Privacy policy
Last updated
This policy explains what CartRevolt collects, why, who can see it and how long we keep it. We don't sell your personal information, and you can download or delete your data at any time in Settings.
On this page
Who we are
CartRevolt is a deals site run for people in the United States. It is operated by iProMentor IT Solutions ("we" and "us" in this policy).
Write to support@ipromentor.com with any question about this policy or your data.
What we collect and why
Your account
You sign in with Google, Apple or Instagram. There is no CartRevolt password. From Google or Apple we receive your account id, your email address and your name. From Instagram we receive your account id and username, and no email. If you sign in with Instagram, we ask you to confirm an email address the first time one is needed: when you enter a draw or turn on email notifications.
We keep your handle, display name, any profile photo you add and your settings. We never ask for sensitive details.
When you sign up, you confirm that you're 18 or older and agree to the terms and this policy. We record that agreement with its date and the version of these pages, and record it again the next time you sign in after they change. Settings shows when you agreed.
What you tell us
Your interests, your needs list and anything you write about what you need, life events you add (such as a move), and the categories, stores and events you follow. We use them to pick the deals you see and the alerts you get.
What you post
Deals with their photos, links and codes; notes and comments; questions and answers; reports; invite codes you share; your storefront's picks and collections; and a winner's note if you write one. Photos are re-encoded before they are stored, which removes location and camera details.
What you do on CartRevolt
Deals you save, reactions, Helpful and Thanks marks, your answers to "Did it work?", and visits to a store through our links (we count each click). The members you follow and vouch for, and the contribution points your activity earns.
Draws
When you enter a draw you confirm that you're 18 or older and which state you live in, and accept the official rules. We keep your entries and any answer to the day's question. If you win, we ask for what we need to send the prize, such as your name and shipping address, and only then.
AI apps you connect
You can let an AI app, such as Claude or Codex, use CartRevolt as you, and see or disconnect it in Settings, Connected apps. We keep which app you connected, what you allowed it to do and when it was last used, and only hashes of its access keys. The app sends us what each request needs: your search words, or the deal you post with its link, price, codes and any screenshot you add. We never receive your conversation with the app. What we send back goes to that app, and the app's own privacy policy covers what it does with it.
Device and network
For each signed-in session we keep a salted hash of your IP address and of your browser's user agent, never the raw values. We use them to spot abuse, such as one person running several accounts. For visitors who aren't signed in, we keep a random id in a cookie and a salted hash of the network, to hand out invite codes fairly and to count store visits.
New accounts and first draw entries pass a bot check by Google reCAPTCHA Enterprise, which looks at your browser and how the page is used. Google's privacy policy and terms of service apply to that check.
Cookies and browser storage
- A sign-in cookie that keeps you signed in. Only a hash of its value is stored on our side.
- A short-lived cookie that protects each sign-in from tampering while you're away at Google, Apple or Instagram.
- A cookie that remembers your personalized ads choice when you aren't signed in.
- A cookie with the handle of the member who invited you, when you arrive from an invite link, kept for 30 days.
- The random visitor id above, kept for 30 days.
- Your theme and unfinished drafts, kept in your browser's own storage. They never leave your device.
- Cookies Google sets for ads and for the bot check (see Ads and your choices).
How we use it
- To run your account and keep you signed in.
- To show deals that match your needs and interests, with the reason each one appears.
- To publish what you post, and to count what helps others (codes that worked, helpful notes).
- To run draws: check who can enter, pick winners in public and send prizes.
- To send the notifications you allow.
- To keep the site safe: bot checks, rate limits, spotting linked accounts and moderating posts.
- To fix errors and understand use through totals, such as deals posted per day. We don't use an outside analytics service.
What other people can see
Your page at cartrevolt.com/@handle shows your handle, display name, profile photo, follower count and reputation (with its parts), the deals you posted and your wins. Deals, notes, questions and answers you post are public, with your name. If you open a storefront, its picks, collections and notes are public.
