Privacy and cookie choices.

Who controls the data

Goferrr operates this product and acts as the controller for information collected through it. Privacy requests can be sent to privacy@goferrr.com. This mailbox must be active before a public launch.

What Goferrr processes

• Essential preference: your analytics choice, its version, and the time it was saved.
• Optional analytics: a random session identifier plus searches, selected region and deadline, result clicks, performance, source, and estimated price spread.
• Shopping requests: the product query and region needed to find offers. No card numbers or payment credentials are requested.
• Optional shopping location: after you explicitly allow it in Goferrr, choosing “Allow” opens your browser's separate native geolocation prompt. If you also approve that prompt, precise coordinates are sent to Goferrr's server only long enough to resolve the nearest supported UAE emirate or city, then discarded. You can use the manual place field instead. Goferrr does not use IP-derived location, a street address, or background location.
• Common-place totals: the normalized location contributes to a place-level monthly search count with no session, IP, product query, or individual request record attached.
• Operational records: provider success, failures, latency, result counts, token counts, and estimated API cost.
• Coupon feedback: whether you report that a coupon worked or failed. A one-way daily fingerprint is used to prevent duplicate votes; Goferrr does not retain the raw IP address in the coupon record.

Why it is processed

Essential processing provides the search service, protects the private dashboard, remembers privacy choices, prevents abuse, and maintains provider budgets. Optional analytics is used only after affirmative consent to understand product usefulness and improve Goferrr. Rejecting analytics does not restrict search.

Cookies

Goferrr separates essential service and security cookies from optional analytics. See the dedicated cookie notice for every cookie, its duration, your choices, and the official UAE sources behind the policy.

Providers and international processing

When configured, Goferrr sends shopping queries server-to-server to SerpApi for structured Google Shopping results. If you permit a shopping location, only the normalized ZIP code or resolved UAE place is sent to shopping providers to improve local offers and delivery estimates. Raw coordinates are never sent to SerpApi, eBay, Gemini, or another shopping provider. Cloudflare provides hosting, security, database, and optional analytics infrastructure. These providers may process data outside the UAE under their service and data-protection terms. Goferrr does not sell personal data.

Retention and security

Precise coordinates are used transiently for place resolution and are never logged, cached, stored in analytics, retained in the common-place table, or shown in the admin dashboard. Raw analytics events, API-usage records, coupon-feedback votes, and monthly common-place totals are automatically removed after 12 months. Aggregate coupon success and failure totals remain attached to the offer so future shoppers can judge reliability. Shopping-result caches, including any normalized place in the cache key, expire after 15 minutes; grounded fallback caches expire after 6 hours. Admin keys and provider API keys are excluded from analytics exports and are kept server-side. Transport security, restricted admin access, rate limits, and short-lived access tickets protect the service.

Your UAE data rights

You may withdraw consent, stop optional statistical processing, request access, request correction or deletion, and ask for processing to be restricted where applicable. Email privacy@goferrr.com from the relevant device and describe the request. Because public analytics uses a random browser identifier rather than an account, Goferrr may ask for that identifier when technically necessary to locate records.

Children

Goferrr is a general shopping comparison tool and is not directed to children under 13. It does not knowingly request children’s personal information or use personal data for targeted advertising.

Important scope

This notice and the technical controls support compliance with the UAE Personal Data Protection Law. They do not replace legal review, processor agreements, a confirmed operating entity, or an active privacy contact before public launch.