Privacy Policy

What We Collect

Account information

When you create a Milabee account, we collect your name and email address and assign you a unique Milabee user ID. If you choose to create or sign in to your account using Google, we may receive certain information from your Google account, such as your name, email address, and profile photo, depending on the information you authorize Google to share with us.

Desktop install link requests

If you ask us to email you a link to install Milabee on your desktop browser, we collect the email address you provide and your IP address. We use this information to send you the requested install link, help prevent fraud and abuse, and troubleshoot email delivery. We do not use the email address you provide for this purpose to send you marketing communications unless you separately consent to receive them.

Device identifier

When you install the Milabee browser extension, we generate a random identifier (a “device ID”) that is associated with your installation. It is a random value — nothing about your device or your identity is used to create it.

We receive this identifier as well as storing it on your device. It is sent to us when you activate a cash back offer, recorded with that activation, and included with the product analytics events described below, which is what allows those to be recognized as coming from the same browser. If you later create or sign in to a Milabee account, we may associate the device ID with your account so we can attribute eligible cash back activity that occurred before you signed in. Until then, the device ID is not directly associated with your name or email address.

Shopping & cash back activity

When you activate a cash back offer, we collect information about the activation, such as the participating brand, date and time, your IP address, and information used to attribute an eligible purchase to you.

When you make an eligible purchase, we may receive transaction information from the participating brand, affiliate network, or other affiliate partner. Depending on the transaction, this information may include the participating brand, order or transaction identifier, purchase amount, currency, cash back or commission information, transaction date, and transaction status, including whether a purchase was completed, returned, canceled, or otherwise determined to be ineligible for cash back. We also retain the affiliate partner’s original transaction record for a limited period for reconciliation and fraud investigation, which may contain additional details that partner chose to include.

When you request a payout of your available cash back, we record information about the payout request, including the amount, the payout method you choose, the status, and the IP address associated with the request. When a payout method requires an account identifier, such as a PayPal email address or Venmo handle, you provide it directly to Tremendous in its hosted payout experience; Milabee does not collect or store that identifier.

We use this information to track and attribute eligible purchases, calculate and provide cash back, maintain your transaction and payout history, resolve missing cash back inquiries, and help detect and prevent fraud and abuse.

Referrals

When you refer a friend to Milabee, we record information about the referral, including that you referred them and whether they created a Milabee account using your referral link or code. We use this information to track referrals, determine eligibility for referral rewards, and credit any applicable referral bonus.

If you customize your referral code, we store the code you choose and may retain a history of previous referral codes to help prevent fraud and abuse and to keep previously shared referral links working.

Your referral code is public by design and may be visible to anyone with whom you share your referral link or code. For this reason, you should not include personal or sensitive information in a customized referral code.

To protect the privacy of referred members, your referral dashboard identifies them only by a generic reference, such as “Referral #1” or “Referral #2,” together with the month they joined and the earnings you received from that referral, including amounts still pending confirmation. We do not provide you with the referred member’s name, email address, shopping activity, purchase details, or their own earnings or cash back. We also do not provide referred members with information about your Milabee account, shopping activity, earnings, or cash back.

Ratings & feedback

If you choose to respond to a rating or feedback prompt, we collect your response, the screen or feature associated with the prompt, and the date and time of your response. Responding to these prompts is optional.

Fraud-prevention records

We collect and retain certain information to help detect, investigate, and prevent fraud and abuse of the Milabee Services. This may include the IP address associated with account creation and payout requests.

If you receive a signup bonus or other applicable promotional reward, we may also create and retain a one-way cryptographic hash derived from your email address. We use this hash to help identify attempts to claim the same bonus or promotional reward more than once, including by deleting and recreating an account.

We may retain this fraud-prevention record after you delete your Milabee account when reasonably necessary to prevent fraud and abuse, enforce our promotional terms, and protect the integrity of the Services. We do not use the hashed email address for marketing purposes.

Browsing data

The Milabee browser extension checks the domain of the website you are visiting to determine whether cash back is available from a participating brand. This check happens entirely on your device, against a list of participating brands we download in advance — so visiting a website we do not work with sends us nothing about it. When you do visit a participating brand, we receive that brand’s domain and the page address so we can look up the available offer. We do not build or keep a browsing history from it.

When you visit a participating brand’s website, the extension may also evaluate information about how you arrived at that website, such as the redirect chain, when necessary to comply with affiliate-network attribution and stand-down requirements and to avoid interfering with another affiliate referral.

