Privacy Policy

Last updated: April 25, 2026

RainDay Deals is operated by StanHattie LLC. This policy describes what we collect and how we use it.

What we collect

• Account data — email, display name, signup timestamp.
• Authentication artifacts — magic-link token hashes (we never store the raw token), passkey credential public keys (we never see your biometrics).
• Location preference — the lat/lng + radius you set for nearby-deal filtering.
• Redemption history — which deals you claimed and at which businesses.
• Diagnostic data — IP address (hashed for audit logs), browser type, page views (only after you accept analytics cookies).
• Business profile data — business name, address, hours, deal templates.

What we don't collect

• We do not store passwords. There aren't any.
• We do not store your biometric data. Passkeys store private keys on your device, not on our servers.
• We do not buy or sell your data.

How we use it

We use your data to: deliver deals you can actually redeem, send transactional email (sign-in, contact form receipts, occasional product updates), prevent fraud, and answer support inquiries.

Cookies and tracking

We use a session cookie for authentication (HttpOnly, Secure, SameSite=Lax). If you accept analytics cookies, we also load Google Analytics 4 and Microsoft Clarity for aggregate usage measurement. Decline = no analytics cookies, period.

Subprocessors

We use these third-party services to run RainDay Deals:

• Railway — backend + Postgres hosting
• Cloudflare — DNS, CDN, edge security
• Stripe — payments + business payouts
• Resend — transactional email
• Migadu — inbox hosting for our team
• Tomorrow.io + OpenWeather — weather data
• Mapbox — map rendering
• Google Analytics 4 + Microsoft Clarity — aggregate analytics (only with consent)
• Backblaze B2 — backups

Your rights

You have the right to access, correct, or delete your data. Email support@raindaydeals.com with your request. We respond within 30 days.

Data retention

Active accounts: data is kept while the account is active. Inactive accounts (no sign-in for 12+ months): we send a reactivation email at month 10, archive at month 12, and delete at month 18. Transaction records are kept 7 years for tax compliance. Audit logs are kept 2 years.

Children

RainDay Deals is not intended for users under 13. We do not knowingly collect data from children.

Changes to this policy

Material changes will be communicated via email or a banner on the site at least 14 days before taking effect.

Contact

StanHattie LLC
731 SE Alices Rd PMB 1035, Waukee, IA 50263
mike@stanhattie.com