Agreement to This Policy
This Cookie Policy forms part of, and is incorporated into, our Terms of Service ("Terms"). Together with our Privacy Policy, these documents constitute your complete agreement with Revshare ("we," "us," or "our") regarding your use of our website and services (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Cookie Policy. If you do not agree to this Cookie Policy, you must discontinue use of the Service immediately.
Capitalized terms not defined in this Cookie Policy have the meanings set forth in our Terms of Service.
What Are Cookies?
Cookies are small text files that are stored on your computer, mobile device, or other internet-connected device when you visit a website. Cookies are widely used to make websites function, improve performance, provide analytics, and enable certain features.
Cookies may be "session cookies" (which are deleted when you close your browser) or "persistent cookies" (which remain on your device for a set period or until you delete them). Cookies may be set by the website you are visiting ("first-party cookies") or by third parties ("third-party cookies").
In addition to cookies, we may use similar technologies such as local storage, pixel tags, web beacons, and device fingerprinting to collect and store information about your use of the Service.
Cookies We Use
We use the following categories of cookies on the Revshare website and dashboard:
- (a) Strictly Necessary Cookies. These cookies are essential for the operation of the Service. They enable core functionality such as authentication, session management, security features, and access to secure areas of the dashboard. Without these cookies, the Service cannot function properly. These cookies do not require your consent under applicable law because they are necessary for the provision of the Service you have requested.
- (b) Authentication Cookies. When you log into your account (whether via email/password or Google OAuth), we set cookies to maintain your authenticated session. These cookies store a session identifier that allows us to recognize you as you navigate between pages without requiring you to log in repeatedly. These cookies are deleted when you log out or when your session expires.
- (c) Preference Cookies. These cookies remember choices you make (such as language preferences or display settings) to provide a more personalized experience. These cookies may persist beyond your session.
- (d) Analytics Cookies. We may use analytics cookies to understand how visitors interact with the Service, which pages are visited most frequently, and how users navigate the site. This information helps us improve the Service. Analytics data is collected in aggregate form and does not personally identify you.
- (e) Marketing Attribution Cookies. When you first visit our website, we may store information about the source of your visit, including UTM parameters (utm_source, utm_medium, utm_campaign, utm_term, utm_content), referrer URL, landing page, and the date of your first visit. This information helps us understand how users discover our Service and measure the effectiveness of our marketing efforts.
We do not use cookies to serve targeted advertising on the Revshare website.
Tracking Script Cookies (For Advertisers)
Important Distinction. This section describes cookies and browser storage set by the Revshare tracking script that Advertisers install on their own websites. These are distinct from the cookies we use on the Revshare website itself.
When an Advertiser installs our JavaScript tracking script on their website, the script sets a first-party cookie in the browsers of the Advertiser's website visitors. This cookie is used to:
- (a) Identify visitors who arrived via a Publisher's referral link (detected via
ref,via, oraffiliateURL parameters); - (b) Attribute conversions (such as sales or sign-ups) to the referring Publisher;
- (c) Enable accurate commission calculation and marketing attribution.
Cookie Duration. The default duration of the tracking cookie is thirty (30) days. Advertisers may configure a different duration using the data-cookie-duration attribute in the script implementation. Advertisers may also configure cross-subdomain tracking using the data-domain attribute.
LocalStorage Usage. In addition to cookies, the tracking script uses the browser's localStorage to maintain a visit history for attribution purposes. This allows the script to record up to fifty (50) page visits before a referral link is clicked, enabling more accurate attribution of the customer journey. This visit history is stored locally in the visitor's browser and is transmitted to our servers only when a referral link is clicked, after which the local history is cleared.
Data Collected by the Tracking Script. When a visitor clicks a referral link or when a conversion occurs, the tracking script may collect and transmit the following data to our servers:
- (a) Referral Information: Referral code, program identifier, page URL, and document referrer;
- (b) UTM Parameters: utm_source, utm_medium, utm_campaign, utm_content, and utm_term;
- (c) Advertising Parameters: Facebook click ID (fbclid), Facebook ad ID (fbadid), ad_id, campaign_id, and other advertising platform identifiers (d_id, tm_id);
- (d) Device Information: User agent string (browser type, version, and operating system);
- (e) Visit History: Prior page visits, paths, referrers, and timestamps stored in localStorage;
- (f) Timestamp: Date and time of the click or conversion event.
Conversion Data. When a conversion (such as a sale) is reported via our API, the following additional data may be processed: transaction identifier, transaction amount, currency, and customer identifier (if provided by the Advertiser). This data is used to calculate commissions, attribute sales to Publishers, and generate reports for Advertisers.
Shopify Integration. For Advertisers using Shopify, the tracking script may automatically inject referral attributes into the Shopify cart. This ensures that affiliate attribution is preserved through the checkout process. The script may modify cart forms and checkout links to include referral data.
