Skip to content
HeftyApp logo Get Hefty for free

Privacy Policy

At HeftyApp, we take your right to privacy seriously. We are committed to protecting your personal data and handling it in accordance with applicable laws, including the EU General Data Protection Regulation (GDPR) and Danish legislation.

Data Controller
HeftyApp is operated by Rocketways ApS (CVR: 44534215), located at Leifsgade 27, 5, 2300 Copenhagen S, Denmark, which is the data controller for the processing of your personal data. If you have any questions about how we handle your data, you can contact us at marketing@rocketways.com.

What Information Do We Collect?
We only collect the information necessary to deliver and improve our services. This may include:

  • Contact Information: Such as your name and email address, if you sign up for our newsletter or contact us via our website.
  • Browser Data: IP addresses, device information, and browsing history, which are collected through cookies to optimize your experience and analyze traffic.
  • Voluntary Information: Other information that you provide to us when using our services.

How Do We Use Your Information?
Your data is used for the following purposes:

  • Delivering and Improving Services: To ensure you have access to the best prices, discount codes, and reviews.
  • Communication: To respond to your inquiries or send you relevant updates.
  • Analysis and Optimization: To improve our website and services based on user behavior.
  • Legal Requirements: To comply with applicable laws.

Cookies and Tracking
We use cookies to collect information about your activity on our website. Cookies help us to:

  • Remember your preferences.
  • Analyze how you use our website.
  • Display relevant offers and content.

You can change your cookie preferences at any time via the “Change Consent” link on our website.

Protection of Your Data
We protect your information through technical and organizational measures. This includes data encryption, access control, and continuous assessment of our security practices.

We only store your personal data for as long as it is necessary for the purposes for which it was collected, or as required by law.

Your Rights
As a user, you have the following rights:

  • Right of Access: To access the personal data we hold about you.
  • Right to Rectification: To request the correction of inaccurate or incomplete information.
  • Right to Erasure: To request that your information be deleted where possible.
  • Right to Data Portability: To receive your information in a structured and commonly used format.
  • Right to Object: To oppose the processing of your data.

You can exercise your rights by contacting us at marketing@rocketways.com.

The Browser Extension and the App
When you use HeftyApp as an extension in Chrome or Safari or as an app on iPhone, we process the following information:

  • The Page You Are On: The extension sends the address of the page to our server so we can show discount codes, prices, and information about the shop. We only store the shop’s domain (e.g. ellos.dk), your country, and whether we had codes for the shop. We do not store the full address.
  • A Random ID: The extension creates a random ID when you install it. It is not linked to your name, your email, or an account. We use it to count how the extension is used, e.g. whether you view, copy, or click a code.
  • Price Comparison and Price Alerts: When you look at a product, the extension sends the product’s details, e.g. name and price, so we can find it cheaper elsewhere.
  • Automatic Testing of Discount Codes: The extension only tests codes when you press “Get discount now”. It enters the codes into your cart at the shop, directly in your browser, and removes them again so that only the best code remains. Afterwards, it sends us a result for each code: the shop’s domain, the cart total, the saving, the change in shipping, whether the code worked, the shop’s error message, and the random ID. The code itself is only stored as a one-way hash. We never receive your items, your name, your address, or your payment details. We use the results to show the codes that work.
  • Commission: Some shops pay HeftyApp a small commission when you shop with them. When a code from us has saved you money, or when you copy a code, the extension opens the shop’s affiliate link, e.g. via Partner-ads, in a tab that closes itself. The link sets a cookie with the shop or the affiliate network so the purchase can be registered as coming from HeftyApp. It costs you nothing, and the price is the same. We do not do this if the shop’s program does not allow it, or if you have recently come to the shop via someone else’s link.

Wishlists
You can make wishlists on heftyapp.com and, in Denmark, in the extension and in the app, and share them with friends and family. This is how we process the information:

  • Your Email. When you create and log in to a wishlist, we use your email address to send you a login link. There is no password. We do not use the email for anything else, and we do not send you newsletters or ads. While you are logged in, we store a login key on your device and, as a one-way hash, with us. We also store which language you logged in with, so login emails and links to your lists are in your language. When you ask for a login link, we store your email and your IP address with the attempt for 7 days to be able to stop abuse. A login key you have not used for 365 days expires and is deleted.
  • Cookie on heftyapp.com. When you log in to the wishlist on heftyapp.com, we set a necessary cookie, hfty_wl, with your login key, so you stay logged in. The cookie cannot be read by scripts on the page (httpOnly), is only sent to heftyapp.com, and expires 1 year after you last used the wishlist. When you log out or delete your account, we delete it. The extension and the app do not use the cookie.
  • Lists, Wishes, and Notes. We store the list’s title and any date as well as your wishes: the product’s name, link, image, price, quantity, and your own note.
  • Guests. The people you share the list with do not need an account. If a guest wants to reserve a wish, the guest only types a name. The name is stored with the reservation but shown to no one: neither to you as the owner nor to other guests. Others only see that the wish is reserved and how many are reserved. You as the owner never see what has been reserved, not even when you open your own shared link while logged in. The guest’s browser gets a random ID so the guest can see and undo their own reservations. The ID is stored with the reservation (as a one-way hash) and deleted with it. To prevent abuse, we limit how many reservations can be made per hour, based on a hash of the IP address. It is stored for at most an hour.
  • Who Can See the List. Anyone with the list’s link can see it. The list is not searchable and is not shown by search engines. The link is long and random, but only share it with the people you want to see the list.
  • Statistics. We count anonymously how many lists, wishes, views, reservations, and clicks on Buy there are, and which shops (domains) are clicked. The counts contain no names or emails.
  • Deletion. When you delete a list, it disappears at once for you and for everyone who has the list’s link, and the reservations on it (including guests’ names) are deleted at once. When you delete a single wish, it disappears at once, but a reservation on it stays so the guest who reserved it can see that the wish has been removed. Deleted lists and wishes, with any reservations, are removed completely from our database after 30 days. You can delete your whole account yourself under “Delete my account” on your wishlist on heftyapp.com or in the app. We then delete at once and for good your lists and wishes, the reservations on them (including guests’ names), your login keys, your login attempts, and your email.
  • Commission. When you or a guest press “Buy” on a wish, the link may go via an affiliate network, e.g. Partner-ads, and Hefty may earn a small commission when you buy via the list. It costs you nothing. It also says so on the list and at the Buy button: “Hefty may earn a small commission when you buy via the list. It costs you nothing.”

Third Parties
We do not share your personal data with third parties unless it is necessary to deliver our services or we are required to do so by law.

Complaint to the Data Protection Agency
If you are dissatisfied with our handling of your personal data, you have the right to file a complaint with the Data Protection Agency:

Changes to the Privacy Policy
We reserve the right to update this privacy policy to reflect changes in our services or legal requirements. The latest version will always be available on our website.

If you have any questions or concerns regarding this privacy policy, please feel free to contact us:

Rocketways ApS
Leifsgade 27, 5
2300 Copenhagen S
Email: marketing@rocketways.com