Privacy Policy

Effective: August 20, 2026

Kit’s Deals is operated by Private Key Commerce LLC, a Wyoming Limited Liability Company, 1309 Coffeen Ave, Suite 1200, Sheridan, WY 82801. This is the canonical privacy policy for Kit’s Deals, and it covers both kitsdeals.com and api.kitsdeals.com. It explains what information we collect, how we use it, and your rights.

The short version: Kit’s Deals has no accounts, collects no names or email addresses, sets no cookies, and runs no advertising or analytics trackers. Standard server logs and the text you optionally submit through our product-request form are essentially the whole story. The rest of this policy is the detail.

What we collect

• Server logs. When you visit the site or call the API, our hosting provider records standard request metadata: IP address, user agent, path requested, response status, timestamps.
• Anonymous service telemetry. To understand aggregate usage and enforce rate limits, our servers derive a short-lived anonymous identifier from a salted hash of the request IP address and a coarse user-agent class. The salt rotates daily, so the identifier cannot link activity across days, and it is never stored in your browser — it exists only server-side. Rate limiting is keyed the same way, on the server, with standard RateLimit-* response headers. No browser identifiers are used for either.
• Optional submissions. If you submit a product request through a form on the site (or an agent registers a watch through the API on your behalf), we collect the text of the request and any optional note. We do not ask for, accept, or store email addresses or any other contact information — the platform is zero-contact-PII by design.

What we don’t collect: there are no user accounts, so there are no names, email addresses, passwords, profiles, or payment cards. Paid API requests are authorized by per-request payment proofs (the x402 protocol), not by billing accounts.

Cookies

Kit’s Deals does not set or use cookies on kitsdeals.com or api.kitsdeals.com. No cookies for accounts, preferences, analytics, advertising, or affiliate attribution — none at all.

• Bot protection is cookie-free. Our submission form uses Cloudflare Turnstile in its token-only mode: completing the challenge produces a one-time response token that is verified server-side, and no cookie is set.
• One on-device preference. The site stores a single interface preference (the human/agent view toggle) in your browser’s localStorage. It never leaves your device and is not sent with requests.
• This describes our current practice. If we ever introduce a cookie — for example, a strictly functional security cookie during attack mitigation, or privacy-preserving analytics — we will update this policy first and describe exactly what it does.

Do Not Track and Global Privacy Control

Because we do no cross-site tracking, sell no personal information, and set no cookies, browser signals like Do Not Track and Global Privacy Control require no action on our sites: visitors with them enabled receive the identical, tracker-free experience as everyone else. Where applicable law treats a Global Privacy Control signal as an opt-out request, we honor it — there is simply no sale or sharing to opt out of.

Affiliate tracking (on other sites, after you click)

When you click a retailer link from Kit’s Deals, the destination retailer — and our affiliate networks (which may include Awin, Rakuten Advertising, Impact, CJ Affiliate, and similar partners) — may set cookies on your browser to track the referral and any qualifying purchase. This is how affiliate commissions are credited to us so we can keep the site running. These cookies are set on the retailer’s and the network’s own domains under their own privacy policies, not on kitsdeals.com: we run no click redirector, no tracking pixel, and set no attribution cookie of our own — your click goes directly to the destination.

This kind of tracking — where data about your activity on one digital property is used to deliver or attribute advertising on another — is sometimes called Interest-Based Advertising. You can manage or opt out of it via the Digital Advertising Alliance opt-out tool, your browser’s tracking-protection settings, or by clearing third-party cookies. Many retailers and affiliate networks also offer their own opt-out controls in their privacy policies.

AI processing of submissions

The text you submit through the product-request form is interpreted by an AI model running on our cloud infrastructure to categorize the request and match it to products we can watch. The model sees only the request text and optional note — there is no contact information to process. We do not train AI models on your submissions.

How we use information

• Operate the site and the API, and process your submissions and watches.
• Prevent abuse, fraud, and malicious bot activity, and enforce rate limits and our Terms of Service.
• Understand aggregate usage so we can improve the service.
• Comply with applicable laws and valid legal process, and protect our rights and the rights, safety, and property of others.

