Submit a deal
Legal

Privacy Policy

Last updated: 17 October 2026

Black Friday Vault (blackfridayvault.com) is a directory of software and WordPress deals, run by Siddardha Thammana (“I”, “we”, “us”). This policy explains what personal data the site collects, why, who handles it, and the choices you have. I keep it short and specific on purpose.

Questions or requests: hey@blackfridayvault.com

The short version

  • You can browse every deal without giving us any personal data.
  • We collect your email address only if you set up deal alerts, create an account, enter the giveaway, book an ad, or write to us.
  • We never sell your data. Giveaway entrant emails are never shared with sponsors.
  • We don’t run advertising cookies or ad-tracking pixels on this site.
  • You can unsubscribe or ask us to delete your data at any time.

What we collect and why

Deal alerts

If you subscribe to deal alerts we store your email address, the categories, deal types, minimum discount and frequency (daily or weekly) you chose, when you signed up and confirmed, and the IP address you confirmed from. We use double opt-in: nothing is sent until you click the confirmation link. We use this data to send you the alerts you asked for. Legal basis: your consent. Every alert email has an unsubscribe link.

Accounts, favourites and upvotes

If you create an account we store your username, email address and a hashed password, plus the deals you favourite or upvote and your alert preferences. We use this to run your account. Legal basis: performing the service you asked for. Accounts require a verified email address.

The Black Friday Vault Giveaway

If you enter the giveaway we collect your name, email address, your entries (including which actions earned them and any referral link used) and your confirmation that you accept the Official Rules. We use it to run the giveaway, prevent duplicate or fraudulent entries, pick and contact winners. If you tick the email consent box, we also add you to our email list. Entrant emails are never shared with or sold to sponsors. Only a winner’s name and email go to the sponsor of the prize they won, so that sponsor can deliver the licence. Entry data is deleted or anonymised within 90 days after the winners are announced unless you are on our email list or a legal obligation requires us to keep it. Legal basis: your consent and our legitimate interest in running a fair giveaway. You must be 18 or over to enter.

Advertising and featured-deal bookings

If you book a featured slot or ad, we collect your name, email, company, the creative you submit and the booking and payment details. Payments are handled by PayPal. We receive confirmation of payment and the payer details PayPal shares with us, but never your card or bank details. We keep booking records for as long as the law requires for accounting.

Messages and forms

If you contact us or submit a form (for example to list a deal or ask about advertising), we store your name, email, company, message and where you came from, so we can reply. Legal basis: legitimate interest in answering you.

Messages to software vendors

We email software makers to ask whether they have a Black Friday offer to list. We use business contact addresses found on their own public websites, and only write about their product. Every message says who we are and how to stop. If you ask us to stop, we add you to a suppression list so you are not contacted again. Legal basis: legitimate interest. To opt out, reply “stop” or email hey@blackfridayvault.com.

Outbound clicks and basic technical data

Deal buttons go through links on blackfridayvault.com/go/. We count clicks per deal to see which deals are useful. Our servers also keep standard logs (IP address, browser type, pages requested) for security and troubleshooting. To limit abuse, forms use rate limiting based on a one-way hash of your IP address.

Affiliate links

Many deal links are affiliate links. If you buy through one, the vendor or an affiliate network may pay us a commission at no extra cost to you. Clicking such a link takes you to the vendor’s site, where its own privacy policy applies, and the vendor or network may set its own cookies to credit the referral. Commissions never decide whether a deal is listed or how its real discount is checked.

Cookies and local storage

  • Essential WordPress cookies when you log in (they keep you signed in and remember your screen settings) and a temporary test cookie on the login page.
  • Local storage in your browser to remember small preferences, such as your filters or alert settings. It stays on your device.

We don’t use advertising cookies or third-party analytics cookies. If that changes, this page will be updated first.

Who processes your data

We use a small number of service providers to run the site. They act on our instructions:

  • Our web server and backups (hosting provider and backup service).
  • FluentCRM and FluentSMTP, running on our own server, to manage the email list and send emails.
  • RafflePress, running on our own server, to run the giveaway.
  • Akismet, to filter spam submissions.
  • PayPal, to take payments for ads and featured deals.

We don’t sell personal data. We may disclose it if the law requires, or to protect the site against abuse.

International transfers

Our servers and providers may be located outside your country, including outside the UK, EU and India. Where the law requires it, we rely on appropriate safeguards for those transfers.

How long we keep data

  • Alert subscribers and email list contacts: until you unsubscribe, then we keep only a minimal suppression record so you are not re-added.
  • Accounts: until you delete your account or ask us to.
  • Giveaway entries: see the giveaway section above.
  • Booking and payment records: as long as accounting law requires.
  • Messages: up to 2 years after our last contact, unless a longer period is needed.
  • Server logs: up to 90 days.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR, India’s DPDP Act or California law) you may have the right to access the data we hold about you, correct it, delete it, object to or restrict how we use it, withdraw consent, and receive a copy of it. Email hey@blackfridayvault.com and we’ll respond within 30 days. You can unsubscribe from any email using the link at the bottom of it. You can also complain to your local data protection authority.

Security

We use HTTPS, hashed passwords, double opt-in for email, access controls and regular backups. No system is completely secure, but we work to keep your data safe.

Children

This site is not aimed at children under 16, and the giveaway is for people aged 18 and over. We don’t knowingly collect data from children. If you believe we have, email us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll update the date at the top. If a change is significant, we’ll tell alert subscribers by email.