Who we are
The data controller is the team behind the CashbackerClub service. We are an independent service and are not connected with the exchanges you trade on. You can reach us on Telegram: @Cashbacker_Admin.
What data we collect
When you sign up and use the service, we end up with this data:
- your e-mail and password. The password is stored only as a one-way hash; we cannot see the password itself;
- the e-mail confirmation code: we keep its hash and the time it was sent, and the code is valid for 10 minutes;
- the ids you gave us on the platforms, a wallet address or a UID, and their status (pending, confirmed, rejected);
- data about your trades on the confirmed ids, which the platforms or public sources give us: dates, volumes, fees, market, transaction hash. We need it to calculate cashback;
- referral links: your invite link and who invited you;
- payout records: amount, date, platform and a note (for example, a transaction hash);
- the IP address of failed login attempts. It is used to protect against password guessing and is erased after a successful login;
- messages you write to us on Telegram. They are stored by Telegram; we can see the username you write from.
Why we need it and on what basis
We have no other purposes.
- to create an account, confirm your e-mail and let you into the panel: this is performance of our agreement with you (the Terms);
- to calculate and pay cashback: this is performance of our agreement with you;
- to send service e-mails: the confirmation code and password reset. We send no newsletters and no advertising;
- to protect the service and you from password guessing, duplicate accounts and inflated volume: this is our legitimate interest.
Who gets the data
We do not sell data and we do not pass it to advertisers. Only those the service cannot run without receive it:
- the e-mail provider Resend, which sends the messages with codes and so sees your e-mail;
- the hosting provider whose server runs the site and the database;
- the platforms and public sources: to get data about your trades we query them with your id (a wallet address or a UID);
- Telegram, if you write to us in the chat;
- public authorities, only where the law obliges us to disclose data.
How long we keep data
- account data and your ids are kept while you have an account and are deleted with it;
- payout records may be kept after the account is deleted, including the e-mail in a payout note: this is how we show what was paid and to whom;
- the IP of failed login attempts is erased after a successful login;
- public blockchain data (for example, trades on Polymarket) stays public, and we cannot delete it.
Your rights
You have the right to find out what data we hold about you, to get a copy of it, to correct inaccuracies, to ask us to delete your account and data, and to object to or restrict the processing.
To use a right, write to us on Telegram. To make sure the request is yours we may ask you to confirm the e-mail of the account. We will answer within a reasonable time.
Security
No protection is absolute, so use a unique password and never share the code from the e-mail.
- the password and the confirmation code are stored as hashes;
- the session cookie is hidden from page scripts and is sent only over HTTPS;
- failed logins are limited: after several mistakes, login from that IP is blocked for a while;
- access to the administrator panel and to the database is restricted;
- we have no access to your funds on the platforms: we need only public ids.
Changes to this policy
We may update this policy when the service or the law changes. The new version is published on this page with a new date at the top.
Contacts
For questions about your data, write to us on Telegram:
Telegram: @Cashbacker_Admin (https://t.me/Cashbacker_Admin)