We do not sell personal information. We do not share data with advertisers.

Third parties we share data with

• Cloudflare — our hosting and edge provider, which processes requests (including the AI interpretation above) on our behalf.
• Retailer and affiliate-network sites — when you click an outbound link, your browser navigates to their domains and their privacy practices govern from that point; we do not transmit data about you to them ourselves.
• Professional advisors — lawyers, accountants, and similar advisors, in the course of the services they provide to us.
• Authorities — law enforcement or regulators when required by valid legal process, or as we believe in good faith to be necessary to protect rights, safety, or property.
• Business transferees — if Private Key Commerce LLC is involved in a merger, acquisition, financing, or sale of assets, the limited data described in this policy may be transferred as part of that transaction; this policy would continue to apply to it unless and until it is updated.

Security

We employ technical and organizational safeguards designed to protect the information we handle — and the most effective one is architectural: we simply don’t collect the data that usually needs protecting. That said, security risk is inherent in all internet technologies, and no one can guarantee perfect security.

Retention

• Server and edge logs: retained for the period set by our hosting provider, typically 30 days.
• Anonymous telemetry: the daily salt rotation means identifiers are unlinkable after 24 hours; only aggregates are kept long-term.
• Submission text: retained while we evaluate and monitor it for the watchlist; deleted on request.

In general, we keep information only as long as needed for the purposes above, considering the sensitivity of the data and our legal obligations, and then delete, anonymize, or isolate it.

International transfer

We are a U.S. company and the service is hosted in the United States (with a global edge network). If you access Kit’s Deals from elsewhere, the limited information described above is processed in the U.S., where privacy laws may differ from those of your country.

Children

Kit’s Deals is not intended for anyone under 18 years of age, and we do not knowingly collect personal information from children. If you believe we have collected information from a child in a manner prohibited by law, contact us and we will delete it as required.

State privacy rights

Kit’s Deals is operated by a small Wyoming LLC that does not currently meet the revenue or volume thresholds of most state privacy laws, including the California Consumer Privacy Act (CCPA/CPRA). We honor the spirit of these laws voluntarily and are transparent about the little we collect.

Depending on your state (including California, Colorado, Connecticut, and Virginia), you may have rights to know what personal information we collect, access a copy of it, correct it, delete it, and appeal a denied request — all free from discrimination for exercising them. Because we have no accounts and collect so little, in most cases we honestly cannot associate any stored data with you specifically; where we can, we will honor verified requests.

To exercise any right, email hello@kitsdeals.com with “Privacy request” in the subject line, or write to the address above. We will respond within the timeframes required by applicable law and may need to verify your identity (and, for authorized agents, proof of authorization) before fulfilling a request.

Categories of personal information we collect

• Identifiers and internet/network activity: IP address, user agent, path requested, timestamps — standard server and edge logs, plus the day-scoped anonymous telemetry hash described above.
• Customer records: text you submit through the optional product-request form, plus any optional note. No email addresses or other contact information.

Sale or sharing of personal information

We do not sell or share personal information for cross-context behavioral advertising as defined under California law, and have not in the preceding 12 months. We honor Global Privacy Control signals as described above. When you click an affiliate link, you leave our site for a retailer’s domain — tracking that happens there is governed by their privacy practices, not ours. We have no actual knowledge of collecting or selling the personal information of consumers under 16.

California “Shine the Light.” We do not disclose personal information to third parties for their own direct-marketing purposes, so there are no disclosures to report under California Civil Code Section 1798.83.

Nevada. We do not sell covered information as defined in Nevada Revised Statutes Chapter 603A; Nevada residents may nonetheless submit opt-out requests to the contacts above.

Updates

We may update this policy from time to time. Material changes will be reflected in the effective date above — and, as noted, any introduction of cookies would be disclosed here before it happens. Continued use of the site after a change constitutes acceptance of the updated policy.

Contact

Questions about this policy: hello@kitsdeals.com, or Private Key Commerce LLC, 1309 Coffeen Ave, Suite 1200, Sheridan, WY 82801.