Advertiser Responsibility. As set forth in our Terms of Service, Advertisers are solely responsible for obtaining any consents required by applicable law before the tracking script is executed on their website. The cookie and localStorage data set by our tracking script are first-party data on the Advertiser's domain, and the Advertiser is the Data Controller with respect to data collected through their website.
We (Revshare) act as a Data Processor with respect to data transmitted by the tracking script. We process this data solely for the purpose of providing the Service to the Advertiser.
Data We Collect
Through cookies and similar technologies, we may collect the following categories of information:
- (a) Account and Authentication Data. User identifiers, session tokens, login method (email or Google OAuth), and authentication status.
- (b) Activity Data. Information about your interactions with the Service, including login events, dashboard page loads, features accessed, and timestamps of activity.
- (c) Device and Browser Data. User agent string (which may include browser type, version, and operating system), IP address (Stored has a visitor token with SHA-256) and device identifiers.
- (d) Referral and Marketing Data. UTM parameters, referring URLs, landing pages, and first visit timestamps.
This data is used to provide and improve the Service, maintain security, analyze usage patterns, and measure marketing effectiveness. For complete information about how we use personal data, please refer to our Privacy Policy.
Legal Basis for Processing
Under applicable data protection laws, including the General Data Protection Regulation (GDPR), we rely on the following legal bases for processing data through cookies:
- (a) Strictly Necessary Cookies. Processing is necessary for the performance of a contract (the provision of the Service you have requested) or for our legitimate interests in operating a secure and functional platform.
- (b) Analytics and Preference Cookies. Processing is based on our legitimate interests in understanding how users interact with the Service and improving user experience, balanced against your rights and freedoms. Where required by applicable law, we will obtain your consent before setting these cookies.
- (c) Marketing Attribution Cookies. Processing is based on our legitimate interests in measuring the effectiveness of our marketing efforts. Where required by applicable law, we will obtain your consent.
Where we rely on consent as the legal basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Your Rights & Choices
Browser Controls. Most web browsers allow you to manage cookie preferences through browser settings. You can typically configure your browser to: (a) accept all cookies; (b) notify you when a cookie is set; (c) reject all cookies; or (d) delete cookies that have already been set. Please note that if you disable or reject cookies, some features of the Service may not function properly, and you may not be able to access secure areas of the dashboard.
Opt-Out of Analytics. If we use third-party analytics services, you may be able to opt out of analytics tracking through browser extensions or the analytics provider's opt-out mechanisms.
Do Not Track. Some browsers offer a "Do Not Track" (DNT) setting. There is currently no industry standard for how websites should respond to DNT signals. We do not currently respond to DNT signals, but we will update this policy if industry standards develop.
Data Subject Rights. Depending on your jurisdiction, you may have additional rights under applicable data protection laws, including the right to access, correct, delete, or port your personal data, and the right to object to or restrict certain processing. To exercise these rights, please contact us using the information provided below.
For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar rights, you also have the right to lodge a complaint with your local data protection supervisory authority.
Data Retention
Session cookies are deleted when you close your browser or log out of the Service. Persistent cookies remain on your device until they expire or until you delete them through your browser settings.
Data collected through cookies (such as activity logs and marketing attribution data) is retained in accordance with our data retention policies as described in our Privacy Policy. Generally, we retain this data for as long as necessary to fulfill the purposes for which it was collected, to comply with legal obligations, to resolve disputes, and to enforce our agreements.
Activity data (such as login events and dashboard access logs) may be retained for security, fraud prevention, and compliance purposes even after account termination.
Third-Party Services
We may use third-party service providers that set their own cookies on your device when you use the Service. These third parties may include:
- (a) Authentication Providers. If you log in using Google OAuth, Google may set cookies in accordance with its own privacy policy.
- (b) Payment Processors. If you make payments through the Service, our payment processor (Stripe) may set cookies for fraud prevention and payment processing purposes.
- (c) Analytics Providers. We may use analytics services that set their own cookies to collect usage data.
We do not control the cookies set by third parties, and their use is governed by the third party's own privacy and cookie policies. We encourage you to review the privacy policies of any third-party services you interact with.
We are not responsible for the privacy practices of third parties, and your interactions with third-party services are at your own risk.
Updates to This Policy
We may update this Cookie Policy from time to time to reflect changes in the cookies we use, changes in applicable law, or for other operational or legal reasons. When we make material changes to this Cookie Policy, we will notify you by: (a) posting the updated policy on our website with a new "Last updated" date; and (b) where required by law or where we deem appropriate, providing additional notice (such as via email or a notice on the dashboard).
Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Cookie Policy. We encourage you to review this Cookie Policy periodically to stay informed about our use of cookies.
Contact Us
If you have any questions, concerns, or requests regarding this Cookie Policy or our use of cookies and similar technologies, please contact us at:
Email: support@revshare.so
For requests relating to your data protection rights, please include sufficient information to allow us to verify your identity and respond to your request. We will respond to valid requests within the timeframes required by applicable law.
