Updated October 29, 2026
Privacy policy
Canworks LLC operates Deal Athletics at dealathletics.com. This policy covers the website, its browser-based workout games, and optional email updates. You can play without an account or an email address.
At a glance
- Workout progress stays in your browser. The game saves settings, hands, Multiplayer matches, and history in local storage on your device. The workout app does not upload those records to us.
- Email is optional. If signup is enabled and you request updates, we use your email address to send a confirmation link and the selected Daily Deal or Multiplayer messages.
- The site has service providers. Cloudflare serves and protects the site; Resend handles optional email; Google Fonts supplies typefaces.
- We use PostHog for cookieless product analytics. It records page views, errors and anonymous workout events (for example a workout started or finished, a result shared) without cookies or a stored visitor ID. No advertising tools are installed. We do not sell personal information or share it for cross-context behavioral advertising.
- You have choices. Clear local game data in your browser, decline email updates, unsubscribe, or contact us about information we hold.
1. Information we handle
Information you provide
If you choose email updates, you provide an email address and select a topic (Daily Deal or Multiplayer). We store a pending signup while you confirm the address. If you email us, we receive the information you put in that message. Please do not send medical records or other sensitive information by ordinary email.
The current site does not ask for a name, postal address, account password, payment information, birth date, precise location, or health record. It has no social login, public posts, or online opponent accounts.
Information handled automatically
Cloudflare may process request information such as IP address, browser and device details, requested URL, and security signals to deliver and protect the site. If you submit the email form, our endpoint reads the connecting IP address and stores a hash of it for short-term rate limiting. It also stores a hash of the email address for a short cooldown and, after confirmation, a consent record. Hashing reduces exposure but does not make data automatically anonymous.
Your browser requests Barlow fonts from Google Fonts. Google may receive the request information needed to deliver those files. The site also contains links to outside websites, which have their own policies.
Workout information on your device
The game uses browser local storage for theme preference, settings, active hands, Multiplayer matches, and workout history. Those records remain on that device unless you clear them, reset the app, or use a browser feature that copies them elsewhere. The workout app does not send them to Canworks LLC. If the app offers a backup code, you control where you keep or share it; we cannot recover lost local progress.
2. Personal information categories
This table describes the current site, including optional signup and normal hosting. “Yes” does not mean every visitor provides the category. The examples are limited to what this site actually handles.
| Category | Examples on Deal Athletics | Collected or processed? |
|---|---|---|
| A. Identifiers | Email address if supplied; IP address and related request identifiers used for delivery and abuse prevention | Yes |
| B. Customer records information | Email address when you subscribe or contact us; no payment, employment, or education records | Yes, limited to contact information |
| C. Protected classifications | Race, religion, sex, age, and similar characteristics | No, not requested |
| D. Commercial information | Purchases and payment history | No |
| E. Biometric information | Fingerprints, faceprints, or voiceprints | No |
| F. Internet or network activity | Requests and security events handled by hosting; cookieless PostHog analytics (pages viewed, referrer, approximate location from IP, browser type, anonymous workout and share events, errors); no ad tracker | Yes, for site delivery, security and understanding how the site is used |
| G. Geolocation | Precise device location | No; an IP address may imply an approximate location |
| H. Audio, visual, or sensory information | Uploaded photos, recordings, or voice data | No |
| I. Professional or employment information | Job title and work history | No |
| J. Education information | Student records | No |
| K. Inferences | Advertising or preference profiles about visitors | No |
| L. Sensitive personal information | Health records, religious beliefs, government IDs, account credentials, precise geolocation | No, not requested; local workout history is not uploaded to us |
We obtain the email address and selected topic from you; request and security data comes from your connection to the site. We do not buy lists of personal information or obtain social-login profiles. We do not sell personal information or share it for cross-context behavioral advertising. Service providers process information to provide the functions described below.
3. How and why we use information
| Purpose | Information used |
|---|---|
| Deliver and protect the website | Request information and security signals handled by Cloudflare |
| Prevent signup abuse | Short-lived hashed IP and email-address records in Cloudflare KV |
| Confirm optional signup | Email address, topic, confirmation token, and request time |
| Send chosen updates and honor unsubscribe | Confirmed email address, topic, and email-provider suppression status |
| Answer a message or privacy request | Information you send us and enough information to verify the request |
| Meet applicable legal obligations and protect rights | Relevant records only when needed for that purpose |
Where EU or UK data protection law applies, we rely on your consent for requested marketing emails; legitimate interests in site delivery, security, and abuse prevention; and, where relevant, legal obligations or the need to respond to your request. You can withdraw marketing consent by unsubscribing. We assess other processing under the law that applies to the specific situation.
