1. Who we are
PoolMyLinks ("we", "us", "our") is a referral code marketplace at poolmylinks.co.uk that lets users discover and share referral codes from top UK brands. This policy explains what personal data we collect, why, and your rights regarding that data.
2. Data we collect
- Email address — when you create an account.
- Display name — when you create an account.
- Referral codes you submit — brand, code, reward, expiry date, and optional direct sign-up link.
- Session data — authentication tokens stored in cookies to keep you logged in.
- Analytics data — page views and anonymised interaction events (e.g. codes copied, brands viewed) via Vercel Analytics. No personal identifiers are collected.
We do not collect payment information, precise location data, or any third-party advertising data.
3. Why we collect it
- Authentication — to create and manage your account securely.
- App functionality — to associate submitted referral codes with your account and display your submission history.
- Communication — to send account confirmation and password reset emails.
- Analytics — to understand which brands and features are most useful, so we can improve the service.
We do not sell your data or use it for advertising.
4. Data storage and processors
Your data is stored by the following third-party processors:
- Supabase — database and authentication. Passwords are never stored; only a secure hash is kept.
- Vercel — hosting and privacy-friendly analytics. Analytics data is aggregated and contains no personal identifiers.
5. Cookies
We use strictly necessary cookies to maintain your login session. These are required for the site to function and are not used for tracking or advertising. No cookie consent banner is shown because no non-essential cookies are set.
6. How long we keep your data
We keep your personal data for as long as your account is active. If you delete your account, your email, display name, and associated referral codes are permanently removed within 30 days. You can delete your account at any time from your profile page.
7. Your rights
Under GDPR and UK data protection law, you have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your account and all associated data.
- Object to or restrict processing of your data.
- Data portability — receive your data in a machine-readable format.
To exercise any of these rights, email us or use the account deletion feature on your profile page.