Privacy Policy
Effective 21 August 2026 · Last updated 21 August 2026
Diskode helps you find promo codes from creators you follow. You don't need an account, and we don't want your personal details. We don't use cookies, we don't track you across the web, we don't run advertising or analytics companies' trackers, and we never store your IP address. What we keep is deliberately minimal: anonymous counts of how codes are performing, your country (two letters — never anything more precise), and anything you choose to type into a search box or a submission form. This page explains exactly what that means.
Who we are
Diskode is operated by ELDREK LLC. It runs the website at diskode.pages.dev (and diskode.com once that address is connected). If you have any question about this policy or your data, contact us at diskode.privacy@gmail.com.
We don't have accounts
There is no sign-up, no login, and no user profile. We never ask for your name, email, or phone number to use the site.
What we collect, and why
1. A device signal, used to prevent abuse and avoid double-counting. When you reveal, copy, or vote on a code, our server takes your IP address and browser type and immediately turns them into a scrambled, one-way code (a "hash") using a secret key. We do not store your IP address or browser type — only this hash.
We want to be straight with you about what this hash is: it is not fully anonymous. Because the same device produces the same hash, it acts as a pseudonymous label. For revealing and copying codes, and for codes you submit, that label is stored next to what you did, so those records could in principle be linked to the same device over time. We keep it because it's how we stop one person inflating a code's popularity and how we stop automated scraping — but we treat it as personal data and protect it accordingly. For voting and reporting, we go further: we convert the label into a separate per-code token so those records can't be tied back to a device or linked to each other at all.
2. Your country — and only your country. We use Cloudflare (our hosting provider) to translate your IP address into a two-letter country code (like "US" or "GB") at the edge of the network, before it reaches us. We only ever receive and store those two letters. We never receive or store the IP address itself for this purpose, and we never collect city, GPS, or any finer location. We use country to understand which regions to find creators for.
3. What's happening on the site (anonymous counts). So we can show real "does this code work?" signals and improve the catalog, we record events: a code was revealed, copied, voted up or down, reported, or searched for, and pages/categories that were viewed. Searches, page views, and the reveal-to-vote journey are stored with no device label at all — they're pure counts. For unique-visitor counts we use a token that changes every day and is deleted continuously, so your visits can't be linked from one day to the next.
4. Things you type.
- Searches: we log search terms to see what people are looking for. Before storing, we automatically remove anything that looks like an email or phone number.
- Reports: if you flag a code, we store the reason you pick and any optional note. The note is automatically scrubbed of emails and phone numbers.
- Submissions: if you submit a code, we store what you enter (creator name, brand, item, deal, the code, category). These fields are automatically scrubbed of emails and phone numbers and stripped of links before storage. A report or submission is a "please take a look" signal to us; it never automatically changes or publishes anything.
What we deliberately do not do
- No cookies. No local storage. We don't place cookies on your device and we don't store anything in your browser. There's nothing to "accept."
- No third-party trackers. No Google Analytics, no advertising pixels, no social-media trackers, no session-replay tools. None.
- No fonts loaded from Google or any third party. We host our fonts on our own servers, so displaying the page doesn't reveal your IP address to anyone else.
- We don't store your IP address anywhere in our database.
- We don't sell, rent, or share your data with anyone for their own purposes.
- We don't track you across other websites.
About creators' information
Diskode's catalog is built from publicly available YouTube information — a creator's channel, display name, handle, subscriber count, avatar, and text from their public video descriptions — gathered automatically to find and attribute promo codes. This is public data about creators, not private data about site visitors. Creators who want a code corrected or removed can contact us at diskode.privacy@gmail.com.
The companies that help us run the site (processors)
- Supabase — our database and server functions (hosted in Canada). Everything described above is stored here.
- Cloudflare — hosts the website and turns your IP into a country code at the network edge.
Like any website, these providers necessarily see your IP address as the source of your network request and may keep it briefly in their own security logs under their own policies. That's standard internet infrastructure — but our application never writes your IP into our database. We don't use any other third parties, and no analytics or advertising company receives your data.
How long we keep things
We keep information only as long as necessary for the purposes above — running the site, showing trustworthy code-performance signals, and preventing abuse. The short-lived tokens used for daily visitor-counting and rate-limiting are deleted automatically (within a day or two). If you'd like something you submitted removed, contact us.
Your rights
Depending on where you live (for example, the EU/UK under GDPR, or California under the CCPA), you have rights over your personal data — including to access it, ask us to delete it, or object to how we use it. You can exercise these by emailing diskode.privacy@gmail.com.
One honest limitation: because we hold no name, email, or account for you — only a scrambled device hash we can't reverse — we usually cannot identify which records relate to you unless you can help us pinpoint them. Where the law allows, we may not be able to act on a request we can't tie to specific data. We don't sell personal information, so there's nothing to opt out of on that front.
Legal bases (EU/UK)
Where GDPR applies, we rely on our legitimate interests in running a functioning, abuse-resistant service and showing honest code-performance data (kept minimal and privacy-protective by design), and on your consent/voluntary action when you choose to search, report, or submit.
Children
Diskode isn't directed at children under 13, and we don't knowingly collect their information.
Where your data is processed
Our database is hosted in Canada (Supabase), and our hosting/CDN provider (Cloudflare) operates globally. If you're outside Canada, your information may be processed there and in other countries where our providers operate.
Changes to this policy
If we change what we collect or how we use it, we'll update this page and its "last updated" date. Significant changes will be highlighted on the site.
Contact
Questions or requests: diskode.privacy@gmail.com.