Privacy policy

1. Scope

This policy applies to PromoNomy's public pages, offer feedback, evidence displays, contact form and on-site outbound-link records. A merchant or other third party applies its own privacy policy after you leave our site.

2. Operator and contact

The data controller is the “PromoNomy independent operating team”. There is currently no registered company name, business-licence number or physical office address to disclose. Select “Privacy request” on our contact form for privacy matters.

3. Information we collect

• Contact information: the name, email, topic, related URL and message you submit.
• Offer feedback: offer identifier, success/failure/not tried result, market, web/app channel and failure reason.
• Test evidence: test time, basket, outcome, error details and screenshots uploaded by authorised operators; evidence screenshots may be displayed publicly.
• Usage and security information: request time, device category, browser details, origin validation data and pseudonymous hashes used to limit duplicates. The contact system does not store the raw IP address as a message field.
• Affiliate hand-offs: the offer, placement, device category and time. Affiliate networks or merchants may set their own identifiers after the hand-off.

4. Purposes and legal bases

We use information to answer requests, correct offers, calculate recent feedback, prevent abuse, protect the site, meet privacy or legal obligations, and check whether outbound offer links work. Depending on context, processing relies on your consent, the need to provide a requested service, legitimate interests in security and accuracy, or applicable law.

5. Cookies, local storage and similar technology

Public content currently does not require marketing cookies. The offer flow uses short-lived pseudonymous event identifiers to distinguish a reveal, copy, outbound open or retry and to reduce duplicate counts; these identifiers do not contain your email address or raw IP address. Hosting, security, affiliate or third-party resource providers may use necessary identifiers after you leave PromoNomy. If analytics, advertising or personalisation cookies are added, we will update this policy first and provide controls where required.

6. Sharing and international processing

We do not sell personal information. Hosting, database, object-storage, security and affiliate providers may process information only to provide their service, protect the site or meet legal obligations. Because the site serves users internationally, providers may process data outside your country using the safeguards and compliance mechanisms they offer.

7. Retention

• Contact submissions and handling records: normally up to 12 months, longer only where needed for a dispute or open request.
• Offer feedback: retained for trend and integrity analysis; public statistics prioritise recent observation windows.
• Test evidence: retained while it remains useful for auditing the offer; screenshots containing unnecessary personal data are corrected or removed.
• Security and server logs: retained by hosting and security providers according to their operational cycles.

8. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, objection, withdrawal of consent or a portable copy. Select “Privacy request” in the contact form. To avoid unauthorised disclosure, we may verify your email and the data concerned. You may also complain to the competent data-protection authority where you live.

9. Security, data minimisation and children

We use origin checks, field limits, duplicate-submission controls, authorised access and managed storage. No internet transmission can be guaranteed completely secure. Do not submit passwords, verification codes, full payment information or identity documents. The site is not directed at children and we do not knowingly collect information from children below the applicable age; identified records will be removed.

10. Policy changes

The effective date changes only after a material change to processing purposes, data categories, recipients, retention or user rights. Significant updates will be highlighted on the relevant page.