Privacy Policy

We collect information only when it supports the site, account features, paid access, listings, support, safety, analytics, or newsletter delivery.

• Provide the website, account access, saved bookmarks, affiliate finder results, and PRO features.
• Process purchases, subscriptions, customer portal access, listing packages, refunds, support, and billing records.
• Send newsletter emails, welcome emails, and service-related messages where permitted.
• Operate program listings, company profile access, paid placements, badges, and listing change requests.
• Answer your questions through the optional AI assistant, enforce its usage limits, and keep it safe.
• Measure site performance and improve the directory when analytics is accepted.
• Count campaign page visits, campaign checkout clicks and Featured clicks as daily totals without identifiers, to measure our ad campaigns and paid Featured placements.
• Detect abuse, prevent fraud, enforce limits, debug errors, and secure the service.
• Comply with legal, tax, accounting, dispute, and platform obligations.

Necessary cookies and similar storage help the site provide authentication, security, checkout, referral attribution, preferences, rate limiting, and core functionality. Some preferences may also be stored in local storage, such as theme, language, bookmarks cache, and cookie choices.

Google Analytics, Google Translate, and Meta Pixel are optional. Analytics loads only after analytics consent. Google Translate loads only after preferences consent or when you directly interact with the translation feature. Meta Pixel loads only after marketing consent and is used for basic page and ad measurement events.

If you accept marketing and use our company promotion checkout, we store a consent record, campaign labels, your browser user agent and available Meta browser or click identifiers. An optional 30-day cookie lets us revoke your pending checkout contexts when you withdraw consent. Only a private reference and campaign labels accompany the Lemon Squeezy checkout. After Lemon Squeezy confirms payment, our server sends Meta the purchase time, amount, currency, an order-derived event reference, the public promotion page URL, browser user agent and available Meta identifiers. We do not include your name, email, telephone number or billing address. Checkout still works when you reject marketing.

If you accept marketing and arrive through our Meta company promotion campaign, we pass the campaign, creative, and country-group labels to your Lemon Squeezy checkout. These labels help link a purchase to the promotion. We do not pass Meta click identifiers or contact details as campaign labels.

We also keep simple daily totals of visits to our ad campaign page, checkout clicks on it, and clicks on Featured programs wherever the Featured row appears, grouped by campaign, ad, plan or program, page type and country. These totals do not depend on your cookie choices: they use no cookies and store no IP addresses, browser details or other identifiers, and the country comes from our hosting provider and is not linked to you. We keep them for our legitimate interest in measuring our campaigns and paid placements; you can object by emailing contact@rekonmedia.com. When you arrive through one of our ad campaigns, every checkout link on that page carries the campaign's discount code, whatever your cookie choices, because the code gives you the advertised price. Lemon Squeezy records the code with your order, which also lets us count the campaign's orders.

The optional AI assistant sets one necessary cookie and a few browser storage values when you use it. They are described in the AI Assistant section.

You can accept all, reject non-essential tools, or manage choices through the cookie choices panel. You can also use your browser settings to clear cookies and local storage.

Withdrawing marketing consent through Cookie settings stops future measurement and revokes pending contexts in this browser. It cannot recall events already sent to Meta. If browser storage has been cleared, contact us to request deletion of any remaining records. See Meta's privacy policy for its processing and retention practices.

FindAffiliates offers an optional AI assistant, Affiliate Buddy, that answers questions about affiliate programs listed on FindAffiliates. Affiliate Buddy is an AI system, not a person, and it can make mistakes. It only starts when you open it. The AI assistant page explains how it works, its safety rules, how it treats teens and children, and how to hide it.

