Privacy policy.

What we collect

When you follow a purchase button through /go/, we record the product slug, destination URL, affiliate network (or direct link), referral website origin, UTM source, medium and campaign labels, a country code supplied by our hosting provider, the time, and a daily rotating keyed hash of the browser’s user agent.

Our application click records store the hash, not the raw user agent. We do not read, hash or store IP addresses in the clicks table. A browser hash is a pseudonymous technical value, not proof of a unique person. We count clicks, not people. Known bots and prefetch requests are excluded where detected. When popularity statistics are enabled, a random first-party browser identifier in an HttpOnly, SameSite cookie (fm_visitor, up to 12 months) is used to create a separate keyed hash. Only that hash goes to the database; the random identifier and IP address are not stored there. It deduplicates repeat clicks on the same find within 24 hours, including across UTC midnight. Clearing cookies or using another browser creates a different identifier; this does not identify a unique person.

Referral paths, queries and fragments are discarded. Campaign fields are length-limited but may contain text supplied in a link. Please do not put personal information in UTM parameters.

Why these records exist

We use click counts to understand which finds and referral sources are useful and to check that outbound links work. The data does not contain order, payment or purchase-conversion records. We do not use it for cross-site advertising profiles or sell click records.

Preferences on your device

Your saved finds, list/grid preference and dismissed welcome panel are stored in localStorage. The visible 0/1 save count is your own browser state. When popularity statistics are enabled, new save and unsave actions also send the product slug, saved state and hashed browser identifier to our server for aggregate ranking. Existing local saves are not uploaded automatically. The popularity score weights active saves twice and deduplicated clicks once, then divides by (days published + 2) to the power of 1.5; it stays hidden below three interactions. You can unsave a find before clearing storage, or clear site storage to remove local preferences and the identifier. The search and filters can appear in the page URL. The newsletter panel is a preview: it does not submit or store your email address.

Service providers and external sites

Content and placeholder illustrations are served by Sanity and its image CDN. Click records are stored in a Supabase database in Singapore. Authorized administrators view the aggregate statistics through a password-protected page. No advertising or third-party browser analytics scripts are installed by FindsMate.

Hosting and infrastructure providers necessarily process network requests, which can include IP addresses in their own operational systems. Our no-IP statement concerns FindsMate’s application click records, not a guarantee about provider access logs. Provider processing and international transfers depend on their terms and the final hosting configuration.

Brand websites and affiliate networks have their own privacy policies and may use cookies after you leave FindsMate. Read our affiliate disclosure before following a purchase link.

Retention and your choices

Local preferences remain until you clear them. We retain click logs and optional saved-state records in our active analytics database for 12 calendar months from collection (or the last save-state change), then delete them through a daily cleanup job. Expired records are removed at the next daily run.

We respect the rights recognized under the GDPR and CCPA where applicable, including requests for access, correction, deletion, and an opt-out of or objection to processing. This includes opting out of sale or sharing for cross-context behavioral advertising where those rights apply. We do not sell personal information or share it for that advertising purpose.

How to exercise your rights

Email hello@findsmate.com with the request you want us to consider: access, deletion, an opt-out or an objection. We respond within the time required by applicable law, verify requests proportionately when necessary, and explain any limitation. We do not discriminate against you for exercising applicable privacy rights.

Do not send passwords or sensitive personal information. We cannot reliably identify a person from these pseudonymous hashes and will not collect extra identifying information solely to associate pseudonymous clicks with you. You can clear local preferences directly in your browser. If processing relies on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Applicable law

This policy is governed by the laws of the People’s Republic of China. This does not limit mandatory privacy rights or protections that apply to you under the GDPR, CCPA or other applicable law.

Changes

We will update this page when the data we collect, our providers or our purposes change. A live newsletter, advertising service or additional tracking requires a policy update before it is enabled.

Operator and contact

FindsMate is operated by Xiamen Shen'er Technology Co., Ltd.（厦门深二科技有限公司）, based in Xiamen, Fujian, China.

For privacy requests, content corrections or questions about these terms, email hello@findsmate.com.