Privacy Policy

Who we are

This website is operated by the Dino Discounts project. You can contact us at info@dino-discounts.com.

What data we collect and why

Beta download

Downloading the plugin from our beta page asks for nothing. Beyond the standard server logs below, we record only the page or campaign link that brought you there, so we can see which channels bring people to the beta. That count also goes to our analytics, described below.

Founding licence applications

If you apply for a Founding licence, the form collects your name, email address, store URL, WordPress and WooCommerce versions, order volume, the discounts and discount plugin you use today, and the deal you want to run. These are emailed to the Dino Discounts maintainer through Resend, our transactional-email provider, so we can track your licence and send you beta updates.

That email also includes your IP address, your browser's user-agent, and the page or campaign link that brought you to the form. We use these to spot spam and to see which channels bring people to the beta. Each application is also recorded in our hosting provider's server logs, with your email address and the channel.

We will not send you unsolicited marketing email. To be removed from our records, email us directly and we will delete your address.

Beta survey

If you fill in the beta survey, your answers and email address are emailed to us through Resend, with your IP address and browser's user-agent to spot spam, so we can follow up and count the survey towards your Founding licence. If you add the install code from the plugin's Founding card, it is emailed with your answers so we can match them to your store. Each response is also recorded in our hosting provider's server logs with your email address.

Founding licence requests from the plugin

If you press "Request my Founding licence" in the plugin, your store sends us the email address you typed (only once you tick the box to send it), your install code and site-hash, the plugin version, and what the plugin counted towards the licence: whether a discount is live, how many are active and on how many orders, how many pieces of feedback you have sent, and whether you sent the survey. It is signed with your store's own key so nobody else can send it as you. We email it to ourselves through Resend, with the time it arrived, so we can check it and issue your licence. Earning and requesting a Founding licence never depends on turning on diagnostics. The plugin asks our website how many Founding licences are left only when you click "Check spots left". That request sends nothing about your store or you, though, like any web request, our host may log your server's IP address. At the same time it asks our bug-report service how many pieces of feedback your store has sent, naming only its site-hash and signed with its key, so no one else can read your count.

Contact form

If you write to us through the contact form, your name, email address and message are emailed to us through Resend, with your IP address and browser's user-agent to spot spam, so we can reply. Each enquiry is also recorded in our hosting provider's server logs with your email address.

Server logs

Our hosting provider (Railway) may retain standard server access logs (IP address, browser type, pages visited, date/time) for a limited period for security and operational purposes. We do not use these logs to identify individuals.

Analytics

We count page views (the page, the page that linked to it, and any campaign tag in the link), clicks on the discount examples and pricing buttons, launches of the live demo, and a few steps of the beta funnel: clicks on a "Download free" button, beta downloads, Founding licence applications and beta survey responses (with only the chosen answers to the recommend, installation and first-discount questions). Each one records the page and the link, button or campaign tag involved, never what you type. Our own server sends these counts to Mixpanel, stored in its EU data centre. Your browser never loads anything from Mixpanel, and no cookie or local storage is used. Visits from search-engine crawlers and link previews are not counted.

Mixpanel never receives your IP address. To tell visitors apart, our server makes a one-way hash of your IP address, your browser type, the date and a secret, so the same visitor gets a new hash every day. Only that hash goes to Mixpanel, and it cannot be turned back into your IP address.

If your browser sends the Global Privacy Control or Do Not Track signal, nothing is sent to our analytics at all, from the page or from our server.

Plugin diagnostics (opt-in)

The Dino Discounts plugin can send anonymous diagnostics to help us fix bugs during the public beta. This is off by default — nothing leaves your site unless you explicitly opt in under Settings → Privacy & diagnostics inside the plugin, and you can turn it back off at any time, which stops all future sends immediately.

What we send (only with your consent)

• A one-way site-hash — hash(your site URL + a random salt) — so we can recognise an install over time without storing your web address.
• Environment versions: plugin, WordPress, PHP, WooCommerce and MySQL versions, active theme, locale, and whether the site is multisite.
• If you enable it separately, the list of your other active plugin slugs (to detect conflicts).
• Anonymous usage counts and feature flags — e.g. how many discount rules are active, which discount types are in use — never their contents.
• If you enable error reporting: crash and error reports originating from Dino Discounts' own code only, with personal data scrubbed.

Release builds send to our own server at dino-discounts.com. It passes usage events to Mixpanel (EU data residency) under your site-hash, without your server's IP address. Error reports are not collected yet: our server discards them.

What we never send

• Your domain or site URL (only the hash leaves your site), or any email address.
• Customer or shopper personal data, or order data (totals, line items, customer records).
• Coupon codes, discount values, or the wording of your discounts.

Your beta account: if you applied for a Founding licence, we may match diagnostics to your beta account on our side to follow up on a problem. The data leaving your site still carries only the hash. Deletion: email us and we will purge everything tied to your site-hash. Processed under UK-GDPR on the basis of your explicit opt-in consent.

Cookies

This site sets no cookies for visitors. The one exception is dino_internal, which our own team sets in their browsers so that our visits are left out of the analytics; it holds no identifier. The Founding licence form posts your details directly to our own backend and loads no third-party form scripts other than the Cloudflare Turnstile check described below.

Your rights (UK/EU)

If you are located in the UK or European Union, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing of your data
• Withdraw consent at any time (where processing is based on consent)

To exercise any of these rights, email us at info@dino-discounts.com.

Data retention

We keep the details from a Founding licence application or request, a beta survey response or a contact-form enquiry until you ask us to delete them. We will not keep your data for longer than necessary.

Third-party services

This site is hosted on Railway. Our emails are sent through Resend. Website funnel counts go to Mixpanel (EU data residency), without your IP address. When our anti-spam check is switched on, Cloudflare Turnstile receives your IP address to verify the form submission. Please review each provider's privacy policy for details of their data practices.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after an update constitutes acceptance of the revised policy.

Contact

Questions about this privacy policy? Email info@dino-discounts.com.