Privacy Policy

1. Introduction

FLINTLARK - FZCO ("we", "our", or "us"), the operator of DealHabibi, is the data controller responsible for your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our platform at dealhabibi.com. We operate in compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("PDPL") and its implementing regulations.

2. Data We Collect

We collect the following types of personal data:

• Email address: Collected for account authentication via magic link (passwordless login). We send a one-time login link to your email each time you sign in.
• Username and display name: Public, user-chosen identifiers displayed on your profile and alongside your deals and comments.
• IP address: Hashed and never stored in raw form. Used for rate limiting and fraud prevention only.
• Browser user agent: Collected for affiliate click tracking to attribute commissions that fund the platform.
• User-generated content: Deal submissions, comments, and votes you post on the platform.
• Keyword alert preferences: Search terms you choose to receive notifications for when matching deals are posted.
• Cookies: Essential cookies only by default. With your consent, Meta Pixel sets marketing cookies to measure advertising effectiveness. Plausible Analytics is cookieless.

3. How We Use Your Data

We process your personal data for the following purposes:

• Account authentication and management (magic link emails)
• Displaying user-generated content (deals, comments, votes) on the platform
• Affiliate click tracking — to earn commissions that fund the operation of the platform
• Analytics via Plausible Analytics — a cookieless, privacy-first analytics tool that does not collect personal data
• Advertising measurement via Meta Pixel — with your consent, we use Meta Pixel to measure the effectiveness of our advertising campaigns and deliver relevant ads. Meta Pixel collects data such as your IP address, browser information, pages visited, and actions taken on the platform
• Content moderation to comply with UAE cybercrime law
• Rate limiting and fraud prevention

4. Affiliate Tracking Disclosure

When you click "Go to Deal" on a deal listing, the following happens:

• We record the click (deal ID, timestamp, hashed IP address, and browser user agent)
• We redirect you through affiliate networks, which may include Amazon Associates, Impact, Admitad, CJ, and DCMnetwork
• The retailer you visit may place their own cookies — please refer to the respective retailer's privacy policy for details

5. Public Information

DealHabibi is a community platform. When you post a deal, comment, or vote, that content is publicly visible alongside your chosen username. We are not responsible for any personal information you choose to disclose in public areas of the Platform, such as deal descriptions or comments. We strongly recommend that you do not share personal information (real name, address, phone number, etc.) in any public content on the Platform.

6. Data Sharing

We do not sell your personal data to third parties. We may share data with third-party service providers who help us operate the platform, bound by data processing obligations. We may also disclose data when required by UAE law or to protect our legal rights.

7. Third-Party Services

We use the following third-party services to operate the platform:

• Plausible Analytics: Privacy-first analytics. Does not use cookies, does not collect personal data, EU-hosted.
• Meta Pixel: Advertising measurement tool loaded only with your consent. Uses cookies (_fbp, _fbc, fr) to track page views, interactions, and conversions to measure ad effectiveness and deliver relevant ads. See Meta's Privacy Policy.
• Resend: Transactional email delivery for magic link authentication emails.
• Railway: Hosting infrastructure for our application and database.
• Cloudflare: CDN and DNS services for performance and security.
• Affiliate networks: Amazon Associates, Impact, Admitad, CJ, and DCMnetwork for affiliate link tracking and commission attribution.

This Privacy Policy does not apply to information collected by third-party websites, services, or applications linked from the Platform. We cannot control and are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party service you interact with.

8. Cookies

In accordance with UAE Federal Decree-Law No. 45 of 2021, we are transparent about our use of cookies and similar storage:

• Essential — Authentication token: Your JWT login token is stored in localStorage (technically not a cookie, but we disclose it here for transparency). Required to keep you logged in.
• Essential — Cookie consent preference: Stores your cookie consent choice in localStorage.
• Analytics: Plausible Analytics is cookieless and does not require consent.
• Marketing (consent required): Meta Pixel sets cookies (_fbp, _fbc, fr) for advertising measurement and ad delivery. These are only loaded if you accept marketing cookies via our consent banner. You can opt out at any time by clearing your cookies and selecting "Essential Only" on your next visit. See our Cookie Policy for full details.
• Third-party: When you click a deal link and visit a retailer, that retailer may set their own cookies. We have no control over third-party cookies.

9. Data Retention

We retain your personal data only for as long as necessary:

• Account data: Retained while your account is active.
• Affiliate click data: Retained for 2 years for commission reconciliation with affiliate networks.
• IP hashes: Retained for 90 days for rate limiting and fraud prevention purposes.
• Deleted account data: Removed within 30 days of account deletion, except where retention is required by law.

10. Your Rights (UAE PDPL)

Under UAE Federal Decree-Law No. 45 of 2021, you have the following rights regarding your personal data:

• Right to access your personal data
• Right to correction of inaccurate data
• Right to deletion of your data
• Right to restrict processing
• Right to data portability
• Right to withdraw consent
• Right to lodge a complaint with the UAE Data Office

To exercise any of these rights, contact us at [email protected]. We will respond within 14 days.

11. Data Security

We implement appropriate technical measures to protect your personal data, including encrypted connections (HTTPS), hashed IP addresses (no raw IP storage), input validation and sanitization, and rate limiting to prevent abuse. However, no method of transmission over the internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

12. International Data Transfers

Your data may be processed on servers located outside the UAE. We ensure appropriate safeguards are in place for any cross-border data transfers in compliance with the PDPL.

13. Children's Privacy

DealHabibi is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Platform. Continued use of the Platform after changes constitutes acceptance of the updated policy.

15. Contact

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, contact us at [email protected].