Privacy Policy
1Introduction & Scope of Policy
Welcome to AllCashbackRates.com ("AllCashbackRates", "we", "our", or "us"). We operate an independent consumer rewards aggregation and cash back rate comparison engine designed to help online shoppers compare daily rebate rates, promotional multipliers, and sign-up bonuses offered by over 22 leading third-party cash back platforms across 49,000+ retail merchants.
This Privacy Policy explains in detail our practices regarding the collection, use, storage, disclosure, and protection of information when you browse our website, utilize our real-time comparison search tools, or interact with outbound merchant and portal referral links.
We are committed to operating under a privacy-by-design philosophy: our tools are purposely engineered so that you can search, compare, and calculate savings without ever submitting personal identifiable information (PII) or creating an account on our site.
2Information We Collect and How We Collect It
Depending on how you interact with our website, we may process minimal categories of information as described below:
A. Information You Voluntarily Provide
- Search Queries: When you input a merchant name, brand, or category into our comparison search bar, that query is processed locally or transmitted to our edge database to return matching store records. Search query strings do not contain personal identifiers.
- Communications & Feedback: If you voluntarily reach out to our editorial or legal team via email, we receive your email address, your name (if supplied), and the text of your inquiry solely to respond to your communication.
B. Information Collected Automatically (Technical & Log Data)
When your browser connects to our web servers, our edge infrastructure (Cloudflare) automatically records standard HTTP request metadata, including:
- Internet Protocol (IP) address (which may be truncated or pseudonymized to determine approximate country or region);
- Browser type, user-agent string, operating system, and hardware architecture;
- Date, time, and duration of page requests, along with HTTP status codes;
- Referring Uniform Resource Locator (URL) that directed you to our website;
- Aggregate performance metrics (such as Core Web Vitals, page rendering latency, and static asset cache hit ratios).
C. Information We DO NOT Collect
We never require user registration, passwords, social security numbers, banking details, or payment card information. All transactions, cash disbursements, and account balance records occur exclusively on external third-party cashback networks and retail storefronts.
3Cookies & Tracking Technologies
Cookies are small alphanumeric text files stored on your device by your browser. We utilize cookies and modern web storage technologies strictly for functional security, performance optimization, and outbound affiliate attribution:
| Cookie / Storage Type | Provider | Purpose | Lifespan |
|---|---|---|---|
| Strictly Necessary & Security | Cloudflare | Bot detection, web application firewall (WAF) integrity, and DDoS prevention (e.g. __cf_bm). | Up to 30 minutes |
| Local Search Preference | AllCashbackRates (First-party) | HTML5 localStorage used to cache recent search terms and rate filters locally for instant client rendering. | Persistent (Client-side) |
| Outbound Affiliate Tracking | Third-Party Affiliate Networks | Placed upon clicking external links to reward portals to attribute referral bonuses and qualifying purchases. | 1 to 90 days (set by third-party) |
| Advertising & Analytics | Google & Certified Ad Networks | Serving contextual or non-personalized advertisements, measuring viewability, and preventing ad fraud. | Session to 13 months |
How to Manage Cookies: You can configure your browser (such as Google Chrome, Apple Safari, Mozilla Firefox, or Microsoft Edge) to reject all cookies, alert you when a cookie is placed, or delete stored cookies. Please note that disabling cookies may affect external affiliate tracking sessions, preventing third-party cashback platforms from verifying your qualifying retail purchases.
4Third-Party Advertising & Google AdSense Disclosures
We may display advertisements provided by Google AdSense and other certified advertising vendors to support our free rate comparison tools. In compliance with Google Publisher Policies and international advertising privacy frameworks, we provide the following disclosures:
- Third-Party Vendor Cookies: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites across the Internet.
- Personalized Advertising: Google's use of advertising cookies enables it and its partners to serve targeted ads based on your visits to our site and/or other websites on the Internet.
- Opt-Out of Personalized Advertising: You may opt out of personalized advertising by visiting Google Ads Settings. Alternatively, you can opt out of a third-party vendor's use of cookies for personalized advertising by visiting www.aboutads.info or the European Interactive Digital Advertising Alliance (EDAA) portal at youronlinechoices.eu.
5Affiliate Marketing & Commercial Partnerships (FTC Disclosure)
In accordance with the Federal Trade Commission (FTC) Guides Concerning the Use of Endorsements and Testimonials in Advertising (16 CFR Part 255), we transparently disclose that AllCashbackRates participates in affiliate marketing programs.
When you click on an "Activate" button, sign-up bonus banner, or merchant comparison link (directing to operators such as Rakuten, TopCashback, BeFrugal, RebatesMe, ExtraBux, or retail websites), you are redirected via an affiliate tracking link. If you subsequently register for an account or complete a qualifying transaction, we may receive financial compensation or a referral commission at zero additional expense to you.
Our rate comparison tables and calculators display unbiased, mathematically sorted rebate rates regardless of commercial affiliate relationships. We do not alter, artificially inflate, or suppress merchant cashback rates to favor affiliate partners over non-affiliate platforms.