Invite codes you share show your display name only if you choose that; otherwise they say "a member". Draw winners' display names and handles are published with the prize and the date, and a winner's note appears only after review. The public list of draw entries shows pseudonymous tokens and ticket counts, never names.
Nobody's list of the members they follow is public. Your needs list, saves, settings and email address are never shown to others.
Ads and your choices
Ads pay for CartRevolt. They come from Google AdSense, are always labelled Advertisement, and never change which deals you see or their order. Google picks the ads and uses cookies to do it.
You can turn personalized ads off on Your privacy choices, open to everyone, or in Settings when you're signed in. With them off, Google shows ads based on the page, not on you. If your browser sends Global Privacy Control, we treat it as off. Any "no" wins: your account setting, your browser's choice or Global Privacy Control.
Read how Google uses information from sites that use its services.
Email and notifications
Notifications arrive in the app first. Email goes only to an address you or your sign-in provider confirmed. Messages about your account, a win, a decision on your post or a code you saved are always sent in the app; you can turn their email copies off.
Everything else, like a new match for your needs or a draw closing soon, counts toward a daily limit you set, waits out quiet hours and says why it was sent. You choose each kind, the daily limit and quiet hours in Settings, Notifications.
Every email says why you got it and links to your email settings. Emails about new matches also have an unsubscribe link that works in one click, without signing in.
How long we keep it
We keep your account information while your account is open. Some records have their own limits:
| Record | Kept for |
|---|---|
| Store visits through our links, invite code requests and answers | 90 days, then only daily totals |
| Sessions, with their network and browser hashes | 30 days after they expire |
| AI apps you connect, and their access keys | Until you disconnect the app (keys expire after an hour, or 30 days for renewal keys), then 30 days |
| In-app notifications | 90 days |
| Records of notifications sent | 30 days after sending |
| Email confirmation codes | 24 hours after they expire |
| What you write to an assistant, and its suggestions | 30 days, then blanked |
| AI checks on posts (a label and a short reason, not a copy of the post) | 90 days after a moderator decides |
| Moderation decisions | 3 years |
| The link between your account and your draw tokens | 12 months, or until any dispute closes |
| Your agreement to the terms and this policy | While your account is open, and 3 years after it is deleted |
| A winner's contact and shipping details | 90 days after the prize is delivered |
| Draw tokens and the public draw record | Kept, with no personal details |
When you delete your account, your sign-in, email, profile photo and personal lists go at once, and your name and handle are replaced after 30 days. Posts stay, shown as a former member. Draw entries, winner records and moderation records are kept for the periods above.
Your rights and choices
- Download your data. Settings, Your data, gives you a file of your profile, settings, posts, draw entries and activity.
- Delete your account. Also in Your data. It needs a recent sign-in, and the result is described above.
- Correct it. Change your display name, handle and photo on your profile, and your interests, needs and settings in Settings. A handle can change once every 30 days.
- Opt out. Turn off personalized ads on Your privacy choices, and any notification in Settings.
Some US states give their residents rights to know, get a copy of, correct and delete their personal information, to opt out of its sale, sharing or use for targeted ads, and to appeal a decision on a request. The tools above are open to every member, wherever you live, and you can also write to us at support@ipromentor.com.
To protect your account, we act on requests from inside your signed-in account. If you write to us, we reply to the email on your account or ask you to sign in, so we know the request comes from you. Using any of these choices never changes the deals you see or your chances in a draw.
Children
CartRevolt is for adults, and draws are only for people 18 or older. We don't knowingly collect personal information from children under 13. If you think a child has given us information, write to us and we will delete it.
Security
- There are no passwords to steal. Sign-in goes through Google, Apple or Instagram.
- Your sign-in cookie can't be read by scripts, and we store only a hash of it. You can see and end your sessions on your Account page.
- Deleting your account and other sensitive actions need a recent sign-in.
- A winner's contact details are encrypted. Only staff with that role can read them, and every read is logged.
- The site is served over HTTPS.
Changes to this policy
When we change this policy, we update it here and change the date at the top, which is the day that version takes effect. Related pages: Terms of service, Your privacy choices and the official rules.