Table of Contents
1. Who We Are & Contact Information
Panda Express Coupons (accessible at https://pandacoupons.org) is an independent informational guide maintained by the Panda Coupons Editorial Team. We provide public coupon aggregation, menu pricing breakdowns, and nutritional summaries for consumers.
If you have questions regarding this Privacy Policy or wish to exercise any privacy rights, contact us directly at:
✉️ [email protected]
2. What Information We Collect
We believe in minimal data collection. We do not require account registration, user logins, payment processing, or submission of personal profile information on this website.
The only personal data we receive is information you voluntarily choose to provide when sending an email to our contact address. If you email us, we receive your email address, your name (if included in your email client), and your message text. We use this information exclusively to read your feedback, investigate reported deal inaccuracies, and send a direct reply. We never sell, rent, or distribute your email correspondence to third parties.
3. Local Browser Storage (Meal Cart)
Our interactive Nutrition & Savings Calculator offers an optional client-side feature allowing you to build and customize meal selections. To preserve your meal selections across browser refreshes, the application stores your chosen item IDs and quantities in your browser's local storage under the key "panda-meal-cart".
This data is saved strictly on your local device hardware. It is never transmitted to our web server or accessible to any external third party. You can clear this stored meal cart at any time by clicking "Clear Meal" inside the calculator tool or by clearing website data in your browser settings.
4. Server Access Logs & Security Retention
Like standard web hosting environments, our web server infrastructure automatically records basic technical connection logs when pages are requested. These access logs may include:
- Your internet protocol (IP) address
- Browser user agent type and operating system version
- Requested URL path and HTTP status code
- Timestamp and date of the request
These operational logs are maintained solely for cybersecurity monitoring, diagnosing broken assets, rate-limiting malicious traffic, and defending against denial-of-service attacks. Server access logs are automatically rotated and permanently deleted after 30 days.
6. Third Parties & Self-Hosted Assets
We restrict external dependencies to maintain high privacy standards:
- Hosting Infrastructure: Static site assets and the Node.js application server run on dedicated host infrastructure that delivers requested HTML, CSS, and image files.
- Outbound Restaurant Links: Articles and deal cards contain outbound hyperlinks leading to external official restaurant domains (such as pandaexpress.com). When clicking these external links, their independent privacy terms and cookie practices govern your interaction.
- Self-Hosted Typography: All font files (Plus Jakarta Sans) are served directly from our own domain servers, eliminating third-party font network tracking.
7. Your Consumer Privacy Rights (CCPA & GDPR)
Regardless of your physical location, we provide clear mechanisms to exercise privacy rights:
California Consumer Privacy Act (CCPA / CPRA): Under California privacy regulations, residents hold the right to know what personal details are collected and to request deletion. Because we do not sell, rent, or share personal data with data brokers, your browsing is private. If you have sent us an email, you may request that your message history be expunged.
European Union & UK General Data Protection Regulation (GDPR): For visitors from the EEA and United Kingdom, any processing of email correspondence is grounded in legitimate interests (responding to your direct inquiries). You retain full rights to request access, rectification, or complete erasure of past email communications by contacting us.
8. Children's Online Privacy Protection
Our platform is intended for general audiences and adult dining consumers. We do not intentionally solicit, collect, or store personal data from children under the age of 13. If you believe a child has contacted us via email, please notify us and we will delete the correspondence immediately.