With the following privacy policy, we would like to inform you about the types of personal data, hereinafter also referred to as “data”, that we process, for what purposes, on which legal bases and to what extent.
This privacy policy applies to all processing of personal data carried out in connection with our services, in particular our websites and web applications, the CouponCrowd applications for Android and iOS, the CouponCrowd browser extensions for Google Chrome and Apple Safari, the CouponCrowd MCP (Model Context Protocol) server and related interfaces, as well as our external online presences, for example on social networks. These services are hereinafter collectively referred to as the “online offering” or “CouponCrowd services”.
The terms used are not gender-specific.
Last updated: September 17, 2026
Industrial Nerd Ventures UG (haftungsbeschränkt)
Hauptstraße 15
74385 Pleidelsheim
Germany
Person authorized to represent the company:
Dr. Benjamin Höferlin
Email address:
team@couponcrowd.app
Legal notice:
www.couponcrowd.app/en/impress_en
The following overview summarizes the types of data processed, the categories of data subjects and the purposes of processing. The specific data processed depends on the CouponCrowd services and functions used by the respective user.
Below you will find an overview of the legal bases under the General Data Protection Regulation (“GDPR”) on which we process personal data. More specific legal bases may apply in individual cases.
In addition to the GDPR, applicable German data protection and digital-services legislation applies, in particular the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) and, where information is stored on or accessed from users’ terminal equipment, the Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz – TDDDG).
In accordance with legal requirements, taking into account the state of the art, implementation costs and the nature, scope, circumstances and purposes of processing as well as the likelihood and severity of possible risks to the rights and freedoms of natural persons, we take appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
These measures include, where applicable, measures relating to confidentiality, integrity and availability of systems and data, access controls, authentication and authorization, data separation, secure transmission and procedures for backup, recovery, deletion and handling of security incidents.
We also take data protection into account when developing or selecting software, systems and processes in accordance with the principles of data protection by design and by default.
Data transmitted between users and our online services is generally protected using encrypted HTTPS/TLS connections.
We delete personal data in accordance with legal requirements once the purpose of processing no longer applies and no other legal basis exists for continued storage.
Data may be retained for longer periods where this is required by statutory retention obligations, necessary for the establishment, exercise or defense of legal claims, required for security or fraud prevention purposes, or otherwise permitted by law.
The specific retention period therefore depends on the type of data and the function used. In particular:
Our websites, applications and browser extensions may store information on a user's terminal device or access information already stored there. This may include cookies, local storage, app storage, authentication information, extension storage and comparable technologies.
Where consent is required under § 25(1) TDDDG, such storage or access takes place only after the user has provided the corresponding consent.
Consent is not required where the storage of or access to information is strictly necessary to provide a digital service expressly requested by the user or where another statutory exception applies, in particular pursuant to § 25(2) TDDDG.
Examples of technically necessary storage or access may include maintaining an authenticated session, storing essential user preferences, securely operating an app or browser extension or transmitting information required to perform a function expressly requested by the user.
Where information obtained from a terminal device constitutes personal data or is subsequently linked with personal data, the processing of such personal data is additionally based on an applicable legal basis under the GDPR.
For optional analytics or comparable non-essential technologies, we obtain consent where legally required. Consent can be withdrawn with effect for the future through the available consent settings or other mechanisms provided for the respective service.
In order to provide our online offering securely and efficiently, we use servers, hosting infrastructure, databases, storage services, technical maintenance services and other IT services.
Data processed in connection with the provision of our services may include IP addresses, account identifiers, technical device and browser information, content transmitted to our systems, request information, access times and server log data.
We or our hosting providers may record information relating to requests made to our servers. This may include requested resources, date and time of access, transferred data volumes, technical status information, browser or client type, operating system, IP address, requesting provider and technical identifiers.
Server log files are primarily used for security, fraud and abuse prevention, diagnostics, troubleshooting and ensuring system stability.
Certain CouponCrowd functions require a personal user account. Public coupon discovery or individual public functions may also be available without signing in.
When a user creates or uses an account, we may process information such as email address, user ID, authentication data or authentication tokens, account settings and information about authorized applications or sessions.
Passwords, where used directly by CouponCrowd, are not stored in plain text.
Where OAuth or comparable authorization mechanisms are used, we process the authorization information and tokens required to establish and maintain the authorized connection. Access tokens may be cached for the duration of their validity and refreshed where necessary in order to provide the requested functionality.
CouponCrowd enables users to store, manage, search, import and share coupons and related information.
Users may provide coupon content manually or submit, share or import information such as coupon codes, text, screenshots, photographs, images, barcodes, merchant information, product or shop URLs, email or newsletter content and other source material.
