PartnerCodes privacy notice
What we collect
Your email address, your SafetyWing affiliate link and ambassador ID, and your password, which our login provider stores only as a secure hash that nobody can read.
Where it's kept
Accounts are stored with Supabase in the EU (Frankfurt). Emails are sent through Resend from the EU (Ireland). The site runs on Cloudflare.
Visitors to ambassador pages
Ambassador pages set no cookies, keep nothing in your browser and load no third-party scripts. We count views, code copies and card clicks so the ambassador can see how their page is doing. To tell one visitor from another for a day, we store a one-way hash of the day's secret, your IP address, your browser's user agent and the page. Your IP address itself is never stored, the hash changes every day, and nothing in it can be turned back into your address. We also keep the country and whether the device is a phone, and, where a link brings you, the website it came from — never a full address.
Who's responsible
During the prototype, PartnerCodes runs on accounts set up for this project, separate from SafetyWing's own systems. Before anyone other than test accounts signs up, this notice will name who is responsible for your data.
Ambassadors can delete their account, page and stats at any time in Settings. For anything else, email partnerships@safetywing.com.
Questions? Email partnerships@safetywing.com.