Privacy policy

What we collect

• Account: email address and a salted hash of your password (we never store the password itself).
• Profile & payouts: name, country, currency, and the payout method and destination you provide (for example a PayPal email or IBAN).
• Activations: when you activate a deal we record the product, time, IP address, browser user agent, referring page and approximate country, and a random click ID sent to the merchant so the sale can be matched to you.
• Purchases: sale, commission and status data that affiliate networks report back for your click IDs.
• Receipts: images you upload with a claim, plus the purchase date and amount you enter.
• Reviews you write, and your watchlist.

We don't use advertising trackers.

Why we use it

• To run your account, track purchases, credit cashback and send payouts (performance of our contract with you).
• To prevent fraud and abuse, such as fake receipts, duplicate claims and automated sign-ins (legitimate interest).
• To email you about claims, payouts and account security. Optional emails can be turned off in Settings.

Who we share it with

• Merchants and affiliate networks receive the click ID (not your name or email) to attribute your purchase.
• Google (Gemini API) processes receipt images to help verify claims.
• Our email provider (Emailit) delivers transactional email.
• Payment providers you choose (PayPal, Wise, your bank) receive the details needed to pay you.
• Hosting providers store our database and files.
• Socialligator (our analytics provider) receives page views if you allow analytics: page address, referrer, browser, device type and approximate country.

We don't sell your personal data.

Cookies

• cashback_session: keeps you signed in (30 days, strictly necessary).
• cashback_ref: remembers a referral link you followed (90 days).

Analytics (only if you allow it). We count visits with Socialligator's script (t.socialligator.com/sl.js). It sets no cookies. It keeps a random visit ID and the last page and referrer in your browser's session storage (sl_ref, sl_lu, sl_lr), which is cleared when you close the tab. It doesn't load until you accept the analytics banner; your choice is stored in local storage (cb_analytics).

Change my analytics choice

Browser extension

The extension checks the address of the page you're on against our list of merchants, on your device, to show a banner when cashback is available. It doesn't send your browsing history to us. If you sign in, it stores a sign-in token in the extension's local storage.

How long we keep it

We keep account data while your account is open. Records of cashback and payouts may be kept for up to 7 years where accounting or tax law requires it. Receipt images are deleted with your account.

Your rights

You can download a copy of your data or delete your account at any time from Settings. You can also ask us to correct or restrict processing, or object to it, by emailing [email protected]. If you're in the EU/UK you may complain to your local data-protection authority.

Changes

We'll update the date above and email you about material changes.