RedditMaster Affiliate Privacy Policy

Effective date: April 15, 2026

This Privacy Policy ("Policy") explains how RedditMaster ("RedditMaster", "we", "us" or "our") collects, uses, discloses, and protects personal information in connection with the RedditMaster Affiliate Program (the "Program"). It applies to individuals who apply to join the Program, are active affiliates, or who visit a page containing an RedditMaster affiliate referral link.

If you do not agree with this Policy, you must not use the RedditMaster Affiliate Program.

1. Who We Are and How to Contact Us

The data controller for personal information processed under this Policy is RedditMaster. You can contact us at any time with questions about this Policy, or to exercise your privacy rights, by emailing support@redditmaster.com.

2. Information We Collect

We collect the following categories of personal information:

2.1 Information you provide when enrolling.

• Full name
• Email address
• Google account identifier and profile picture (when you sign in with Google)
• Public handle / username on social platforms (optional)
• Personal or business website (optional)
• Payout method details (e.g., PayPal email, Wise email, bank account details)
• Tax residency information and IRS tax forms (W-9, W-8BEN, W-8BEN-E)

2.2 Information we collect automatically when users click your Affiliate Link.

• The fact that a user visited via a specific affiliate slug
• Timestamp of the click
• Destination URL
• A one-way hashed representation of the IP address (salted hash, used for fraud and attribution protection; the raw IP is not retained)
• Basic user-agent information (browser, operating system, device type)
• Our first-party attribution cookie (see Section 7)

2.3 Information we receive from third parties.

• From Google, when you sign in via Google OAuth, we receive your Google ID, email, name, and profile picture.
• From Stripe, when a referred user becomes a paying customer, we receive event data (such as subscription created, invoice paid, subscription canceled, refund, and chargeback) linked to the referred customer.

2.4 Information generated inside the Program.

• Referral, click, and commission records
• Payout history and status
• Communications with RedditMaster support
• Audit logs tracking administrative actions on your account

We do not knowingly collect information from anyone under the age of 18.

3. How We Use Information

We use the information described above for the following purposes:

• to operate the Program, including registering your account, issuing Affiliate Links, and tracking Referrals;
• to calculate, approve, and pay Commissions;
• to verify your identity and tax status and to comply with tax reporting obligations;
• to prevent, detect, and investigate fraud, abuse, self-referral, invalid traffic, and violations of the Affiliate Program Agreement;
• to respond to your inquiries and provide customer support;
• to send you service messages (e.g., changes to the Program, payout notifications, policy updates);
• to maintain the security and integrity of our systems, including rate limiting and abuse protection;
• to comply with applicable law and respond to lawful requests from public authorities;
• to defend our legal rights and enforce our agreements.

Legal bases (GDPR / UK GDPR). Where the GDPR or UK GDPR applies, we rely on the following legal bases: (a) performance of a contract with you (operating the Program and paying Commissions); (b) compliance with legal obligations (tax reporting and anti-fraud); (c) our legitimate interests in running, securing, and improving the Program; and (d) your consent, where specifically required (for example, for certain cookies).

4. How We Share Information

We share personal information only as described below:

• Service providers and processors. We share information with vendors that help us run the Program, under contractual confidentiality and data-protection obligations. These include: Google Cloud Platform (including Google Cloud Storage for tax form storage), Google OAuth (sign-in), Stripe (payment and webhook data), and our hosting and database providers.
• Payout processors. We share the minimum information needed to send you payouts (e.g., your name and payout account identifier).
• Tax authorities. Where required by law, we share tax information with tax authorities such as the U.S. Internal Revenue Service (IRS).
• Legal and safety. We may share information to comply with law, a subpoena, court order, or other valid legal process; to protect the safety of any person; to address fraud, security, or technical issues; or to protect our rights and property.
• Corporate transactions. If RedditMaster is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to appropriate protections.

We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws (e.g., the California Consumer Privacy Act).

5. International Transfers

RedditMaster operates internationally. Information we collect may be transferred to, stored in, and processed in countries other than the country in which you reside, including the United States. Where required, we use appropriate safeguards for international transfers, such as the European Commission's Standard Contractual Clauses.

6. Data Retention

We keep personal information for as long as needed to fulfill the purposes described in this Policy, unless a longer retention period is required or permitted by law. In particular:

• Affiliate account information is retained for the life of your account and for a reasonable period thereafter to handle disputes, chargebacks, and post-termination obligations.
• Commission, referral, and audit records are retained for at least the period required by applicable tax, accounting, and anti-fraud laws, which in the United States is typically at least four (4) years.
• Tax forms (W-9, W-8 series) are retained for at least four (4) years after the last payment to which they relate, in accordance with IRS record-keeping requirements, and may be retained longer where required by other applicable law.
• Server logs and raw click-level data are retained for a shorter period sufficient for security, fraud prevention, and attribution dispute resolution.

When we no longer need information, we delete it or de-identify it.

7. Cookies and Similar Technologies

The Program uses a small number of first-party cookies and similar technologies:

• Attribution cookie (e.g., `xj_ref`): a first-party cookie set when a user clicks an Affiliate Link. It stores an opaque identifier referring to the affiliate who should be credited, and it expires at the end of the current Cookie Window (currently 30 days).
• Session cookie: used to keep affiliates signed in to the Affiliate dashboard.
• Security cookies: used for CSRF protection and fraud detection.

We do not use third-party advertising cookies on the Affiliate Program pages. You can control or delete cookies at any time through your browser. If you block or delete the attribution cookie, Referrals that would otherwise have been credited to you may not be tracked.

8. Your Rights

Depending on where you live, you may have the following rights in respect of your personal information:

• Access: request confirmation of whether we hold your information and a copy of it.
• Rectification: request correction of inaccurate or incomplete information.
• Erasure ("right to be forgotten"): request deletion of your information, subject to exceptions (for example, tax and accounting records we are legally required to retain).
• Restriction / objection: request that we restrict or object to certain processing.
• Portability: request a copy of information you provided to us in a structured, commonly used format.
• Withdraw consent: withdraw consent where processing is based on consent, without affecting the lawfulness of processing before the withdrawal.

Residents of California, Virginia, Colorado, Connecticut, Utah, and other U.S. states with comprehensive privacy laws have additional rights, including the right to know, delete, correct, and opt out of "sale" or "sharing" of personal information. As noted in Section 4, we do not sell or share personal information for cross-context behavioral advertising.

To exercise any of these rights, email support@redditmaster.com. We will respond within the timeframes required by applicable law. We may need to verify your identity before acting on a request.

You also have the right to lodge a complaint with a data protection authority in your jurisdiction.

9. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect the personal information we hold, including encrypted connections, access controls, audit logging, and encrypted storage for sensitive documents such as tax forms. No security measure is perfect, however, and we cannot guarantee the absolute security of any information.

10. Third-Party Links

The Affiliate dashboard and the RedditMaster website may link to third-party sites (including the IRS website for tax forms). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or through the Affiliate dashboard. The "Effective date" at the top of this Policy indicates when it was last revised. Your continued use of the Program after an update constitutes your acceptance of the revised Policy.

12. Contact Us

If you have any questions about this Policy or our privacy practices, please contact us at support@redditmaster.com.