Privacy Policy

Last Updated: October 7, 2026

1. Who We Are

I Forgot The Coupons ("the Service", "we", "us") is operated by Hayper, LLC. This policy covers the I Forgot The Coupons website (iforgotthecoupons.com) and our iOS and Android apps.

If you are a California resident, see Section 8 (California Privacy Rights).

2. Information We Collect

  • Account information: Email address and name when you create an account.
  • Authentication identifiers: Tokens from our identity provider.
  • Store connection data: When you connect to your grocery store account, we access your digital coupons and purchase history on your behalf. You sign in with your store's account credentials, but we never store your password.
  • Purchase history: Items, prices, store, and dates from your grocery receipts. This is used to rank which coupons should be clipped.
  • Coupon activity: Which coupons are clipped to your loyalty card and which are redeemed.
  • Device and usage data: Cookies, analytics events, and crash logs.
  • Notification settings: Your device push token and timezone, so reminders reach the right device at a reasonable hour where you are. We store the timezone name (for example, "America/Los_Angeles"), not your location.

3. Analytics and Tracking

On the website, analytics is handled by Google Tag Manager, which deploys Google Analytics 4. The mobile apps use PostHog for product analytics.

On the web, neither Google Tag Manager nor Google Analytics loads until you grant analytics consent. You can change your choice any time from the Your Privacy Choices page or the "Do Not Sell or Share My Personal Information" link in the footer.

What we capture when consent is granted:

  • Page views and referrer / source-medium (so we can see organic traffic and direct visits).
  • Feature events (e.g. store connected, coupon clipped, receipt imported).
  • A pseudonymous device identifier so we can stitch sessions together.

4. Cookies

The website uses these cookies:

  • iftc_consent — records your privacy preferences. Strictly necessary. 1-year lifetime.
  • session, has_session — keep you signed in (if applicable). Strictly necessary. 30-day lifetime.
  • _ga, _ga_C3XS0XKZKE — Google Analytics 4. Distinguishes users and stitches their sessions on iforgotthecoupons.com. Loaded only after consent. Up to 2 years.

5. Third-Party Data Recipients

  • Google (Tag Manager + Google Analytics 4) — web analytics. Page views, referrer, source/medium, events, IP, user agent — only with consent. Used to understand organic traffic and visitor behavior on iforgotthecoupons.com.
  • PostHog — mobile product analytics.
  • WorkOS — authentication. Receives email and sign-in events.
  • Resend — email provider.
  • Stripe — payments for paid plans.
  • Apple, Google — in-app subscription processing on mobile.
  • RevenueCat — App Store / Google Play subscriptions processor.
  • Railway, Netlify — hosting. All stored data is encrypted at rest.
  • Anthropic, OpenAI — data normalization.

We do not sell your personal information, share it with advertisers, or rent it to data brokers.

6. Data Retention

  • Account data — kept while your account is active.
  • Purchase history and clipped coupons — kept until you delete them or your account.
  • Session tokens — expire after 30 days of inactivity.
  • Analytics events — up to 7 years in PostHog.
  • Account deletion audit records — retained 7 years for legal recordkeeping.

7. Your Rights

You can:

  • Access and export your data — sign in and use Your Privacy Choices to download a JSON copy of your account data. If you can't sign in, email info@iforgotthecoupons.com from the address on your account.
  • Delete your account and data — from the mobile app under Settings, or on our website: sign in there and use Your Privacy Choices. If you can't sign in, request deletion via the account deletion form.
  • Withdraw or change cookie consent on our website — open Your Privacy Choices or the footer link any time.
  • Disconnect store integrations — from app settings.

Authenticated deletion is immediate; the form-based path for non-signed-in users is processed within 7 business days.

8. California Privacy Rights (CCPA / CPRA)

California residents have the following rights:

  • Right to know what we collect (Section 2), who we share it with (Section 5), and how we use it (Section 2).
  • Right to access your data — sign in and use the download on Your Privacy Choices. If you can't sign in, email info@iforgotthecoupons.com from the address on your account.
  • Right to delete your data — see Section 7.
  • Right to correct inaccurate data — contact info@iforgotthecoupons.com.
  • Right to opt out of "sale" or "sharing" — use the Do Not Sell or Share My Personal Information link in the footer. We don't sell data for money, but analytics tags routed through third parties may meet California's broad definition of "share" — opting out turns those off.
  • Right to non-discrimination — we will not charge you a different price or provide a different level of service for exercising your privacy rights.

We do not knowingly sell or share the personal information of consumers under 16.

9. Children's Privacy

The Service is not intended for users under 13 years of age. If you believe a child has provided us with personal information, contact us at info@iforgotthecoupons.com and we will delete it.

10. Data Security

  • All data in transit uses TLS/HTTPS.
  • Database is encrypted at rest.
  • Session tokens use HMAC signing; JWTs are validated server-side.
  • Access to production data is limited to authorized personnel.

11. Changes to This Policy

We may update this policy. Material changes will be announced in the app or by email. The "Last Updated" date at the top of this page always reflects the current version.

12. Contact

I Forgot The Coupons and I Forgot The List are both by Hayper, LLC.