Privacy & Data Governance Charter
SirenSpot.com was engineered from the ground up to respect user sovereignty and discretion. We operate under a strict Zero-Tracking architecture: no third-party tracking cookies, no invasive ad pixels, and no sale of personal data.
Zero 3rd-Party Cookies
We do not deploy Google Analytics, Meta Pixel, TikTok Pixel, Hotjar, or ad networks. You browse with complete anonymity.
Data Minimization (Art. 5)
We only collect information strictly required to deliver requested services (e.g. Creator Deal Alerts) and purge them on demand.
Instant 1-Click Unsubscribe
Every deal notification includes a cryptographic token that permanently deletes your alert record with zero confirmation delays.
1. Zero-Tracking Architecture & Browser Protection
SirenSpot sends strict HTTP security and privacy headers with every response:
- Referrer-Policy: strict-origin-when-cross-origin (Prevents leaking search parameters across domains)
- Permissions-Policy: interest-cohort=(), camera=(), microphone=(), geolocation=() (Blocks Google FLoC & hardware tracking)
- Content-Security-Policy: Strict whitelist for first-party scripts and styles; zero external telemetry scripts allowed
- X-Content-Type-Options: nosniff (Protects against MIME sniffing attacks)
2. Deal-Alert Data Processing & Single-Purpose Retention
When configuring a Flash-Deal Alert via /api/deals/alert.json:
What We Collect
• Target Creator Slug
• E-Mail Address OR Telegram Handle
• Minimum Discount Threshold
What We NEVER Collect
• IP Addresses & Geo-coordinates
• Device Fingerprints & Hardware IDs
• Browsing history across other creator profiles
3. Instant Search Engine Privacy
Queries sent to /api/search.json are executed entirely in-memory with sub-15ms latency. Queries are never persisted to disk, linked to user profiles, or shared with advertising exchanges.
4. User Rights under GDPR (DSGVO) and CCPA / CPRA
Under the General Data Protection Regulation (Articles 15–22) and the California Consumer Privacy Act:
- Right to Deletion (Art. 17): Instant self-service deletion via our 1-Click Unsubscribe Tool.
- Right to Rectification (Art. 16): Update your alert preferences at any time.
- No Sale of Personal Information: SirenSpot has never sold, rented, or monetized personal information and will never do so.
5. Data Protection Officer & Compliance Inquiries
For formal privacy inquiries, data export requests, or compliance audits, contact our designated Data Governance Team:
Privacy & Compliance Desk: privacy@sirenspot.com
Response Time Guarantee: Within 24 business hours