Data Collection Policy

1. Purpose of this document

Most privacy documents describe data collection in broad categories. This one lists the actual items. Every field, log, and record we keep about customers falls into one of the eight categories below — if it is not listed here, we do not collect it.

Read this policy alongside two companion documents: the Privacy Policy, which covers how we use data, who we share it with, and how to exercise your rights, and the Cookie Policy, which covers the small set of first-party cookies we set. Our terms of sale are at /terms.

2. Account data

When you create an account, we collect:

• Name — as you enter it on your profile.
• Email address — used for sign-in, one-time verification codes, order and shipping notifications, and (only with your consent) marketing.
• Phone number — if you choose to add one to your profile or a shipping address.
• Password, stored hashed — we store a one-way cryptographic hash, never the password itself. No one at YNF Deals can see your password.
• Google sign-in basics — if you sign in with Google, Google sends us your name, email address, and profile photo. We receive nothing else from your Google account.
• Saved addresses — any shipping or billing addresses you save to your profile at /my.

Sign-up uses your email plus a one-time verification code, or Google sign-in — so a password is only collected if you set one.

3. Order data

For every purchase on ynfdeals.com we record:

• Billing and shipping address.
• The items ordered, quantities, and prices.
• Order totals, shipping charges, and sales tax collected where required (currently New York).
• Payment status and a payment reference from our processor — never the card number itself.
• Carrier tracking numbers (USPS, UPS, or occasionally FedEx), which we email to you and show in your account portal.

Payments are processed by Stripe, a PCI-DSS Level 1 certified processor. Whether you pay by card, ACH Direct Debit, Klarna, Amazon Pay, Apple Pay, Google Pay, Samsung Pay, Link, or PayPal, your payment credentials go directly from your browser to Stripe. They never pass through or rest on YNF Deals servers.

4. Technical data

When you use the site, our servers automatically record:

• IP address — for security, fraud prevention, and legal compliance.
• Browser and device information — browser type and version, device type, and operating system.
• Session identifier — the first-party cookie that keeps you signed in and holds your shopping bag.
• Login history — timestamps and IP addresses of sign-ins, kept for 12 months to detect account takeover.
• Device signature — a first-party device-recognition value (the ynf_fp cookie) used solely for fraud prevention and to record proof of legal consent. It is ours alone; it is never shared with advertisers and does not track you across other websites.

Cloudflare, our CDN and security provider, may set its own operational cookies to protect the site against attacks. The full cookie list is in the Cookie Policy.

5. Support data

When you contact us, we keep the conversation so we can resolve your issue and honor our commitments:

• Support tickets opened at /my/support or by email to [email protected], including their status and resolution.
• The messages exchanged in a ticket, and live-chat transcripts.
• Attachments you send — for example, the photo or video evidence required within 72 hours of delivery for damaged, defective, incorrect, or incomplete item claims.

Support records are retained for 3 years after a ticket closes, which lets us honor warranty and authenticity claims and demonstrate how disputes were resolved.

6. Live-commerce data (TikTok)

We sell through live auctions on TikTok LIVE via our shops YNF Deals and YNF Fragrance. In connection with those sales we collect:

• Your TikTok username — when you link it to your ynfdeals.com account or win an auction, so we can match your claims to your orders.
• Auction participation — the bids and claims you make during our live streams, which are binding purchase commitments under our terms.
• TikTok order data — for orders placed through TikTok Shop checkout, TikTok sends us the order details we need to fulfill: your name, shipping address, the items purchased, and the order identifier. Payment for TikTok Shop orders is handled entirely by TikTok under TikTok's own terms; we never receive your TikTok payment details.

Two related recordings exist. Live streams are broadcast publicly on TikTok, and recordings of streams may be retained. Separately, the packing of every order is video-recorded for quality assurance and fraud prevention; those packing videos are kept for 90 days unless needed for an active dispute.

7. Preference data

These items exist only because you choose to create them, and only to make shopping easier:

• Fragrance profile — your answers to the Fragrance Finder quiz, which we use to recommend products from your stated preferences. The quiz is a simple matching tool, not a profiling system.
• Saved items — products you bookmark in your account.
• Offer wallet — offers and coupons attached to your account, visible at /my.

Preference data is never used for advertising outside our own store and is never sold or shared with third parties.

8. Consent & legal records

When you accept our legal documents or give a consent (for example, agreeing to the terms at checkout or subscribing to marketing email), we create a consent record containing:

• The exact version of each document you accepted.
• The timestamp of your acceptance.
• The IP address and browser user-agent at the time.
• A tamper-evident hash — each record is cryptographically chained to the one before it, so any alteration of the log would be detectable.

Consent records are retained indefinitely as legal evidence, even after an account is deleted, because they prove what was agreed and when. If you withdraw a consent — for example, by using the unsubscribe link included in every marketing email — the withdrawal is recorded in the same log.

9. What we deliberately do not collect

The following are design decisions, not omissions:

• No third-party advertising or analytics tracking. There is no Google Analytics, no Meta pixel, and no third-party advertising cookie anywhere on ynfdeals.com. Every cookie we set is first-party and functional.
• No biometric data. We do not collect fingerprints, face scans, or any other biometric identifiers.
• No precise geolocation. We do not access GPS or otherwise track your precise location. Your IP address may indicate an approximate region, which we use only for security and tax purposes.
• No card numbers. As described in Section 3, payment credentials go directly to Stripe and never touch our systems.
• No sale or sharing of personal information for cross-context behavioral advertising, in any form.

10. Where the data comes from

Everything in this policy originates from one of four sources:

• You — what you type into forms: account details, addresses, quiz answers, support messages, attachments.
• Your device — the technical data in Section 4, generated automatically as your browser communicates with our servers.
• TikTok — order and fulfillment details when you purchase through TikTok Shop, and your username when you link it or win an auction.
• Google — your name, email, and profile photo, only if you choose Google sign-in.

Our payment processor confirms payment status to us, but sends no card details. We do not buy, rent, or enrich customer data from data brokers or any other outside source.

11. Retention at a glance

We keep each category only as long as it serves the purpose it was collected for, or as long as the law requires. Full details, including your rights to access, correct, export, or delete your data, are in the Privacy Policy.

12. Contact & Notices

Questions about this inventory, or requests to access, correct, export, or delete your data, can be sent to us directly or made through the privacy tools in your account at /my.

YNF Deals
585 W Merrick Rd Ste 28 C
Valley Stream, NY 11580, United States
Email: [email protected]
Phone: +1 516-884-3338

This policy is governed by the laws of the State of New York, USA, and should be read together with our Terms of Service, Privacy Policy, and Cookie Policy.