or delete information associated with that identifier.
• Reset your extension identifier yourself at any time by uninstalling and reinstalling the extension.
• Make a complaint. If you're not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC).

As HeyDeals grows we'll add features — such as accounts, price alerts, and email notifications — that involve new information. When that happens we'll update this policy and the "last updated" date above before those features go live.

For any privacy question or request, email privacy@heydeals.com.au. HeyDeals is operated by a sole trader in Australia (ABN 57 301 957 081).