Privacy Policy
Last updated:
FindRefCode ("we", "us") is a community site for sharing and verifying referral codes, available at findrefcode.com. This policy explains what data we collect, why, and what rights you have. We keep it short and honest — we collect the minimum needed to run the site.
What we collect
- Account data — your email address, a hashed password (never the password itself), a username, and an optional profile picture. If you sign in with Google, we receive your email and basic profile from Google instead of a password.
- Content you post— referral codes, descriptions, comments, votes, "did it work" reports and abuse reports.
- Technical data — IP address and request metadata, used for rate limiting and abuse prevention. Standard server logs are kept briefly by our hosting provider.
- Analytics — anonymous usage events (page views, feature usage) via PostHog, hosted in the EU. We create analytics profiles only for signed-in users.
Why we use it
- To operate your account and show your submissions (contract).
- To rank codes, prevent spam, rate-limit abuse and keep the community trustworthy (legitimate interest).
- To send transactional email — e.g. the email-verification message when you sign up (contract).
- To understand what features are used and improve the site (legitimate interest).
We do not sell your data and we do not send marketing email.
Who processes it for us
We use a small set of service providers to run the site, each processing data on our behalf: Vercel (hosting), Neon (database), Resend (transactional email), Google (optional sign-in), PostHog EU (analytics) and Anthropic (AI extraction of offer details when you use the submit-by-link feature — the page or screenshot you provide is processed, not your personal profile).
Cookies and local storage
- Session cookie — essential; keeps you signed in.
- Theme preference— stored in your browser's local storage (light/dark mode).
- Analytics identifier — PostHog stores an identifier in your browser to count visits.
How long we keep data
Account data is kept while your account exists. Posted codes and comments remain visible while relevant to the community. Rate-limiting records expire automatically within hours. If you delete your account, we delete your personal data; anonymised contributions may remain.
Your rights (GDPR)
You can request access to, correction of, or deletion of your personal data, object to processing, or ask for a copy in portable form. Email info@findrefcode.com and we'll respond within 30 days. You also have the right to complain to your local data-protection authority.
Children
FindRefCode is not directed at children under 16, and most referral offers require you to be an adult. Do not use the site if you are under 16.
Changes
If this policy changes materially we'll update the date at the top. Questions? See the contact page.