Last updated: 2026-10-01
What we collect
- Email address, if you create a price alert. We use it to send that alert and nothing else.
- Messages you send us through the contact form, with the name and email address you give, so we can read and answer them. The form is protected by Cloudflare Turnstile, which checks that a person, not a bot, is sending it. To do so, Cloudflare looks at signals from your browser and device, as described in its Turnstile privacy addendum. Turnstile loads only on the contact page.
- Usage data - pages viewed, and which outbound offer links are clicked. We record the brand, the marketplace, a coarse country from your connection, and whether the device looks like a phone, a desktop or a bot. We do not store full IP addresses.
- Analytics supplied by third-party providers such as Google Analytics, which set their own cookies subject to their own policies.
What we do not do
We do not sell your email address or share it with the marketplaces. We do not ask for, receive or store payment details - every purchase happens on the marketplace's own site.
Our browser extension
If you install the CardKoala extension for Chrome, it does its work inside your browser. About once an hour it downloads our list of stores and their best gift card discounts, and it recognises a store's website by comparing the site you are on with that list, on your own computer. The sites you visit are never sent to us or to anyone else. When you click its button, it asks us for the deals on that one site and sends only the site's name, such as target.com, never the page you are on. Its settings, like the stores you asked it not to show a notice on, are kept by your browser. It has no account and collects no personal data.
Affiliate tracking
When you click through to a marketplace, the affiliate network handling that relationship may set a cookie so any resulting purchase is credited to us. That tracking is operated by the network and the marketplace, under their privacy policies, not ours.
Your choices
Every alert email carries a one-click unsubscribe link. You can ask us to delete your address entirely by writing to hello@cardkoala.com, and we will do so. Depending on where you live you may have additional rights to access, correct or export your data; the same address reaches us for those requests.
Children
This site is not directed at children under 13 and we do not knowingly collect their data.
Changes
If this policy changes materially we will update the date above. Continued use of the site after a change means you accept the revised policy.