Policies

Privacy policy

Last updated October 4, 2026

Short version: we collect only what the site needs to work, we never sell it, and you can export or delete your data yourself at any time.

What we collect

If you browse without an account

Offer clicks. When you copy a code or open a referral link we record the click, your browser's user-agent string, and a short hash derived from your IP address, browser and the current hour. We use it to count clicks and spot abuse, not to identify you.
An anonymous browser id. A random id kept in your browser's local storage (we store only a scrambled version of it) and a list of the last few codes you used. It lets us ask whether a code worked, count your one-tap answer once, and notice when people switch from one code to another because the first didn't work. It isn't linked to your account or used for advertising, and clearing your browser data removes it.
Anonymous usage statistics. Page views and page-speed measurements via Vercel Analytics, which doesn't use cookies.
Optional analytics. Only if you accept analytics cookies, we use PostHog to understand how features are used (for example, which searches lead to a copied code).
Error reports. If a page crashes, technical details of the error are sent to Sentry so we can fix it.

If you create an account

Your email address and a securely hashed password (we never see or store your actual password).
Your handle, and the display name and bio you choose to add.
The referrals you share, the votes you cast, the reports you file, and who you follow.

Your referrals, handle, display name and bio are public — that's the point of sharing them. Your email address, votes and reports are never shown publicly.

Why we use it

To run the site: sign you in, show your referrals, count votes and clicks.
To keep it trustworthy: moderation, spam and abuse prevention.
To send account email you asked for, like password resets. No marketing email.
To improve the site, using the statistics described above.

Who we share it with

We don't sell personal data or share it for advertising. We use a small number of service providers to run the site, who process data on our behalf: hosting and content delivery (Vercel, Cloudflare and our cloud server and database providers), email delivery (Resend), analytics (Vercel, and PostHog if you opt in) and error monitoring (Sentry). We may disclose data if the law requires it.

Cookies and local storage

Signing in stores a session token in your browser's local storage. We also remember your theme choice and your cookie choice. Analytics cookies are set only if you accept them, and you can change your mind by clearing this site's data in your browser.

Your rights and choices

From your account's settings page you can, at any time:

Download a copy of the data tied to your account.
Delete your account, which permanently removes your account, referrals, votes, reports and follows.

Depending on where you live (for example under the GDPR or the CCPA), you may have further rights, such as correcting your data or objecting to how it's used. Email hello@referralvault.io and we'll respond within 30 days.

How long we keep it

Account data is kept until you delete your account. Click records are kept to compute statistics and are deleted along with the referral they belong to. Error reports and analytics are kept according to those providers' retention settings.

Children

ReferralVault isn't intended for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy in a meaningful way, we'll update the date above and, for account holders, let you know.

Contact

Privacy questions: hello@referralvault.io