CouponCrowd may process this information in order to identify and extract relevant coupon details, associate coupons with merchants or products, store the information in the user's personal Coupon Wallet and provide related functions.
Coupons added to a personal CouponCrowd Wallet are private by default unless the user deliberately publishes them or shares them with other users through a corresponding function.
If a user chooses to publish a coupon, the published coupon and associated information intended for publication may become visible to other CouponCrowd users or publicly accessible. Users should therefore not publish content containing personal or confidential information that is not intended to be shared.
CouponCrowd may allow users to obtain coupons from emails, newsletters or other messages. Depending on the function used, users may, for example, forward a coupon email to an address provided by CouponCrowd, manually submit message content, or authorize a supported integration to access relevant content.
When users forward emails to CouponCrowd, the forwarded message may contain personal data beyond the coupon itself, including sender and recipient information, message text, subject lines, images, attachments, identifiers or other message metadata.
Where a user connects an inbox, newsletter source or another external account, the scope of access is determined by the permissions authorized by the user and the technical capabilities of the respective integration. CouponCrowd processes content made available through such access for the requested CouponCrowd functionality, for example to identify and import coupons.
Users should only provide or authorize access to messages and content that they are entitled to process and transmit to CouponCrowd.
Authorization to a connected source can generally be revoked through the applicable CouponCrowd account settings or through the account settings of the external provider. Revocation does not affect the lawfulness of processing carried out before revocation.
CouponCrowd provides browser extensions for supported browsers, in particular Google Chrome and Apple Safari.
Depending on the permissions granted to the extension and the function being used, an extension may access information relating to the currently visited website. This may include the URL, domain, visible page content, selected content, merchant or product information and coupon-related information.
This access may be necessary, for example, to:
The scope of technical access is determined by the permissions granted to the extension and the specific function being used. CouponCrowd does not use page access provided to the extension for unrelated creation of general browsing profiles.
Information from a visited webpage is transmitted to CouponCrowd servers only where this is required for the respective CouponCrowd functionality or where the user initiates the corresponding action.
Where the extension accesses information stored on the user's terminal equipment, § 25 TDDDG also applies as described above.
CouponCrowd provides an MCP (Model Context Protocol) server through which compatible AI applications, assistants, agents and other MCP clients can access CouponCrowd functionality.
Depending on the MCP tool used, the MCP server may process in particular:
Public coupon discovery may be available without a CouponCrowd account. Access to private or personal CouponCrowd data requires appropriate authentication and authorization.
Users may also use supported MCP functions to add or manage coupons or initiate supported coupon extraction functions.
An MCP client or AI platform used to communicate with the CouponCrowd MCP server is a separate service. The operator of that client may process prompts, conversations, tool requests, responses and other information according to its own privacy policy and terms. CouponCrowd has no control over the independent processing performed by such third-party providers.
When an MCP client sends information to CouponCrowd, we receive the information required to execute the requested tool call. When CouponCrowd returns information to an MCP client, that information may subsequently be processed by the provider of the client.
CouponCrowd may use automated and AI-assisted methods to recognize, extract, classify or structure coupon-related information.
This may include processing information from screenshots, photographs, promotional material, websites, URLs, forwarded emails, newsletters or other content submitted or made available by the user.
Such processing may be used, for example, to detect a coupon code, merchant, validity period, conditions, product restrictions, barcode or other coupon details and convert this information into structured CouponCrowd data.
We may also use automated processes to identify publicly available coupon information on the internet.
Where external processors or technology providers are used for such processing, they receive data only to the extent necessary for the respective service and are subject to applicable contractual and data protection requirements.
AI-assisted extraction or classification used for CouponCrowd functionality does not generally constitute automated decision-making producing legal effects or similarly significant effects concerning the user within the meaning of Art. 22 GDPR.
Where users enable notifications, CouponCrowd may process notification preferences and technical identifiers required to deliver notifications, such as device or push notification tokens.
Notifications may include, for example, reminders regarding coupons that are about to expire or information concerning CouponCrowd functionality.
Users can disable notifications through the applicable app, account or operating-system settings.
CouponCrowd may contain links to merchants or other third-party services. Some of these links may be affiliate links.
If a user follows an affiliate link and subsequently performs a qualifying action, such as making a purchase, CouponCrowd may receive a commission from the merchant or an affiliate partner.
Affiliate links may contain identifiers that enable a merchant or affiliate network to attribute a visit or transaction to CouponCrowd. Depending on the respective provider, information processed may include the referring service, affiliate or campaign identifiers, timestamps, merchant information, conversion or transaction information, device or browser information and pseudonymous identifiers.
