Last updated: 5 October 2026. RevRake Inc (“RevRake”, “we”) operates revrake.com and the RevRake service. Contact for anything about personal data: hello@revrake.com.
1. Two roles
- For accounts on RevRake (operators, their team members, affiliates) and for visitors of revrake.com, we decide how data is used: we are the controller.
- For the data an operator’s program produces (clicks on its links, its players’ events, its affiliates’ commissions and payout details), the operator decides and we process it for them: the operator is the controller and we are the processor. Questions about that data go to the operator first.
2. What we collect, and why
Your account. Email address, name, a hash of your password (never the password), your language and timezone choice, when you signed in, and the browser’s user-agent of each session. We use it to sign you in, keep the account secure and write to you about the service. Legal basis: our contract with you.
Signing up. Until you confirm your email we keep your sign-up request (email, name, password hash, the program’s name and address) and a hash of the IP address it came from, to stop abuse. Unconfirmed requests are deleted nine days after they were made.
Affiliates. What you give when you apply to a program (name, email, website, how you promote), your tracking links, and where you want to be paid (payout method, account name, bank name, account number, routing details, notes). The program’s operator sees these; bank account numbers are shown masked on screen and in full only in the file the operator downloads to pay you.
Clicks on tracking links. For each click: the time, the link, the browser’s user-agent, the referring page, the country (when the network provides it), the sub-IDs and campaign tags on the link, ad-platform click IDs if present, and hashes of the IP address and of the device characteristics. We do not store the IP address itself. This is used to attribute players to affiliates and to detect fraud (bots, repeated clicks, self-referral).
Players. Operators send us their own player identifiers, registration and deposit events, chargebacks and net revenue figures, and optionally a hash of the player’s email and the registration IP address, which is used for a fraud check and kept only as a hash. We do not receive players’ names, and we do not need them.
The website revrake.com. It sets no cookies, loads nothing from other companies, and runs no analytics. Our server keeps ordinary request logs for a short period, to run and secure the service.
The app. One cookie keeps you signed in. Your browser also remembers small preferences (language, dismissed hints) in its own storage. There are no advertising or tracking cookies.
Reports of abuse. The link, the reason and details you give, your email if you choose to give it, and a hash of your IP address.
3. Processing for operators (data processing terms)
When we process a program’s data for its operator, we: act only on the operator’s instructions (these terms and their use of the product); keep the data confidential and keep each program’s data separated from every other program’s in the database; use the sub-processors in section 4; help the operator answer requests from people about their data; tell the operator without undue delay if we learn of a breach affecting their data; and delete or return the data when the operator closes the program, except what the law requires us to keep.
4. Who else handles the data
| Who | What for | Where |
|---|---|---|
| Hetzner Online GmbH | The server and database | Finland (EU) |
| Resend | Sending account and program emails | A US company; our email is sent from its EU (Ireland) region |
| Cloudflare, Inc. | DNS for our domains (no traffic passes through it) | Global |
| Open Exchange Rates | Daily currency rates (receives no personal data) | Not applicable |
We do not sell personal data and we do not share it for advertising.
5. How long we keep it
Account data: while the account exists. To close an account and have its data deleted, write to us. Program data (clicks, events, commissions, payouts): while the program exists; commission and payout records are kept for as long as the program exists, because they are its financial records, and are deleted with the program unless the law requires them to be kept longer. Backups: the last 14 daily copies.
6. Security
Passwords are stored only as hashes. Connections are encrypted. Each program’s data is isolated in the database by row level security. Access to the server is limited to the people who run RevRake. Backups are taken daily.
7. Your rights
Depending on where you live you can ask to see, correct, export or delete your personal data, or object to how it is used. For your account, write to us. For data in an operator’s program (your clicks as a visitor, your record as a player or an affiliate), write to that operator; we help them answer. You can also complain to your data protection authority.
8. Changes
We post changes here with their date, and email account holders about changes that matter.