Privacy Policy
Last updated 25 September 2026
Draft placeholder. This text hasn't been reviewed by a lawyer yet and isn't legal advice.
Who we are
ReferralStasher is the controller of personal data processed through this site (UK GDPR).
What we collect
- Account data: email address, authentication identifiers.
- Profile data you choose to publish: username, display name, bio, photo, social links, referrals.
- Usage analytics: page views and referral clicks, recorded as aggregated counts. We compute a daily-rotating, one-way visitor hash from IP address and browser user agent to count unique visitors; we don't store raw IP addresses.
- Reports you submit to our moderators.
Why
- To provide the service (contract).
- To show stashers how their links perform and keep statistics honest (legitimate interests).
- To keep the platform safe, including rate limiting and fraud prevention (legitimate interests).
- Marketing email only with your consent.
Retention
- Raw analytics events: 90 days, then deleted automatically.
- Aggregated daily counts: kept while useful; they contain no personal data.
- Account data: until you delete your account.
Processors
- Google Firebase / Google Cloud (hosting, authentication, database, storage), EU/UK regions where available.
- Algolia (search index of public companies and profiles), if enabled.
- Plunk (transactional email), if enabled.
Your rights
You can export your data and delete your account from Settings at any time. You can also contact us to exercise any right under UK GDPR, and complain to the ICO.