Privacy Policy & Affiliate Disclosure

1. Introduction & Scope

Welcome to RefPromos (referred to as "we", "us", or "our"). We are committed to safeguarding your privacy and ensuring transparent information practices when you use our website (refpromos.com) and services. This Privacy Policy explains what information we collect, how it is used, and your rights regarding your data.

2. Affiliate Disclosure (FTC Compliance)

RefPromos is a free online deals and coupon resource supported by affiliate partnerships. When you click on coupon codes, deals, or store links on our website and make a subsequent purchase at the merchant's site, we may receive an affiliate commission from the retailer at no extra cost to you.

Our editorial integrity is paramount: our coupon verification processes, store ratings, and review opinions remain independent of affiliate commissions.

3. Information We Collect

We adhere to strict data minimization principles:

• Non-Personal & Analytical Data: Browser type, operating system, referring URL, country/region preferences, and anonymized click timestamps.
• IP Addresses: Processed through one-way cryptographic SHA-256 hashing to prevent duplicate click fraud without identifying individuals.
• Voluntary Submissions: Your name and email address when you voluntarily contact our support desk or subscribe to our newsletter.

4. Cookies & Tracking Technologies

We use essential cookies and lightweight analytics cookies to remember your selected geographic region (e.g. US, UK, AU, CA, DE, FR, IT, NL, PL, ES) and track outbound merchant referrals. You may disable cookies at any time through your browser settings without losing access to our core website.

5. Your Privacy Rights & Data Erasure (GDPR & CCPA Compliance)

Under global privacy frameworks including the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA), you retain full sovereignty over your personal data:

• Right to Access: Request a copy of any personal data or communications held in our systems.
• Right to Erasure (Right to be Forgotten): Request the permanent deletion of your email, account records, and associated click telemetry.
• Right to Opt-Out: Opt out of marketing digests or telemetry tracking at any time without penalty.

To initiate an automated data deletion request, you can submit an erasure request to our privacy endpoint at /api/privacy/delete-data with your registered email, or email our Data Protection Desk directly at info@refpromos.com. Requests are processed within 48 hours.

6. Data Security & Storage Architecture

We implement defense-in-depth security measures to protect user telemetry and credentials:

• Salted Hashing: Raw visitor IP addresses are never saved to disk; they are immediately hashed using SHA-256 with an isolated server-side salt.
• Password Encryption: All staff and administrator passwords use bcrypt hashing with a minimum work factor of 10. Plaintext passwords are never logged, stored, or transmitted.
• Secure Cookies: Session tokens are stored exclusively in HTTP-only, Secure, SameSite cookies inaccessible to client-side scripts. Client-side local storage contains zero personal identifying information (PII).

7. Contact Us Regarding Privacy

For questions, data access inquiries, or deletion requests regarding your personal information, contact our Data Protection Officer at:
Email: info@refpromos.com