Last updated 2026-10-21
This page describes what DealPage actually does with data, read from the code that runs the site rather than copied from a template. It covers two groups of people: creators who sign up, and visitors who open a creator's deal page or short link.
DealPage is run by WANG WENJIE, an independent developer, at deal.topxup.com. For anything in this policy — questions, export or deletion requests — write to Fuuqiu@gmail.com.
To sign up you give an email address, a name and a password. Accounts use the open-source better-auth library: we store the email address, the name and a salted hash of the password, never the password itself. There is no social sign-in today.
Signing in creates a session. The session record holds the IP address and browser user agent of the device that signed in, which the auth library keeps for security; it is removed when the session expires or you sign out.
Your public profile — handle, display name, bio, avatar URL and the social links you choose to add — is shown on your creator page at deal.topxup.com/@yourhandle.
Deals (product name, codes, destination links, your review, pros and cons, FAQ), short links, source labels and settings are stored in our database so the pages can be served. Deal pages and creator pages are public by design; draft deals are marked noindex and are not listed in the sitemap.
When someone opens a short link (/go/…), DealPage records one click: the time, which link and deal it was, the country (from the CF-IPCountry header Cloudflare adds), the device type (mobile, desktop or other, derived from the user agent), the host name of the referring site (not the full address), and whether it looks like a bot.
To count unique visitors without storing who they are, we keep a visitor hash: SHA-256 of the IP address, the user agent, the UTC date and a secret salt. The salt is secret and the date changes every day, so the hash cannot be turned back into an IP address and the same person cannot be followed from one day to the next. The IP address itself is never written to the database.
Creators see these records only as totals: clicks, daily unique visitors, sources, countries and devices.
We measure deal.topxup.com with Umami, an open-source analytics tool that we host ourselves at stats.topxup.com. It sets no cookies. The script is configured with data-exclude-search and data-exclude-hash, so query strings and URL fragments — including search terms and campaign parameters — are not collected, and it only reports on deal.topxup.com.
Besides page views we record a few named events (for example a deal page view, a code copy, a pricing page view). Their properties are short labels such as the source, the plan or the onboarding step — never an email address, a code, a full URL or a user id. Short-link redirects are reported from our server with the path, source, country and the creator's plan only.
A creator can add their own Meta Pixel ID or Google tag (GA4) ID in their settings. When they do, their deal pages and creator page load that script, and visitors' data goes to Meta or Google under the creator's own account and those companies' policies. Short-link redirects never load pixels.
The creator who adds a pixel is responsible for telling their audience and for collecting consent where the law requires it. Pages of creators who have not added an ID load no third-party tracking script.
Visitors can leave an email address on a deal page to hear about this creator's next deal or a restock. We store the address, the creator and deal it was left on, the source label of the link that brought the visitor, and when it happened. The creator can see the list and export it as CSV.
DealPage itself does not send email to subscribers today. To be taken off a creator's list, ask the creator, or write to Fuuqiu@gmail.com with the address and the creator's handle; we mark it unsubscribed within 7 days.
Paid plans are not open yet, so no payment data is collected. When they open, payments will be handled entirely by Stripe (Checkout and the Customer Portal). DealPage will store only the Stripe customer and subscription identifiers, the plan, its status and the end of the current period — never card numbers.
Cloudflare hosts the site and stores the data (Workers, the D1 database, and KV for rate limiting). Umami runs on our own server. Stripe will process payments once paid plans open. Meta and Google receive data only on pages where a creator has added their pixel. We do not sell personal data, and we do not share it with brands featured on deal pages.
Click records stay as long as the deal or short link they belong to; deleting either deletes its clicks. The dashboard shows the last 7 days on the free tier and up to 365 days on Pro and Agency — that is a viewing window, not a deletion schedule.
Account data stays until you delete the account. Session records are removed when they expire. Subscriber entries stay until the creator removes them, the account is deleted, or you ask us to remove yours.
Creators can export their subscribers as CSV at any time, on every plan (Settings & billing → Data), and edit their profile and pixels in settings. To delete your account and everything in it, email Fuuqiu@gmail.com from the account's address; we confirm and finish within 30 days.
Depending on where you live (for example under the GDPR, the UK GDPR or California law) you can ask to access, correct, delete or object to the processing of your data. Write to the same address; we answer within 30 days.
DealPage is not meant for people under 16, and we do not knowingly collect their data. If you think a child has signed up, tell us and we will delete the account.
When what the product does with data changes, this page changes with it and the date at the top moves. Material changes are announced on the site before they take effect.
DealPage (deal.topxup.com) is run by WANG WENJIE, an independent developer. Questions about this page: Fuuqiu@gmail.com.