When users follow links to merchants or affiliate partners, the respective third-party provider may independently process personal data and may use cookies or comparable technologies in accordance with its own privacy information.
Where CouponCrowd itself stores information on or reads information from the user's terminal equipment for affiliate attribution, we obtain consent where legally required under § 25 TDDDG.
When you contact us, for example by email, telephone, contact form, social media or within an existing user or business relationship, we process the information provided to us insofar as this is necessary to respond to the inquiry and any requested measures.
Where permitted and, where required, after obtaining consent, we use analytics and measurement technologies to understand how our online offering is used and to improve our services.
Analytics data may include information about functions used, pages viewed, usage duration, technical device and browser information and pseudonymous identifiers.
We do not use analytics data as a basis for decisions that produce legal or similarly significant effects concerning users.
We use Google Analytics, where enabled, to measure and analyze the use of our online offering. Google Analytics may process pseudonymous identifiers, technical device and browser data and information concerning interaction with our services.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Consent (Art. 6(1) lit. a GDPR).
Privacy policy: https://policies.google.com/privacy
Further information: https://business.safety.google/adsservices/
Where data is transferred to the United States, the transfer may be based on an applicable adequacy decision, including the EU-US Data Privacy Framework for appropriately certified recipients, or on another legally recognized transfer mechanism.
We may use Google Tag Manager to manage technologies and services integrated into our website. Google Tag Manager is primarily used to control the deployment of other website technologies. The data processing carried out by technologies loaded through Tag Manager is governed by the respective sections of this privacy policy.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Legal basis: Consent (Art. 6(1) lit. a GDPR), where its use or technologies loaded through it require consent.
Privacy policy: https://policies.google.com/privacy
We may integrate functions or content provided by third parties into our online offering. These may include scripts, software libraries, fonts, graphics, videos or other content.
Technical delivery of third-party content may require transmission of the user's IP address and other technical information to the respective provider.
Where such third-party integrations are not strictly necessary to provide a service requested by the user, they are activated only where an appropriate legal basis exists and, where required, after consent has been given.
Where fonts or symbols are loaded directly from Google servers, technical information such as the IP address and device or browser information may be transmitted to Google in order to provide the requested resources.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, USA.
Privacy policy: https://policies.google.com/privacy
Where technically feasible and appropriate, locally hosted resources may be used to reduce transfers to third-party providers.
CouponCrowd applications and extensions may be distributed through third-party platforms, in particular the Apple App Store, Google Play, the Chrome Web Store and other supported distribution channels.
The operators of these platforms independently process information when users browse a store, download or update software, manage licenses or accounts, submit reviews or use other store functions.
Such processing is governed by the privacy policies and terms of the respective platform operator. CouponCrowd receives only the information made available to developers through the respective platform.
In the course of providing CouponCrowd services, personal data may be disclosed to or processed by service providers where necessary for the respective purpose.
Categories of recipients may include:
Where service providers process personal data on our behalf, we use appropriate contractual arrangements, including data processing agreements pursuant to Art. 28 GDPR where required.
Where we or our service providers process personal data outside the European Union or European Economic Area, we ensure that the requirements of Chapter V GDPR are observed.
Transfers may in particular be based on:
We maintain online presences within social networks and process user data in this context in order to communicate with users or provide information about CouponCrowd.
Operators of social networks may process user information for their own purposes, including analytics, market research and advertising. Such processing may also take place outside the European Union or European Economic Area.
For detailed information concerning processing by the respective platform, users should consult the privacy information provided by the relevant operator.
Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Privacy policy: https://privacycenter.instagram.com/policy/
Legal basis for our operation of the presence: Legitimate interests in communication and public relations (Art. 6(1) lit. f GDPR).
We maintain Facebook Pages. In connection with Page Insights, we and Meta Platforms Ireland Limited may be jointly responsible for certain collection and transmission of data in accordance with the applicable Page Insights arrangements.
Service provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
Privacy policy: https://www.facebook.com/privacy/policy/
Page Insights information: https://www.facebook.com/legal/terms/information_about_page_insights_data
We maintain profiles on LinkedIn. LinkedIn may provide aggregated Page Insights information concerning interaction with our profiles.
Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Page Insights information: https://legal.linkedin.com/pages-joint-controller-addendum
We update this privacy policy when changes to our services, data processing activities, legal requirements or technologies make an amendment necessary.
The current version of the privacy policy is made available through our online offering. Where a change requires consent or another action by users, we will provide appropriate information or request the necessary action.
As a data subject, you have rights under the GDPR, in particular under Articles 15 to 21 GDPR.
Requests concerning your rights can be addressed to:
team@couponcrowd.app
