Privacy Policy
Last updated: 16 October 2026
Who we are
abitback is run by Launchwell LTD, a company registered in England and Wales, of 50 Princes Street, Ipswich, Suffolk, IP1 1RJ, United Kingdom. Launchwell LTD is the data controller for the personal data described here.
This policy covers the website at abitback.com and the abitback browser extension for Chrome (“the extension”). abitback is a community directory of referral codes and links: members share their own referral links for retailers and services, and other people use them to get sign-up bonuses.
For anything about your data, email admin@abitback.com or write to us at the address above.
The short version
- If you create an account, we store your account details and the referrals you submit.
- We log limited technical data, such as a hashed IP address, to keep the referral system fair and prevent abuse.
- We use cookies to keep you logged in and to remember your country.
- If you use the browser extension and turn on site checks, it sends the domain of each site you visit to abitback.com to look for referral offers. It never sends page content.
- When you open a referral link from the extension, it clears that one retailer’s cookies first, so the member who shared the link gets the credit.
- Some referrals we show are abitback’s own, and Launchwell LTD earns that reward.
- We use a small number of third-party services (spam protection, retailer logos, fonts, email delivery and hosting), described below.
- We don’t sell your data, or use it for advertising or to assess creditworthiness.
What we collect on abitback.com
| Data | What it includes | Why |
|---|---|---|
| Account | Username, email address, password (stored hashed by WordPress, so we never see it in plain text), display name, profile bio, country | To give you an account, let you log in, attribute your referrals to you, and run your public offer page at abitback.com/u/your-username |
| Referrals you submit | The referral code or link, the retailer, the country, the reward amounts you enter, the date submitted and its status | This is the core of the site: your referral is shown to other people on rotation |
| Referral activity | Counts of impressions, clicks and code reveals on your referrals, and reports that a link did not work | To rotate referrals fairly and show you how yours perform |
| Anti-abuse and fairness | A hashed IP address recorded when a referral is submitted, shown, clicked, revealed or reported, plus a session identifier and a hashed browser user-agent | To detect duplicate submissions, self-clicking and coordinated abuse. We do not use it to identify you beyond fraud prevention |
| Incentive marketplace (only if you use it) | Your claims, store credit balance, disputes and related transaction records | To run the marketplace, resolve disputes and meet our record-keeping obligations. See The incentive marketplace below |
| Communications | Emails we send you and any you send us | Transactional emails only, such as password resets and notices when your referral is approved, paused or needs reconfirming. These run your account and are not marketing |
| Technical data | IP address, browser type, pages requested, errors | Our server and security tools process these, like any website’s, for security, debugging and preventing abuse |
We do not send marketing emails. Login, registration and submission forms are protected by Google reCAPTCHA, which processes your IP address and how you interact with the page.
The abitback browser extension
The extension has one purpose: to tell you when a site you visit has a referral bonus on abitback, and let you use or share a referral in one click. It only starts checking sites after you choose Turn on site checks on its welcome screen.
Domains of the sites you visit. Each time a page finishes loading, the extension sends its domain name (for example booking.com) and your abitback country to abitback.com, to see if we list that retailer. This is web browsing activity. We send only the domain, never the full address, the path, search terms or page content. We skip addresses that are not ordinary websites, such as browser pages, local files, localhost and IP addresses. These lookups carry no account details, so we do not link them to you. We do not build a history of your lookups or store them against your account. Like any web request, a lookup and your IP address can appear in our server’s security logs, which are kept only for a short time (see How long we keep data). You can stop automatic checks at any time by setting Reward alerts to Off. The extension then checks a site only when you open it.
Your abitback login. To show who you are signed in as and to let you submit referrals, the extension reads the abitback.com login cookie and an extension token that abitback.com sets when you sign in. The token is sent to abitback.com only when you submit a referral or report one that did not work. It does not read other sites’ cookies, except to delete them as described next.
Clearing a retailer’s cookies. When you click to open a referral link, the extension deletes that retailer’s cookies first, and only that retailer’s. This stops an older cookie, such as one from a different referral or affiliate link, taking the credit away from the member whose link you chose. It also signs you out of that retailer’s site. The extension tells you this beside the button before you click. It never clears cookies without that click.
What stays on your device. Your settings, the sites where you hid the banner, and a list of your last 25 grabbed referrals are stored in your browser only. Your Reward alerts setting may sync across your own Chrome browsers through your Google account. None of this is sent to us.
