Privacy Policy
Last updated: .
What we collect
Account and billing details are processed by Whop (checkout) and Discord (community access) under their own privacy policies — we don't receive your payment details. Inside the community we store the alert roles you opt into (stores, region, categories), and any flips you voluntarily log with the Ledger commands (item names, buy/sell amounts) so we can show you your own profit tracking. Deal posts carry a per-post trace marker used solely to investigate leaks of members-only content. This website itself calls api.paydirt.gg, and standard server/API logs (IP address, user-agent, timestamps) are kept for security and operations.
Depending on the features you use, we also store:
- Your home ZIP code, if you save one (with
/zip, a ZIP form in the community, or the member app). We may use it:- to look up stores and in-store finds near you;
- to set the time zone for your quiet hours, where that feature is on;
- and, only if you choose to turn on local tags, to place you in an area role. That role is visible on your community profile and shows the first 3 digits of a ZIP in your area (your own or a nearby one), never a full ZIP. Turning local tags off with
/zipremoves the role.
- Items you watch (
/watch) and deals you save. - Your Discord user ID and username when you sign in to the web Scanner (a signed session token is stored in your browser's local storage).
- Finds you submit with
/submit(store, location, photo). - When you click a tracked deal link: the link, the time, and your browser's user-agent.
How we use it
- To deliver deal alerts to the roles you opted into.
- To calculate and show your own profit tracking (the Ledger).
- To operate, secure, and improve the service — including protecting members-only content.
Deadline reminders
If you turn on settlement deadline reminders, your browser gives us a push address for that device only: no account, no email and no name. We use it only to send the reminders you picked, and you can turn them off in the same place.
Measurement
Links from this site to our Whop checkout carry a campaign tag (a utm_content value such as home-hero) so we can tell which page sent you. It identifies the link, not you, and no personal information is added. When you tap a join button, your browser also sends one request to paydirt.gg/_c/… that names only the button (for example home-hero). It sets no cookie and carries no identifier; our server logs it like any page request. If you arrived through a tagged link (one of our pins or posts, for example), this tab keeps that link's source tags in your browser's session storage until you close it, and a join button passes them on to Whop in place of ours, so we can tell which post sent you; nothing about you is kept or sent with them. If you arrived from a social network or Discord without a tagged link, this tab keeps only that site's name (for example x or facebook) the same way, so we can tell which network sent you; the address you came from is not kept or sent. If we add site analytics, we will only use a cookieless, privacy-friendly provider that counts page views without cross-site tracking or personal profiles — and this section will name it.
Third parties
Deal links may be affiliate links. When you click them, retailers and affiliate networks (including Amazon) may set or read cookies and collect information directly from you under their own privacy policies — third parties, including Amazon and other advertisers, may serve content and advertisements, collect information directly from visitors, and place or recognize cookies on visitors' browsers. We use AI service providers to help draft our public posts; they may process community content (never payment data).
YouTube API Services
Paydirt uses YouTube API Services, and only to upload our own videos to our own YouTube channel, youtube.com/@Paydirt-deals. Google's use of data is covered by the Google Privacy Policy, and YouTube's own terms are the YouTube Terms of Service.
- What we access and store: only an OAuth token for our own channel, kept on our server. We collect no viewer or third-party YouTube data: we don't read, store or share anything about you or your YouTube account, and our YouTube features set no cookies on your device.
- How it's deleted: the token is deleted from our server when we stop uploading or revoke its access, and a revoked token stops working at Google immediately. For any deletion request, email support@paydirt.gg.
- Revoking access: access granted to Paydirt can be revoked at any time on the Google security settings page, security.google.com/settings/security/permissions.
What we don't do
We don't sell your personal information, and this website sets no analytics cookies and runs no advertising or social-media tracking pixels. We share data only with the providers that run the service — Whop (membership and checkout), Discord (the community), our hosting providers, and the AI providers above — and only as needed to operate it.
Your choices
You can change your alert roles anytime in the community, and you can request access to or deletion of your data by emailing support@paydirt.gg.
Retention
We keep information for as long as your membership is active and as needed for legal, accounting, and security purposes, then delete or anonymize it.
Security
We use reasonable technical and organizational measures to protect information. No method of transmission or storage is 100% secure. Found a vulnerability? Report it to developer@paydirt.gg.
Children
Paydirt is not directed to children under 18 and we do not knowingly collect their information.
Changes & contact
We may update this policy; material changes will be posted here. Questions or requests: support@paydirt.gg.