Privacy Policy

Last Updated: October 2026

Welcome to Temu Roulette. We respect your personal privacy and are committed to maintaining a transparent, privacy-first web experience. This Privacy Policy explains our data practices in full compliance with the European General Data Protection Regulation (GDPR), the ePrivacy Directive, and applicable data protection legislation.

1. Summary of Privacy-First Principles

• No Tracking Cookies: We do not place persistent tracking, marketing, or profiling cookies on your device.
• No Personal Profiles: We do not ask for, collect, or store your name, email, payment information, or account credentials.
• Ephemeral Storage: Session continuity relies entirely on temporary browser sessionStorage, which is automatically purged when you close your browser tab.

2. What Information We Process & Legal Basis

Under GDPR Article 6(1)(f) (Legitimate Interests), we process minimal technical data necessary for site functionality, abuse mitigation, and aggregate statistics:

• Salted IP Hashes for Abuse Mitigation: When users submit a "Report Sold Out" micro-action, client IP addresses are immediately hashed using HMAC-SHA256 with a secret server salt. Raw IP addresses are never saved to our database. This salted hash prevents malicious script flooding and ensures decentralized consensus.
• Ephemeral Session UUID: A random UUID (e.g., sess_...) generated in your browser's sessionStorage. It groups discovery rolls within a single browser session to avoid duplicate suggestions and calculate aggregate discovery averages. It cannot be used across websites.
• Aggregate Interaction Telemetry: Anonymized dwell durations (the duration spent exploring an external product before returning) and outbound click counts are logged to prioritize higher-quality products.
• Referring Domains: External domain origins (e.g. reddit.com) are recorded at the domain level without recording your full referring URL or query parameters.

3. Third-Party Content & Product Images (Temu CDN)

Product previews display live images hosted on Temu's Content Delivery Network (img.kwcdn.com). When your web browser loads these images, your browser communicates directly with Temu's CDN servers, which naturally transmits your IP address and standard browser headers (User-Agent). We do not control Temu's CDN servers. For information on Temu's data privacy practices, please refer to the Temu Official Privacy Policy.

4. Outbound Links & Affiliate Disclosure

Clicking product cards or "Open on Temu" directs you to external web pages on temu.com. These external URLs may contain affiliate referral tags. When you leave our website, your interactions on Temu are governed solely by Temu's Terms of Service and Privacy Policy.

5. Data Retention & Automated Minimization

In accordance with the GDPR Storage Limitation principle (Art. 5(1)(e)), all internal session event logs, dwell time records, and report hashes older than 30 days are automatically pruned from our database via a scheduled server cleanup routine.

6. Your Rights Under GDPR & CCPA

Depending on your location, you may have statutory rights under the GDPR (Articles 15–22) or CCPA, including the right to request access, rectification, or erasure of your personal data. Because we do not store identifiable personal data, accounts, or persistent cross-site cookies, we generally cannot associate technical log entries with a specific natural person.

7. Contact

For inquiries regarding this Privacy Policy or our data protection practices, please contact the site operator via the repository or designated web contact.