Privacy Policy

Last updated: September 13, 2026 · ReferTree is built privacy-first.

What we collect

  • Account data: your email address, username, display name and bio when you create an account.
  • Referral content: the referral URLs, codes, reward descriptions and categories you choose to publish.
  • Anonymous analytics: when someone clicks a referral, we store an anonymous session identifier, a timestamp, and the referring site when the browser provides it. We do not store IP addresses, device fingerprints or any directly identifying visitor data.

What we never do

  • No invasive fingerprinting, cross-site tracking or advertising pixels.
  • We never sell your data or share it with advertisers.
  • We never expose your email address on your public profile.

Cookies & browser storage

  • ReferTree uses strictly necessary browser storage for account authentication through Supabase, language preferences, security and anti-abuse controls, and the first-party anonymous session identifier (rt_sid) used to deduplicate and attribute referral activity. These features continue to work whether optional analytics are accepted or rejected.
  • Your optional analytics choice is stored only in this browser under refertree-cookie-consent-v1. Optional analytics, such as profile-view measurement, remain disabled unless you accept them. Rejecting optional analytics does not prevent normal use of ReferTree.
  • You can change this choice at any time using Cookie settings in the ReferTree footer. ReferTree does not currently load advertising pixels or third-party analytics scripts. Third-party services used during their own authentication flows, or external services you choose to visit through a referral, may use their own strictly necessary cookies under their terms.

Your rights

  • You can edit or delete your referrals at any time from your dashboard. You may request a full export or deletion of your account data by contacting us. The application is structured so GDPR-style access, rectification and erasure workflows can be expanded without schema changes.

Data processing

  • Production data is stored in PostgreSQL via Supabase with row-level security. Authentication is handled by Supabase Auth. Analytics remain private to each profile owner and are never published.

Email communications and marketing preferences

  • ReferTree may send essential account and service emails needed to operate your account, such as security messages, password resets, important account notices and legally required service communications.
  • We may also send limited tips and product reminders related to your use of ReferTree, such as a reminder to add your first referral or complete your profile. These messages stay related to the service and can be disabled at any time in Settings.
  • Promotional emails — including selected ReferTree offers, boosted rewards and selected partner deals sent by ReferTree — are sent only if you actively opt in. The option is unchecked by default. You can withdraw consent at any time in Settings or using the unsubscribe option in promotional emails. ReferTree does not provide your email address to partners for their own direct marketing unless you separately and explicitly agree. To document your choice, we may retain the consent status together with its date, source, language and version.

Sign in with Google

If you continue with Google, Google provides ReferTree with your verified email address and basic profile information, such as your name and profile picture. We use this information only to authenticate you and prepare your ReferTree profile. Your email address is never published.

ReferTree · hello@refertree.io
Privacy Policy · ReferTree