What the extension never does. It does not read or change page content (other than showing its own banner), read form fields, passwords or payment details, track you across sites, or show ads. It does not sell or share browsing data, and it does not load or run code from outside the extension.
The extension’s use of data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
How referrals are chosen, and how abitback earns
Most referrals we show belong to abitback members, and the member whose link or code you use earns that retailer’s referral reward. We pick between members by how long since each referral was last shown, with a small weighting for account trust, so everyone gets a turn.
For some retailers, abitback also has its own referral link. A share of the time, set per retailer and 10% unless we change it, we show abitback’s own link instead of a member’s, and Launchwell LTD earns the referral reward from that retailer. This is how we fund the service. Each retailer’s page on abitback.com shows its percentage. The website and the extension use the same rotation.
The incentive marketplace
Incentive offers let a member promise an extra payment to people who sign up with their referral. Taking part is optional, and nothing below applies unless you list or claim an offer.
| Data | Who sees it | Why |
|---|---|---|
| Your listing: retailer, referral link or code, official bonus, requirements, extra payout and currency, number of slots, how and when you will pay (for example PayPal, Revolut, bank transfer, crypto, Venmo or Cash App), countries and duration | Everyone, on the incentive offers page, with your display name and average rating | To show your offer to people who might claim it |
| Listing fee payment: your order and billing details from our checkout | Us and our payment provider. We never see or store your full card details | To take payment for a listing and give refunds |
| Offer clicks: a claim code, a hashed IP address and your account if you are signed in | Us | To check that a claim came from a real click on that offer |
| Your claim: claim code, when you signed up, the name you used with the retailer (optional) and your first message | You, the member who listed the offer, and us | So the member can check your sign-up with the retailer before paying you |
| Messages and attachments between you and the other member | The two of you. Our team reads them only when resolving a dispute or investigating abuse | To arrange and confirm payment |
| Ratings and comments you leave after a claim | The listing member’s average rating is public | To show which members pay reliably |
| Reputation: listings, claims verified or rejected, payouts confirmed or failed, ratings | Us, and your average rating publicly | To flag or ban members who do not pay |
| Disputes and compensation: reason, outcome and any compensation paid from our fund | You, the other member and us. Our team is emailed both members’ names and email addresses | To resolve disputes fairly |
| Store credit: your balance and its history, for example refunds for unused slots | You and us | To run store credit |
Payments between members. The member who listed an offer pays you directly, using the method in their listing. Launchwell LTD does not process these payments. To get paid you will usually need to give that member your payment details, such as a PayPal email address, in your messages. They must use them only to pay you. Only share what that payment method needs.
Attachments. Files you attach to a message are stored with our site’s uploaded files, and anyone who has a file’s link can open it. Do not upload identity documents, bank statements or anything you would not want shared.
Cookies on abitback.com
We use a small number of cookies. You can manage optional cookies through the cookie banner on our site.
| Cookie | Purpose | Lasts |
|---|---|---|
wordpress_logged_in_*, wordpress_sec_*
|
Keep you signed in and remember your display preferences | 2 days, or 14 days with Remember me |
abitback_api_token
|
Lets the extension act for your account when you submit or report a referral. It holds an access token, not your password | 30 days, removed when you sign out |
referral_country
|
Remembers the country you chose | 1 year |
ref_session
|
Anti-abuse session identifier for referral clicks | 24 hours |
abb_last_ref_<retailer>
|
Remembers which referral you were shown, so a “link didn’t work” report targets the right one | 24 hours |
referral_starter_ref, ref_tracked_<member>
|
Credit a member whose invite link brought you to abitback, without double counting | 30 days and 24 hours |
| Cookie banner cookies | Remember your cookie choices | Set by the banner |
| Google reCAPTCHA cookies | Bot protection on forms | Set by Google |
We do not use advertising cookies or analytics cookies. You can control cookies in your browser settings, but blocking the essential ones stops login from working.