• What we process: the message you type, the recent messages of the same chat (kept in your browser tab, not on our servers), the page you are on, your plan (no account, free, or PRO), your interface language, and an age range (13 to 17, 18 or older, or not provided). We never store your birth year. If you are signed in and ask about the Program Finder, the assistant can also use your saved Program Finder answers.
• Before a message leaves our servers, we try to remove things that look like personal information, such as email addresses, phone numbers, names and schools people mention, usernames given with their app (such as "my snap is"), payment card, ID, and bank account numbers, IP and street addresses, and the query part of links. For users aged 13 to 17 and users who do not give an age, we also try to remove social media usernames, such as @handles. This is automatic and can miss things, so please do not enter personal information.
• To write a reply, we send the cleaned message, the recent chat, the plan, page, language, and age range above, and the FindAffiliates listing data needed for the answer to Anthropic, PBC, which provides the AI model (Claude), together with a pseudonymous identifier that helps Anthropic detect abuse. For users aged 13 to 17 and users who do not give an age, this identifier changes every day. Anthropic processes this information to provide the service to us. Its policy is to delete these messages within 30 days, unless it needs to keep them longer, for example to enforce its usage policy or to comply with the law; messages flagged by its safety systems can be kept for up to 2 years. Under its commercial terms, Anthropic may not use this information to train its AI models.
• We do not store chat transcripts. To enforce daily and monthly limits and to prevent abuse, we keep usage counters linked to a one-way hash of your account ID, of a random browser ID, or of your network address. Most counters are deleted within 3 days, and monthly counters within 33 days.
• If you report a reply, we keep the reported reply, the reason, an optional note, and, only if you choose, the message that led to it (never for a safety message), with personal information removed, together with your plan, age range, and language, for 30 days so we can review it. Reports do not include your account ID, browser ID, IP address, or cookies.
• When you start using the assistant, we set one necessary cookie, fa_ai. It holds a random browser ID, when your human check expires with a code for the network you completed it on, and your age range with the date you gave it, for up to 180 days, and it is sent only with the assistant's own requests. You can delete it with "Delete my AI settings" in the assistant's "About and safety" panel. Your age range stays until 30 days after you gave it, so the age check keeps working.
• If you are 13 to 17, under 13, or do not give an age, we also keep the age range and the date its 30-day lock ends with a one-way hash of your account ID or random browser ID, so that deleting the cookie or switching to another device where you are signed in cannot change the age setting within those 30 days. Under-13 answers are kept this way only for signed-in accounts. We delete it when the lock ends, and we never keep your birth year. Without an account, clearing the browser's cookies starts the age question over.
• The assistant also keeps a few values in your browser on this device, none of which holds chat text: whether you hid it (fa_ai_hidden), whether its one-time greeting has played (fa_ai_seen, and fa_ai_nudged for the current tab), and, for users aged 13 to 17 or who do not give an age, when the chat session started, so it can suggest a break (fa_ai_session_start, current tab only), and until when their age setting runs, so the site's discount offer is not shown on that device (fa_ai_youth, which holds only that date). If you choose Simple mode, which answers without AI, that choice is kept too (fa_ai_mode).
• In Simple mode, messages are processed on our servers to pick an answer and are never sent to an AI company. Only counters are kept.
• Visitors without an account complete a Cloudflare Turnstile check after the age question and before their first message. Cloudflare processes technical signals from your browser to tell people from automated traffic. A passed check lasts 12 hours on the network where you completed it.
• If a message suggests that someone may be in crisis, we use the country your connection comes from, as reported by our hosting provider, to show local helplines. The country is kept only in the daily count of safety messages, never with anything that identifies you.
• We count assistant activity, such as replies, reports, and safety messages shown, as daily totals without identifiers.
• Where the law requires a legal basis, we process this information to provide the assistant you asked for and for our legitimate interests in keeping it safe, reliable, and within budget.
• The assistant is not available to children under 13. If the age question shows that a user may be under 13, the assistant does not accept their messages or send them anywhere, and keeps only the age range on that device so the check keeps working.
• We do not use assistant conversations for advertising or profiling.

We use service providers to run the website and process data on our behalf or as independent providers for their services.

We do not sell personal information. We may share information in these limited situations:

• With service providers listed above so they can provide hosting, auth, payments, newsletter, analytics, translation, AI assistant, database, and security services.
• With third-party program websites when you click outbound links. Those websites control their own privacy practices.
• With company owners when public listing information is displayed or when their verified email is used to manage their listings.
• With authorities, courts, advisors, or counterparties when required for legal compliance, safety, fraud prevention, disputes, or business transfers.

We keep information for the time needed for the purpose collected, then delete, de-identify, or archive it when reasonable.

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, or information about how your data is handled. You can also unsubscribe from marketing emails through the unsubscribe link in beehiiv emails.

California residents may request details about categories of personal information collected, sources, purposes, categories of recipients, and deletion or correction where applicable. We do not sell personal information. If a future feature is treated as a sale or share under California law, we will update this policy and provide the required opt-out.

EU and UK visitors may have rights under GDPR or UK GDPR, including the right to complain to a data protection authority. Where consent is used for optional analytics, preferences, or marketing/ad measurement, you can withdraw that consent through the cookie choices panel or browser controls.

FindAffiliates and its providers may process information in the United States, India, the European Union, the United Kingdom, and other countries where our providers operate. When data moves across borders, we rely on provider safeguards, contractual terms, and other legally recognized transfer mechanisms where required.

FindAffiliates is not intended for children under 13, and paid account or listing features are intended for users who can form a binding agreement. If you believe a child provided personal information, contact us so we can review and delete it where appropriate.

The AI assistant asks a neutral age question before first use and is not available to children under 13. Teens, and people who prefer not to give their age, see a version with no upgrade prompts and an hourly break reminder. Learn more on the AI assistant page.

In line with the US Children's Online Privacy Protection Act (COPPA), when the age answer shows a user may be under 13, the assistant does not accept or keep their messages and collects no other personal information from them. The age question comes before the human check, so an answer that shows a user may be under 13 is never sent to Cloudflare. For a browser whose answer shows a user may be under 13, the only identifiers we use are the fa_ai cookie, which then holds only the age range, a one-way hash of the network address that counts setup requests and is deleted within 3 days, and, for a signed-in account, the age range kept with a one-way hash of the account ID for 30 days so the check works on its other devices. We use them only to support the internal operation of the assistant, such as security and rate limits, and never for advertising, profiling, or contacting anyone.

For privacy questions, data requests, or account deletion requests, contact us at contact@rekonmedia.com.

For commercial terms, see the Terms of Service.