What we collect, and what we don't

Who is responsible

This site is published by BestShopDealsPro, based in Pakistan. For anything on this page, write to hello@bestshopdealspro.com.

What this site collects

From reading, nothing that identifies you. There is no comment system and no newsletter database held on this site, and reading a page here does not create a record with your name on it. Having a contributor account is the one thing that does — accounts are opened by this site’s staff, and there is no public sign-up. See If you have an account below.

• Server logs. Our hosting provider records ordinary technical information about each request — IP address, time, page, browser — for security and for keeping the site up. These are held briefly by the host and are not combined into a profile of you.
• Analytics. If a privacy-preserving analytics tool is switched on for this site, it counts page views without cookies and without tracking anybody between sites. It never records your address, your name or anything you typed.
• Outbound clicks. When you use a product link, the click is counted against the product and the position on the page. It also records which page of this site you were on when you clicked — the address of the page, never anything you typed into it, so a click from a search result does not carry what you searched for. That count records the product, the position and the page, and never the person: there is no record of who you are.
• Arriving through a contributor’s link. Contributors can build a link to a product here, and the address they share carries their Amazon tracking tag. When somebody arrives through one, this site records the product they landed on and that tag — so the contributor can be shown how often the thing they shared was opened and how often somebody went on to Amazon. The tag names the contributor, never you: it is the same tag for everybody who follows their link, it is checked against the tags this site has issued and discarded if it is not one of them, and the row holds the product, the tag and the time, and nothing else. Arrive without one and no such row is written at all. Both this count and the click count above are deleted after 400 days.

If you have an account

Contributors have an account, opened for them by this site’s staff, to suggest products and to hold a tracking tag. It stores, on this site’s own database: the name you give, your email address, a one-way bcrypt hash of your password (never the password itself), the role assigned to you, and the time you last signed in. Anything you submit through the account — product suggestions, and any affiliate links generated for you — is kept alongside it so the account can be administered. Counts of how often those links were opened and followed are held against the tracking tag rather than against your account, which is why your own page can show them and why deleting the account does not delete the record of links still out there being used.

Two more things are held once you ask to be paid. Where to send it — the bank or wallet, the name on the account, and the account number — is stored encrypted, under a key kept separately from everything else this site encrypts. It is never shown back to you in full: your own page shows the last four characters, which is enough to recognise which account you gave. Whoever actually makes the transfer can see it in full on your account’s page in the admin, because they cannot send money to a number they cannot read. Ask for your account to be closed and these details are deleted with it.

The second is the receipt. When a transfer is made, whoever made it can attach the bank’s confirmation, and it appears on your own earnings page so you can see the payment was actually sent. That file is kept outside the public part of this site: it has no address of its own, it is never served by the web server, and it is handed out only to you or to this site’s staff, one request at a time. Unlike your bank details, receipts are not deleted when an account is closed — they are the record that money was sent, and that record has to outlive the account it was sent to.

If you connect WhatsApp — it is optional, and offered on your Profile page once this site’s number is live — two more things are kept. The first is your WhatsApp number, learnt from the message your phone sends to connect it, so the site knows whose account a product you send belongs to. Disconnect it from your Profile and it is deleted; closing your account deletes it too. The second is a record of each message you send to the site’s number: when it arrived and what the site did about it — whether a link was built, and whether the reply reached you. That record never holds what you wrote or which number wrote it, and it is deleted after a week. When a reply goes to you as a product photo, the number it went to and the reply itself — never anything you wrote — are kept for up to a day, so that if WhatsApp cannot deliver the photo, the link can be sent again without it. Messages from one phone are also counted for a short window, so the number cannot be flooded — as a one-way hash, the same way as the sign-in counter below, gone within the hour. The messages themselves travel through WhatsApp, which belongs to Meta, and their privacy policy covers them; the product address you send is read only to build your link.

Two limitations worth stating plainly, because they affect you: there is no email verification and no self-service password reset today. If you lose access, or you want the account and everything attached to it deleted, write to hello@bestshopdealspro.com and it will be done.

To stop the sign-in form being hammered — and to stop the link counter being padded, the arrivals described above included — the number of recent requests from an address is counted for a short window. The address is not stored: what is kept is a one-way hash of it, the counter expires automatically within the hour, and it is not used for anything else. It is never attached to a click: the row written when you follow a link has no column that could hold it. What that row does hold is the product, the position on the page, the page you were on and, if you arrived through a contributor’s link, that contributor’s tag — and that last one is not a free field. A value that is not a tag this site has issued is thrown away rather than stored, so there is no way to put anything about you there.

Cookies

This site sets no advertising cookies and no tracking cookies of its own. There is therefore no consent banner, because there is nothing to consent to. If that ever changes, a banner will appear before the cookie does — not after.

There are two, and neither follows you anywhere. bsdp_form_token is set on every page: it is a random value that comes back with any form you submit, so that a form on somebody else’s site cannot act as you. It holds nothing about you and is not read for any other purpose. bsdp_admin_session is set only once you sign in. It keeps you signed in for two hours after you last did something, is readable only by the server, and is not used to track you or to build a profile. Signing out clears it. If you tick “Keep me signed in”, a second cookie is set that lasts thirty days and does one thing: it gets you a new session without asking for your password again. It holds a random value and nothing else — no name, no address, nothing about your device — and the server keeps only a hash of half of it, so the record here cannot be turned back into a working key. It is replaced with a fresh value every time it is used. Signing out clears it, and changing your password or signing out everywhere ends it on every device at once.

One more thing is kept, in your browser rather than in a cookie. When this site puts up an announcement — a notice about something new — your browser remembers two things about it, in its own local storage on your device: that you closed it, so it does not open by itself again on every page, and that you marked it done under the bell at the top, so it stops waiting there. It holds only which notices you closed or finished and nothing about you, it is never sent to us, and nothing on our side records who has seen, closed or finished what. Clearing this site’s data in your browser forgets both, and the notice shows once more.

When you email us

Your address and your message sit in an ordinary mailbox so a reply can be written. They are not added to a mailing list, not passed to anyone and not used for anything else. Ask and the thread is deleted.

If you email to subscribe to the occasional update, your address is used only to send that update. Reply “stop” and it comes off the list the same day.

Amazon and other retailers

When you follow a product link you leave this site and arrive at Amazon, where their privacy policy and cookies apply, not ours. We have no access to your Amazon account, your basket, your order or your payment details — commission reporting tells us that a sale happened, never who made it.

The one thing worth knowing is what we deliberately do not send: this site sets a referrer policy that passes only the origin, so Amazon is not told which article you were reading when you clicked. Details of the commercial arrangement are on the affiliate disclosure page.

Fonts, images and embeds

The typeface is served from this site rather than from a font network, so no third party sees your visit through it. There are no social embeds, no comment widgets and no third-party video players on any page.

Your rights

Depending on where you live, you may have the right to ask what data is held about you, to have it corrected or deleted, to object to or restrict how it is used, and to be given a copy in a portable form. If you have never created an account, that usually amounts to asking for an email thread to be deleted; if you have, it covers the account and everything attached to it. Either way, write to hello@bestshopdealspro.com and it will be done.

If you think your data has been handled wrongly and we have not put it right, you are entitled to complain to the data protection authority for the country you live in.

Children

This site is written for adults choosing things to buy and is not directed at children. No data is knowingly collected from anybody under 16.

Changes to this policy

If the site starts using anything new — an analytics tool, a mailing platform — this page is updated first, with the date at the top changed. There is no version of this policy that quietly permits more than it says.