Privacy Policy — Affiliate Programs Directory

1. Introduction

We respect your privacy and are committed to protecting your personal data. This policy explains how we handle your information when you visit our Website.

2. Data We Collect

• Identity & Contact Data: Email address (collected via Magic Link login or contact forms).
• Technical Data: IP address, browser type, and operating system (collected automatically).
• Usage Data: Information about how you use our Website (via Google Analytics 4).
• User Content:Any information you provide in reviews or disputes. Please do not include another individual's personal contact details in a public review — see our Terms of Service.

3. How We Use Your Data

• To provide and maintain our service.
• To notify you about changes or updates.
• To monitor and analyze Website traffic and usage (Google Analytics 4).
• To prevent fraud and maintain the security of our database.

4. Cookies & Tracking Technologies

We use cookies to enhance your experience.

• Essential Cookies: Required for login and security.
• Analytical Cookies: We use Google Analytics 4 (GA4) to track user behavior. You can opt-out of GA4 by using browser extensions or adjusting your settings.

5. Third-Party Services

We use reputable third-party providers:

• Supabase: For database hosting and secure authentication.
• Google Analytics 4: For traffic analysis.

These providers have their own privacy policies and are compliant with international data protection standards.

6. Data Security

We have implemented strict security measures (including Row Level Security and Content Security Policy) to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way.

7. Data Retention

We retain account and usage data for as long as your account is active, and for up to 24 months after your last login, unless a longer retention period is required by law or to resolve disputes. Analytics data is retained according to Google Analytics' default retention settings.

8. International Data Transfers

Our infrastructure providers, including Supabase, may process data outside your country of residence, including outside the European Economic Area. Where required, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

9. Your Rights (GDPR Compliance)

Depending on your location, you have the right to:

• Access your data.
• Request deletion of your data.
• Object to processing of your data.
• Request correction of inaccurate data, and receive a portable copy of your data where applicable.

To exercise these rights, please contact us via our contact form or at tools@aff.studio. If we cannot resolve your request, you have the right to lodge a complaint with your local data protection authority.

10. Data Breach Notification

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the relevant supervisory authority within the timeframe required by applicable law, and will notify affected individuals directly where required by law.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of any changes by posting the new policy on this page.