1. What we collect
- Account data — your email address, country of residence, age confirmation, and the versions of our documents you accepted with the timestamp of each.
- Attribution data — the tracked links you open, the reference generated for each, the offer version in force at the time, and the purchases a partner reports against them.
- Reward data — commissions, points issued, redemptions and vouchers allocated to you.
- Claim data — the order reference, amount and any evidence you upload when reporting a missing reward.
- Security and risk signals — limited device and network signals used to detect duplicate accounts and fraud.
2. What we never collect
We do not collect card numbers, bank details, prop-firm passwords, trading platform logins, API keys or identity documents. There is no situation in which we need any of them. Anything asking you for one while claiming to be us is not us.
3. Why we process it
- To perform our contract with you — creating your account, attributing purchases, issuing points, fulfilling redemptions and answering support.
- Legitimate interests — preventing fraud and abuse, securing the service, and reconciling what partners report against what they pay.
- Consent — marketing email only. It is recorded separately from service messages and can be withdrawn at any time without affecting your account.
- Legal obligation — accounting, tax and any regulatory record keeping that applies to us.
4. What is shared, and with whom
What partner firms receive: the tracking reference attached to your click. That reference is how they tell us a purchase came from us. It does not carry your email address or your name.
When you open a claim, we may share the order reference and purchase amount with that partner so they can locate the transaction. We do not share your other purchases, your balance or your activity on the platform.
We use service providers for hosting, email delivery and error monitoring. They process data on our instructions only. We do not sell personal data, and we do not share it with advertising networks.
5. Cookies and tracking
Attribution requires a stored reference — without it a purchase cannot be credited to you. Full detail is in the cookie notice. Refusing attribution tracking does not stop you using the site; it means purchases cannot be attributed and no reward will follow.
6. How long we keep it
- Account and consent records — while the account is open, then for the period required to evidence what was agreed.
- Attribution, commission and points records — kept for the statutory accounting period, because they are financial records. These survive account closure in an anonymised or restricted form.
- Claim evidence — deleted once the claim and any appeal are finally decided.
- Support correspondence — a limited period after the case closes.
7. Your rights
You can ask for a copy of your data, ask us to correct it, ask for it to be deleted, object to processing based on legitimate interests, and withdraw marketing consent. Export and deletion can both be requested from your profile.
Deletion closes the account and forfeits unspent points, so we confirm before acting. Some financial records must be retained even after deletion; where that applies we restrict them rather than keep them in active use.
8. Security and breaches
Access to personal data is restricted to staff who need it, and administrative access requires multi-factor authentication. Voucher codes are stored encrypted and are kept out of application logs.
If a breach occurs that is likely to affect you, we will tell you and the relevant supervisory authority within the periods the law requires, and we will say what happened rather than issue a non-answer.
9. Contact and complaints
The data controller, its information officer and a contact address will be named here once the operating entity is confirmed. You always have the right to complain to a supervisory authority in your country.