Privacy Policy

• Your email address — it is both your login identity and our way to reach you.
• The name or handle you enter when you apply.
• Your chosen discount code and link name (they exist to attribute sales — nothing more).
• Your payout preference and the details a payout needs (currently just your email, for gift cards).
• Order attribution data: which orders carried your code or link, their net value, and the commission we owe. To keep partnerships clean we check whether a buyer's email matches your own — that comparison is the only use of buyer emails; we don't keep buyer contact details beyond what a sale's ledger entry needs.

• Running the program: your account, dashboard, code and link.
• Attributing sales and calculating commissions.
• Paying you what you've earned.
• Service emails: one-time login codes, and occasional program or terms updates.
• Protecting the program against abuse (fraud, self-referrals). Review is human; we don't profile anyone.

Not on the list: advertising, selling or sharing your data for anyone else's marketing.

We'll email you a one-time 6-digit code to sign in — no passwords to memorise, nothing chosen twice. After you enter it, your session lives in a token in your browser's local storage. We set no advertising or tracking cookies, and we may count visits to your published links as a plain anonymous total in your dashboard — never as visitor profiles.

Login codes come from our own SMTP provider, one transactional email per sign-in request. Program and terms updates arrive as occasional email or dashboard notices. Every email identifies us in the body and footer.

• Our store platform (Saleor) — records the orders your codes and links produce; commissions are settled there.
• Cloudflare — protects and routes traffic to our sites.
• Our email provider — delivers your one-time codes.
• Services we add later — if we add processors (e.g. a payment service for cash payouts), this list is updated before they go live.

We don't sell or license personal data. Ever.

Your account and ledger stay for as long as your partnership is active and afterwards for as long as our bookkeeping asks of us — commissions and payouts are financial records. Everything else (one-time codes, unused applications) is deleted automatically; codes expire within hours at most.

You can update your name, code and link from the portal at any time, and claim an export or full deletion of your data — write to [email protected] and we'll act on it (allowed account-log retention excepted). Deleting your data ends the partnership and honours any balance already approved for payout.

Sign-in codes are stored hashed, expire quickly and lock after wrong guesses. Sessions are signed tokens; admin access sits behind separate Cloudflare authentication. Webhooks entering our system are cryptographically verified. Only the infrastructure needed for this store and program touches your data at all.

If it ever needs updating, material changes are announced in your dashboard and by email before they take effect.