Legal · last updated 25 August 2026
Privacy policy
Short, because the site does little. There are no accounts, no newsletter and no advertising trackers — but clicking an offer does send data to an affiliate network, and that part is set out in full.
This policy covers PromoYeti at promoyeti.com. It explains what is collected when you read the site, what happens when you click through to a shop, and how to exercise your rights. Contact for anything in it: [email protected].
What we do not do
- No user accounts, logins or profiles — there is nothing to sign up for.
- No newsletter, so no e-mail list.
- No advertising or social-media tracking pixels on our pages.
- No selling or renting of personal data to anyone, for any purpose.
What is processed when you read a page
Our web server keeps standard request logs — IP address, timestamp, requested URL, referrer and user-agent — which exist to run and secure the service and to diagnose faults. They are not used to build a profile of you.
Page fonts are served from Google Fonts, which means your browser requests font files from a Google domain and Google receives the request metadata that any web request carries, including your IP address.
What happens when you click an offer
This is the part worth reading. Outbound offer links go through a redirect on our own domain (/click/…). When you use one:
- your IP address, browser user-agent and the request headers are sent to our affiliate tracking service so that a later purchase can be attributed to this site;
- a cookie is set on our domain, named
_mtfi__<merchant>, lasting 24 hours, which lets a repeat click be joined to the same visit; - you are redirected to the merchant, or to the affiliate network’s tracking URL, which will set its own cookies under its own policy.
If you never click an offer, none of the above happens. Merchant and network privacy practices are theirs, not ours — once you land on a shop’s site you are covered by that shop’s policy.
Lawful basis
| Processing | Purpose | Lawful basis |
|---|---|---|
| Server request logs | Operating and securing the site, diagnosing faults | Legitimate interests (Art. 6(1)(f)) |
| Affiliate click tracking | Attributing a referred purchase so the site can be funded | Legitimate interests (Art. 6(1)(f)) — the processing is limited to what attribution requires |
| Correspondence you send us | Answering corrections, partnership and privacy mail | Legitimate interests, or legal obligation for rights requests |
Retention
| Data | Kept for |
|---|---|
| Server request logs | A short operational window, then rotated out |
| Affiliate click cookie | 24 hours from the click |
| Records held by the affiliate network | Per that network’s own retention policy |
| E-mail correspondence | As long as needed to resolve it, and to show we did |
Who receives data
- Our hosting provider, as a processor, in the ordinary course of serving pages.
- Our affiliate tracking service and the affiliate networks, for click attribution as described above.
- Google, for the font files your browser requests.
Some of these are outside the EEA and the UK. Where that is the case, transfers rely on the recipient’s standard contractual clauses or an adequacy decision.
Your rights
Under the GDPR, the UK GDPR and comparable laws you may request access to your personal data, correction, erasure, restriction or portability, and you may object to processing carried out on the basis of legitimate interests. Write to [email protected] and we will respond within the statutory period.
In practice, the honest answer to most access requests will be that we hold nothing identifiable about you beyond, possibly, a short-lived server log entry — because there is no account and no mailing list. If you have written to us, we hold that correspondence.
You also have the right to complain to your supervisory authority — in the UK, the Information Commissioner’s Office; in the EU, the authority for your member state.
Children
This site is aimed at adults doing their own shopping and is not directed at children. We do not knowingly collect data from anyone under 16.
Changes
If this policy changes materially, the date at the top of the page changes with it. Nothing here is applied retroactively to data already collected.