4. Service providers and disclosures
- Cloudflare Pages and KV: Website delivery, security, pending email signups, rate-limit records, and consent records.
- Resend: Confirmation email and, when enabled, the updates you select. After confirmation, your email address is stored in the selected email segment.
- Google Fonts: Your browser contacts Google to download the site’s typefaces.
We may disclose information if required by law or reasonably necessary to protect users, the site, or our legal rights. We do not provide workout histories to those services through the game. Links to other sites are controlled by their operators.
5. Cookies and browser storage
The current site does not install advertising or analytics cookies. PostHog analytics runs in a cookieless mode that keeps its identifiers in memory only, so nothing is stored on your device and each visit counts as new. It uses browser local storage for the game and theme. Cloudflare may set operational security cookies depending on the protections enabled. Our cookies and local storage notice explains the current categories and your browser controls. There is no optional tracking cookie preference center because the site has no optional advertising or analytics cookies at present.
6. Retention and security
Pending confirmation records expire after 24 hours. Hashed IP rate-limit records expire after one hour; hashed email cooldown records expire after five minutes. A confirmed signup creates a consent record in Cloudflare KV without an automatic expiration and a contact record at Resend. We keep those records while needed for the selected updates and consent documentation, subject to a verified deletion request or applicable legal requirements. An unsubscribe may leave a suppression record so messages stay stopped.
Game data in local storage remains until you or your browser removes it. Hosting and email providers may keep operational logs under their own retention practices. We use restricted service credentials and email confirmation, but no internet service can guarantee absolute security.
7. Your choices and privacy rights
You can use the game without signing up, clear local storage in your browser, and unsubscribe from emails. Clearing local storage removes your saved workouts and preferences on that device. To ask about information held by Canworks LLC, email privacy@dealathletics.com. Tell us which email address and request are involved; we may need to verify that you control the address before disclosing or changing a record. We will respond in accordance with applicable law and explain any lawful exception.
United States residents. Depending on your state and whether its privacy law applies to Canworks LLC, you may have rights to know or access information, correct inaccuracies, delete information, obtain a copy, and appeal a denied request. Some laws also provide rights concerning sale, targeted advertising, or sensitive-data use. Our current site does not sell personal information or use it for targeted advertising. California residents can use the contact address above for applicable requests. We will not discriminate against you for exercising a privacy right.
European Economic Area, UK, and similar regions. Where applicable law covers our processing, you may have rights to access, correct, erase, restrict, object to processing, receive portable data, and withdraw consent. You may also complain to your local data protection authority. A request to withdraw email consent does not affect processing that was lawful before withdrawal. We handle requests according to the law that applies.
If we deny a privacy request, you may ask us to reconsider by replying to our response. Where applicable law gives you a formal appeal right, we will provide the required appeal process and response. We may retain limited information when necessary to honor an unsubscribe, meet a legal obligation, or resolve a dispute.
Cloudflare, Resend, and Google may process request or email information in countries other than yours. If transfer rules apply, we will use the protections required by the applicable law. Contact us if you need details about a specific transfer.
The site currently has no cross-site advertising or sale of personal information to opt out of. Browser “Do Not Track” settings and other preference signals therefore do not change an advertising setting on this site. If that practice changes, we will provide the controls required by law.
Because workout records stay on your device, we ordinarily cannot retrieve or delete them for you. Use the app’s reset controls or clear this site’s browser data to remove them locally.
8. Children
Deal Athletics is not directed to children under 13, and the email signup is not intended for them. If you believe we received a child’s email address, contact us so we can review and remove it as appropriate. Minors should use the workout site with a parent or guardian’s permission and supervision.
9. Changes and contact
We will revise this policy and the date above when our practices change. We will update it before introducing materially different collection, such as accounts, analytics, advertising, or online multiplayer. Questions and privacy requests can be sent to:
Canworks LLC
735 Shelby St, 506, Indianapolis, IN 46203, United States
privacy@dealathletics.com