Privacy policy

1. Data controller

The controller for this regional version is the CASHBACK PRO service administration (the Operator). Registered operator details are displayed only to CIS-region users. Contact for privacy requests: support@cashbackpro.online.

The Operator processes personal data in accordance with Federal Law No. 152-FZ and other applicable requirements.

2. Data and data subjects

Data subjects are website visitors, registered users, extension and app users, Telegram bot users, recipients of cashback and support applicants.

The service may process account and contact data, including email, name, phone, city and country; authentication provider identifiers; payout account details supplied by the user; cashback order, click and reward data; support correspondence; technical identifiers, IP address, device, browser, session and security data; cookie and traffic-source data.

The service does not intentionally request special-category or biometric data, third-party website passwords, private messages or full bank card details.

3. Purposes and legal grounds

Data is used to create and protect accounts; provide cashback, promo-code, tracking, price-watch and support functions; identify a partner store; record a partner redirect; calculate and pay rewards; prevent abuse; answer requests; comply with accounting, tax and legal duties; and improve service reliability.

Depending on the purpose, processing is based on performance of the user agreement, steps requested before entering that agreement, the user's separate consent, the Operator's legal obligations or legitimate interests that do not override user rights. Analytics is activated only after the visitor allows analytics cookies.

4. Processing operations

The Operator may collect, record, organize, accumulate, store, clarify, retrieve, use, transmit to an authorized processor, depersonalize, block, delete and destroy data by automated and non-automated means.

The browser extension accesses supported store pages and technical browser information only as needed to detect a partner store, show available cashback, activate the partner redirect and connect that activation to the signed-in account. Information received through browser extension APIs is used under the applicable store Limited Use rules.

The Safari extension does not use IDFA, third-party advertising SDKs, data brokers or cross-app tracking. A signed pseudonymous click identifier is created only to connect a user-initiated cashback activation with a merchant-confirmed order and the resulting reward; it is not used to build an advertising profile or target ads across unrelated apps or websites.

5. Cookies and analytics

Strictly necessary cookies and local storage keep the language, theme, session, security state and partner attribution. Attribution identifiers are retained for up to 90 days unless an earlier deletion is required.

Yandex Metrica counter 110859481 is not loaded until the visitor separately allows analytics. If allowed, Yandex may receive page URL, referrer, IP-derived approximate location, browser and device parameters, interaction events and analytics identifiers. Webvisor is disabled. The visitor may withdraw this choice at any time through Cookie settings.

Marketing notifications are disabled by default and can be enabled or disabled separately in the user account. Essential cashback, payout and security messages are not treated as advertising.

A complete cookie list and controls are described in the Cookie policy.

6. Processors, recipients and transfers

Only data necessary for a specific function may be provided to hosting and security providers, selected sign-in providers, Yandex Metrica after consent, affiliate networks and merchants for click and order attribution, selected payment providers for payouts, and public authorities where required by law.

Opening a merchant or affiliate link may transfer the click identifier and technical redirect data to that network or merchant. Using a social sign-in or payment method transfers the data required by the provider selected by the user.

Where a recipient is located outside the user's country, a cross-border transfer is made only when the Operator has a lawful basis and has completed any mandatory assessment or notification.

7. Retention and deletion

Account data is retained while the account is active. After deletion, data is erased or depersonalized unless retention is required to resolve claims, prevent fraud or comply with accounting, tax or other law. Evidence of acceptance and material service records may be retained for the applicable limitation period; accounting records are retained for statutory periods.

Security logs are normally retained for up to 12 months. Support data is retained until the request is resolved and then only for the period needed for claims or legal duties. Data is destroyed when the purpose or lawful basis ends, unless a mandatory retention rule applies.

8. Security and location

The Operator uses access controls, encrypted transport, session protection, logging, backups and restricted administrative access appropriate to the risks.

Where Russian law requires initial collection and storage of Russian citizens' personal data in Russia, the Operator must use databases located in the Russian Federation before any permitted further transfer.

9. User rights

A user may request information about processing, correction, restriction, blocking, deletion or destruction of data; withdraw consent; object where applicable; and complain to the competent supervisory authority or a court.

Send a signed or otherwise verifiable request to support@cashbackpro.online. Include enough information to identify the account and the request. Withdrawing consent does not affect processing already performed lawfully and does not stop processing required by law or the user agreement.

10. Changes and contacts

The current version is published at cashbackpro.online/privacy-policy/ and the English translation at cashbackpro.online/en/privacy-policy/. Material changes are dated on this page.

Privacy and account-deletion requests: support@cashbackpro.online.