r 著數 (coupons) privacy

Applies to the weekly Hong Kong coupon scanner and deals board, working title r 著數 (repository name coupons): a web app hosted on Vercel that can be installed as a progressive web app. The same notice is linked from the app’s footer.

This service is operated by llab08, Hong Kong, and these terms are governed by the laws of Hong Kong. The section below explains this product’s data handling and current availability.

The deals board, new-deal notifications and coupon sharing are switched on separately. While a feature is off the app does not offer it, and the paragraphs about it below do not apply.

Summary

No account is needed to scan coupons, keep a wallet or read the deals board. Signing in with Google is needed only to share a coupon with other users (see “Sharing coupons”). No analytics as of the date below: the app loads no Google Analytics, gtag, Umami, Plausible or any other third-party tracking script. If a future version adds analytics, this section is updated first. Advertising is covered below.

Scanning coupons (OCR)

Text recognition runs inside your browser with tesseract.js. The photo or screenshot you scan is processed on your device and is not uploaded to us; a coupon photo leaves your device only if you choose to include it when sharing that coupon (see “Sharing coupons”). On first use the browser downloads the OCR engine and the Traditional Chinese and English language files from public content-delivery networks (jsDelivr and tessdata.projectnaptha.com); those hosts see the download request, not your images.

Your wallet

Scanned coupons, their thumbnails, “used” marks and a copy of the current week’s board are kept only in this browser’s storage. The wallet is not synced to a server; only a coupon you choose to share is sent to us. A service worker also caches the app shell for offline use. Clearing this site’s data in your browser removes the local records and cache. Uninstalling the installed web app does not always clear the browser’s site data; Chrome, for example, presents “Also delete data from Chrome” as a separate option. Browser storage can also be evicted; WebKit describes website data as best-effort storage.

Studio work

Studio keeps your content and production selections, workflow status and confirmations, and reference and video URLs in this browser’s storage. It assembles draft scripts and production prompts in your browser and does not send them to a remote generation service.

Deals board

When enabled, the weekly deals board is built by our server from public web pages of third-party sites (MoneyHero, 小斯 / FlyForMiles, 里先生 / Mr. Miles and merchants’ own pages). The server reads those pages about once a day, follows each site’s robots.txt and spaces its requests. Every listing names its source, links to the page it came from and quotes a short excerpt of that page; the terms on the source page prevail. Your browser fetches the board from our server; the request carries no identifier of you beyond what any web request carries (IP address, browser type). To mark listings that are new since your last visit, the app remembers in this browser when you last looked at the board; that mark is not sent to us.

New-deal notifications

If you switch on “通知我新著數”, your browser asks its push service for a push address and the app sends that address to us. The push service is run by your browser’s maker: Google for Chrome and Android, Mozilla for Firefox, Apple for Safari and home-screen apps on iPhone and iPad, Microsoft for older Edge. We store only the address — no account, name or device details — and use it to send at most one notification after a daily board update adds listings. The notification carries no data from us; its wording is built into the app. Switching notifications off deletes the address, and addresses the push service reports as expired are deleted automatically. The push service delivers the notification under its own privacy policy.

Sharing coupons

Sharing is optional and per coupon. To share, you sign in on our own authentication server at supabase.llab08.com with your Google account. Google confirms your identity to that server and shares your e-mail address, name and profile picture link, which the server stores with your sign-in account; Google handles that step under its own privacy policy. The same sign-in identity is shared with other llab08 products that use this server. The sign-in session is kept in this browser’s storage until you sign out.

Before each share you confirm that the coupon may be published. We then store, linked to your account ID: the merchant, title, value, promo code, expiry date and terms exactly as shown in the share form (you can edit them first), and — only if you tick the photo option — a small copy of the coupon photo from which the location (GPS) and other embedded metadata have been removed. Some of these fields are filled in from your scan, so they can contain text read from the coupon. The terms field starts empty; it contains scanned text only if you choose to copy in your coupon’s terms, and whatever it shows when you share is published. Scanned text that is not in the form, your other wallet records and your “used” marks are not uploaded. Shared coupons are shown to every user of the app without your name, e-mail address or account ID. You can delete one or all of your shared coupons in the app at any time; they are also deleted when your sign-in account is deleted, which you can request at the address below.

Other signed-in users can report a shared coupon; we store the reporter’s account ID and the reason. A coupon with three reports is hidden until we review it, and we remove shared coupons that contain personal data, no longer work or are abusive.

Paste a link

If you paste a link to add a coupon, our server fetches details from the submitted webpage and returns them to your browser. No server-side coupon record is created. Some existing browser wallet records also contain source URLs and page titles saved by earlier app versions. Clearing this site’s data in your browser removes those records.

Merchant logos

Cards may show a merchant icon loaded from Google’s favicon service (google.com/s2/favicons) for the merchant’s domain. Your browser makes that request directly, so Google sees your IP address and the merchant domain, not the coupon.

Advertising

The app shows no advertising today and loads no advertising script. When advertising is added it will appear only on list and gallery pages — not on your wallet or a scan — and this section is updated to name the ad provider and describe the consent step before the first ad request is made.

Hosting and retention

The app is hosted on Vercel. The weekly board, notification addresses, shared coupons, reports and sign-in accounts are stored on our own database and authentication server. Hosts may keep short access logs; we do not use them to identify anyone. Shared coupons stay until you or we delete them; notification addresses until you switch notifications off or the push service reports them expired; sign-in accounts until you ask us to delete them.

Children

The app is not directed at children under 13 and does not knowingly collect personal data from them.

Contact: hello@llab08.com · Updated 24 September 2026 · All privacy notices