6How We Use Collected Information
Any technical, aggregate, or communication information collected is used exclusively for legitimate business purposes:
- Providing Service Functionality: Processing search queries and returning live rebate comparison data across 22 portals;
- System Integrity & Security: Monitoring edge server performance, thwarting automated scraping abuse, mitigating brute-force DDoS attacks, and detecting security anomalies;
- Quality & Content Optimization: Analyzing aggregate query trends (e.g. tracking high-demand brands) to prioritize static landing page generation and expand merchant coverage;
- Legal Compliance: Fulfilling statutory obligations, enforcing our Terms of Service, and responding to lawful governmental requests.
7Data Sharing, Transfers, & Third-Party Disclosures
We do not sell, rent, monetize, or lease your personal information to data brokers or marketing lists. We disclose information only under the following limited circumstances:
- Infrastructure Service Providers: Trusted third-party vendors (such as Cloudflare, Inc.) that host our edge compute workers, D1 SQL databases, DNS, and content delivery network under strict confidentiality obligations;
- Legal Requirements: If required to do so by court subpoena, statutory warrant, or competent regulatory authority, or when we believe disclosure is necessary to protect our legal rights, property, or safety;
- Corporate Reorganization: In connection with or during negotiations of any merger, sale of corporate assets, financing, or acquisition of all or a portion of our website business.
8International Privacy Rights (GDPR & UK Data Protection)
If you reside within the European Economic Area (EEA), United Kingdom (UK), or Switzerland, your personal data is protected under the General Data Protection Regulation (GDPR) and UK Data Protection Act 2018.
Legal Basis for Processing: We process minimal server log data and anonymous performance metrics under the legal basis of Legitimate Interests (Article 6(1)(f) GDPR)—specifically, securing our computing infrastructure, preventing malicious attacks, and delivering accurate consumer shopping information.
Your Statutory Rights: Subject to applicable exemptions, you have the right to:
- Access: Request confirmation of whether we hold personal data relating to you and request copies;
- Rectification: Request correction of inaccurate or incomplete personal records;
- Erasure ("Right to be Forgotten"): Request the permanent deletion of your personal data where retention is no longer justified;
- Restriction of Processing: Request that we limit processing of your data under certain circumstances;
- Data Portability: Obtain a portable, machine-readable copy of your personal data;
- Object: Object at any time to processing predicated on our legitimate interests;
- Lodge a Complaint: File a grievance with your local supervisory Data Protection Authority (DPA).
9California Privacy Rights (CCPA / CPRA Notice)
This section applies solely to California residents under the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (collectively "CCPA/CPRA").
Notice of Collection: In the preceding 12 months, we have collected only Internet or other electronic network activity information (such as truncated IP addresses, user-agent strings, and interaction logs).
No Sale or Sharing of Personal Information: We do not "sell" or "share" your personal information (including sensitive personal information) to third parties for monetary or valuable consideration as defined by California law.
Your California Rights: You possess the Right to Know, the Right to Delete, the Right to Correct Inaccurate Personal Information, and the Right to Non-Discrimination for exercising your statutory privacy privileges.
Global Privacy Control (GPC): We honor recognized opt-out preference signals sent by your browser (such as Global Privacy Control).
10Children's Privacy (COPPA Notice)
AllCashbackRates.com is strictly intended for individuals who are at least 18 years of age (or the legal age of majority in their jurisdiction). We do not knowingly target, solicit, or collect personal information from children under the age of 13 (or under 16 in the European Union) pursuant to the Children's Online Privacy Protection Act (COPPA).
If you are a parent or legal guardian and discover that your minor child has provided personal information to us without consent, please contact us immediately, and we will promptly purge such records from our systems.
11Data Security & Retention Protocols
We enforce rigorous administrative, technical, and architectural safeguards to protect our website and data infrastructure:
- Transport Layer Security: All client connections are secured via modern TLS 1.3 / HTTPS encryption, preventing eavesdropping and packet interception;
- Edge Firewalls & Isolation: Our API endpoints and databases operate in sandboxed Cloudflare serverless environments with strict least-privilege authentication controls;
- Retention Timelines: Transient server access logs are retained strictly for security analysis and forensic diagnostics (typically 30 to 90 days) and are subsequently permanently deleted.
12Changes to this Privacy Policy
We reserve the right to revise, amend, or modify this Privacy Policy at any time to reflect evolving regulatory frameworks, technical updates, or changes in our service architecture. Any revisions will be posted directly on this page with an updated "Last Updated" timestamp at the top. We encourage you to review this policy periodically to stay informed about how we safeguard your privacy.
13Contact Information & Data Rights Inquiries
If you have any questions, comments, or formal requests regarding this Privacy Policy or wish to exercise your statutory GDPR / CCPA privacy rights, please reach out to our designated Data Privacy team:
Entity: AllCashbackRates Editorial & Legal Operations
Email: [email protected]
Secondary Legal Inquiries: [email protected]
Website: https://allcashbackrates.com
We endeavor to acknowledge and fulfill all verified statutory data requests within thirty (30) calendar days of receipt.