Privacy draft

Draft for product review. This page is not a claim that Who Do Deal meets a store policy or a privacy law. Counsel still needs to review it before a public launch.

This draft describes the data the demo actually stores. It is not a finished privacy notice.

What is stored

• Account: name, email, password hash, role, and the time you accepted the draft terms.
• Company profile and offers you post.
• Saved offers, ratings, comments, blocks, and reports.
• A session cookie named wdd_session. It is http-only. The database stores a hash of the token.
• Rate-limit counters so repeated sign-in, reports, and posts can be slowed down.
• A deletion record that says an account was deleted, without keeping the email address.

What is not stored

No card number, no payment token, and no government ID. Billing is not configured. The demo does not sell ratings or report data.

Who can see it

Offer text is public. Ratings show a display name, not an email. Companies can read report text about their offers, not the reporter’s email. Moderators can see reporter and target emails so they can review a case.

Deletion

Signed-in deletion is immediate from the deletion page and from the Android account screen. It removes the password, sessions, ratings, saves, and blocks, and it removes offers posted by that company. Report reasons can remain with the story text replaced and the reporter detached, so a moderation decision still has a record. There is no email provider here, so an unverified “email us to delete” request is not accepted. A production launch still needs a confirmed-email deletion link for people who cannot sign in. That gap is listed with the release blockers.

Demo database

The default install keeps this data in a local SQLite file on the machine running the site. It is not a hosted production database.