Privacy Policy

Effective and last reviewed: October 26, 2026

Who we are

refferal (“we”, “us”) is the independent operator of refferal.org, a community board where people share and find referral codes and links. This policy covers the information we collect through the site and how we handle it. You can contact the operator at support@refferal.org.

What we collect

• Account information: your name, email address, and password (stored as a salted hash, never in plain text) if you register.
• Content you submit: the referral listings you post — company name, reward description, your referral link, and an optional expiration date or approximate location.
• Usage data: which pages you visit, which listings you click, your IP address and browser user agent — used to keep the board working (e.g. detecting duplicate or fraudulent submissions) and, only with your consent, analytics through Google Analytics, Microsoft Clarity (which can record interactions, sessions, and heatmaps), and product events. Product events omit names, emails, URLs, IDs, search text, and listing content.
• Cookies: see our Cookie Policy for the full detail. One strictly necessary session cookie, and optional analytics cookies from Google and Microsoft Clarity that you can decline.

We never ask for or store payment card details, government ID, or precise home addresses. Location on a listing, if you add one, is your device's coordinates rounded to roughly a kilometer before we ever store it.

Why we use it, and our legal basis

• To operate the service (show listings, let you sign in, send you email about your own account or submissions) — necessary to provide the service you asked for.
• To prevent fraud and abuse (duplicate-submission and suspicious-activity checks) — our legitimate interest in keeping the board trustworthy.
• Analytics — only with your consent, given through the cookie banner. You can withdraw it at any time from the Cookie Policy page.

Who we share it with

We don't sell personal information, and we don't share it with data brokers or advertisers. We use a small number of service providers to run refferal, each only for that purpose:

• Resend — sends account and notification emails on our behalf.
• Google Analytics and Microsoft Clarity — process analytics only after you consent; Clarity can create session recordings and heatmaps. See our Cookie Policy and the providers' privacy statements.
• Our hosting and database providers — store the data needed to run the site.

We may disclose information if required by law, or to protect the rights, safety, or property of refferal or our users.

Your rights

Depending on where you live, you may have the right to:

• Access, correct, or delete the personal information we hold about you.
• Export a copy of your data.
• Withdraw analytics consent at any time (see the Cookie Policy).
• Object to or restrict certain processing.
• California residents (CCPA/CPRA): the right to know what we collect, to delete it, and to opt out of the "sale" or "sharing" of personal information — we don't sell personal information. Consented analytics data is sent to Google and Microsoft for their analytics services, and you can withdraw consent at any time.
• EEA/UK residents (GDPR): the rights above, plus the right to lodge a complaint with your local data protection authority.

To exercise any of these, email us at the address below. You can delete your own account and its data from Settings, or ask us to do it for you.

Data retention

We keep account and listing data for as long as your account is active, and typically delete it within 30 days of a deletion request. Microsoft states that Clarity playback data is retained for 30 days and click and heatmap data for 9 months; see its data-retention documentation. Aggregated, de-identified analytics may be retained longer since it no longer identifies you.

Children's privacy

refferal isn't directed at children, and we don't knowingly collect information from anyone under 13 (or the minimum age in your country, if higher). If you believe a child has given us information, contact us and we'll remove it.

Changes to this policy

If we materially change how we handle your data, we'll update this page and, for significant changes, make that visible on the site.

Contact

Questions or requests about your data: support@refferal.org.