Why we use your data, and our legal bases
Under UK data protection law (the UK GDPR and the Data Protection Act 2018) we rely on these legal bases:
| What we do | Legal basis |
|---|---|
| Running your account, showing your referrals, points, claims and store credit | Contract: we need it to provide the service you signed up for |
| Automatic site checks in the extension | Consent, given on the extension’s welcome screen. You can withdraw it at any time by setting Reward alerts to Off or removing the extension |
| Clearing a retailer’s cookies when you open a referral link | None needed: it happens only in your browser, only when you click, and we receive nothing |
| Fair rotation, anti-abuse records, reCAPTCHA and security logs | Legitimate interests: keeping the rotation fair and the service safe |
| Transactional emails | Contract and legitimate interests |
| Keeping transaction records | Legal obligation: tax and accounting rules |
We do not use your data for advertising, profiling or automated decisions that have legal or similarly significant effects on you.
Who we share data with
We do not sell or rent personal data, and we do not use it for advertising or to assess creditworthiness. We use these service providers, who process data only on our instructions:
| Provider | What they do | Data involved |
|---|---|---|
| Our web hosting provider | Hosts abitback.com and its database | Everything stored on the site, and server logs |
| Our email delivery provider | Sends transactional emails | Your email address and the email’s content |
| Google (reCAPTCHA) | Bot protection on forms | IP address, browser and interaction data, under Google’s privacy policy |
| Google Fonts | Serves the fonts our pages use | Your IP address and browser details when a page loads |
| Logo.dev | Supplies retailer logos | Your IP address and the retailer’s domain, when your browser loads a logo |
| CookieAdmin | Runs our cookie banner | Your cookie choices |
If you pay for an incentive listing, our WooCommerce checkout sends your billing details and card or wallet details straight to our payment provider, who processes the payment.
Other information is public by design: your username, bio and the referrals you share appear on your public offer page and on retailer pages, and incentive listings show your display name and rating. In an incentive claim, the two members involved see each other’s display name, the claim details and their messages. We may also disclose data if the law requires it, to protect people from fraud or abuse, or as part of a sale of the business, in which case we would tell you first.
If you reset your password through WordPress’s standard form, the reset email may include the IP address the request came from, for your security.
Embedded content from other websites
Some pages include content from other websites, such as retailer logos or, where present, videos. Embedded content behaves as if you had visited that other website, which may collect data about you, use cookies and track your interaction with it.
How long we keep data
| Data | How long |
|---|---|
| Account details | While your account exists. Deleted when you ask us to close it |
| Referrals you share | Until you delete them or close your account, together with the hashed IP address recorded when you submitted them |
| Individual click, impression and reveal records, with their hashed IP addresses | 7 days, then only the running totals on each referral remain |
| In-site notifications | 90 days |
| Points, claims, credit and transaction records | 6 years after the transaction, for tax and accounting rules and to handle disputes |
| Server security logs | Up to 30 days |
| Extension data on your device | Until you clear it or remove the extension |
When you close your account, we delete or anonymise your data, except records we must keep by law or to deal with a dispute or abuse.
Your rights
Depending on where you live, including under the UK GDPR and the EU GDPR, you have the right to:
- get a copy of the personal data we hold about you
- have inaccurate data corrected
- have your data deleted
- receive your data in a portable format
- object to, or ask us to restrict, how we use your data
- withdraw consent at any time, where we rely on it
To use any of these rights, email admin@abitback.com from the address on your account. We reply within one month and do not charge a fee. You can view and change most account details yourself on the site. We may need to verify your identity before acting on a request. Some data must be kept for legal, administrative or security reasons, so it cannot be erased on request.
If you are unhappy with how we handle your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113. If you are in the EU, you can also complain to your local data protection authority.
Children
abitback is for people aged 18 and over, because most sign-up bonuses we list, such as bank and finance offers, require it. We do not knowingly collect data from anyone under 18. If you think a child has given us data, email us and we will delete it.
Security
We use HTTPS everywhere, store passwords only as hashes, hash IP addresses in our anti-abuse records, and limit admin access. No system is perfectly secure, so please use a password you do not use elsewhere.
Data outside the UK
We aim to store data in the UK or the European Economic Area. Some providers, such as Google, may process data in other countries, including the United States. Where they do, we rely on the UK’s adequacy regulations or standard contractual clauses to protect it.
Changes to this policy
We update the date at the top whenever this policy changes. If we change what the extension collects or how we use it, we will tell you in the extension and ask for your consent again before the change applies to you.
Contact
Launchwell LTD
50 Princes Street
Ipswich
Suffolk
IP1 1RJ
United Kingdom
Email: admin@abitback.com