← Back to GemYeti

Privacy Policy

Last updated: February 12, 2026

GemYeti ("we," "us," or "our") operates gemyeti.com. This Privacy Policy explains how we collect, use, and protect your information when you use our card deals discovery platform.

1. Information We Collect

Account Information

• Email address and name — provided when you create an account via Supabase authentication.

Payment Information

• Subscription payments are processed by Stripe. We do not store your credit card number, expiration date, or CVC. Stripe handles all payment data subject to Stripe's Privacy Policy.

Usage Data

• Pages visited, features used, search queries, deals viewed, and interaction patterns.
• Device type, browser type, IP address, and approximate location.
• Referral source and session duration.

2. How We Use Your Information

• Account management — to create and maintain your account, authenticate sessions, and process your subscription.
• Deal alerts & recommendations — to personalize the deals and market data we show you.
• Analytics — to understand how our platform is used and improve the experience.
• Communications — to send transactional emails (receipts, account changes) and, with your consent, promotional updates.
• Security — to detect and prevent fraud or abuse.

3. Third-Party Services

We rely on the following third-party services, each with their own privacy policies:

• Stripe — payment processing. Privacy Policy
• Supabase — authentication and database hosting. Privacy Policy
• Cloudflare — website hosting and CDN. Privacy Policy
• eBay Partner Network (EPN) — we display eBay listings and use affiliate links. When you click an eBay link, eBay may collect data per their Privacy Notice.
• Reddit — we aggregate publicly available Reddit data to surface social buzz around card deals. We do not share your data with Reddit.

4. Cookies & Local Storage

• Authentication tokens — stored in local storage to keep you logged in.
• Session cookies — used by Cloudflare and Supabase for security and authentication.
• Analytics cookies — to understand usage patterns (anonymous).

You can clear cookies and local storage via your browser settings, though this will log you out.

5. Data Retention & Deletion

• We retain your account data for as long as your account is active.
• You may delete your account at any time through your account settings. Upon deletion, we remove your personal data within 30 days, except where retention is required by law or for legitimate business purposes (e.g., billing records).
• Stripe may retain payment records independently per their policies.

6. Data Security

We use industry-standard security measures including encryption in transit (HTTPS/TLS), secure authentication via Supabase, and access controls. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

7. Your Rights (GDPR & CCPA)

For All Users

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your personal data.
• Portability — request your data in a portable format.

California Residents (CCPA)

• You have the right to know what personal information we collect, disclose, or sell.
• We do not sell your personal information.
• You may opt out of any future sale of personal information.
• We will not discriminate against you for exercising your rights.

EU/EEA Residents (GDPR)

• Our legal basis for processing is contract performance (providing the service) and legitimate interest (analytics, security).
• You have the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at the address below.

8. Children's Privacy

GemYeti is not intended for users under 18. We do not knowingly collect data from minors. If you believe we have collected data from a minor, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date.

10. Contact Us