There are two limited circumstances in which the extension examines a webpage’s structure. On a Shop Pay checkout page, the web address does not identify the brand you are purchasing from, so the extension examines the links on the page — their web addresses and labels — to identify the link pointing back to the brand’s own store. On a participating brand’s pages, the extension may check whether a particular page element is present in order to determine whether to display a coupon prompt. In both cases the extension is matching against a fixed pattern, and the information examined is not stored by the extension or transmitted to Milabee.

Apart from those limited circumstances, Milabee does not read or collect the content of webpages you visit, information you enter into forms, passwords, the contents of your shopping cart, or other personal content displayed on webpages. We use browsing information collected through the extension only as necessary to provide, operate, secure, and measure the performance of Milabee’s disclosed extension features.

Usage & analytics information

We collect limited product analytics about how you interact with Milabee and its features. For example, we may record when the browser extension is installed; when the Milabee toolbar popup, cash back banner, or coupon prompt is displayed; and whether you activate cash back, copy a coupon, open a deal, or dismiss a Milabee prompt.

For cash back offers, coupons, and related features, these analytics may include information such as the participating brand, the cash back rate and offer type, the number of available coupons displayed, an internal coupon identifier and source, whether a prompt appeared during checkout, and whether a prompt was displayed based on a brand-specific rule.

These analytics may be associated with your device ID and, after you sign in, your Milabee user ID. They also include the date and time of the event, approximate location such as country or city, and basic browser information: your browser’s user-agent string (from which we derive your browser, operating system, and device type), your browser’s language setting, and its time zone. We do not store your IP address with these events— it reaches our servers with the request, we derive the approximate location from it, and we discard it.

We do not include webpage content, information entered into forms, passwords, coupon codes, or the full URL of the webpage in these product analytics events. We use this information to operate, maintain, troubleshoot, secure, and measure the performance and effectiveness of Milabee’s disclosed features.

Website analytics

We use Google Analytics, implemented through Google Tag Manager, to collect and process analytics data and understand how visitors use joinmilabee.com. Google Analytics may process website interactions, page and referral information, browser and device information, approximate location, and pseudonymous identifiers.

We do not use Google Analytics inside the Milabee browser extension. Google Analytics is subject to Google’s Privacy Policy and Terms of Service. Google also explains how it uses information from sites and apps that use its services and the privacy choices it offers.

Google Analytics operates on joinmilabee.com. We disable Google Analytics on pages containing one-time confirmation links and on the page displayed after the Milabee browser extension is uninstalled. For more information about cookies and similar technologies used on our website, see the Cookies section below.

Device & technical information

We collect certain technical information when you use the Milabee Services, such as your browser type, operating system, IP address, and browser identification information (such as your browser’s user-agent string). Your IP address is recorded when you activate a cash back offer, on your first request to us after you create an account, when you request a payout, and when you ask us to email a desktop install link. It is not recorded with product analytics events. Browser identification information is collected with those analytics events rather than with individual cash back activations.

We use this information to operate and maintain the Services, ensure compatibility, troubleshoot technical issues, help secure the Services, and detect and prevent fraud and abuse.

What we don’t collect

We designed Milabee to limit the information we collect to what is needed to provide and operate the Services. To be clear about information you might reasonably expect a shopping browser extension to access:

• Apart from the two limited circumstances described under Browsing data, we do not read or collect webpage content, information you enter into forms, keystrokes, or passwords.
• We do not collect your payment card or bank account credentials. Payouts are processed by our payment service providers, and Milabee does not receive your full payment card or bank account credentials.
• We do not use tracking technologies in our emails to determine whether you open or click them.
• We do not build advertising or interest profiles about you based on your shopping activity.
• We do not infer personal characteristics about you from your shopping activity for advertising or profiling purposes.

How We Use Your Information

We use the information we collect to:

• Provide the Services: operate Milabee, track and attribute eligible purchases, calculate and manage your cash back, maintain your account and transaction history, administer referral rewards, and process payout requests.
• Improve and maintain Milabee: understand how the Services and their features are used, measure performance, troubleshoot issues, fix bugs, and improve our features and user experience.
• Communicate with you: send requested install links, cash back and earnings updates, payout notifications, service-related messages, security alerts, and other important information about your account or the Services.
• Prevent fraud and protect Milabee: detect, investigate, and prevent fraud, abuse, security incidents, duplicate or unauthorized bonus claims, and other activity that may violate our Terms.
• Comply with legal obligations: comply with applicable laws and legal processes, respond to lawful requests, establish or exercise our legal rights, resolve disputes, and enforce our Terms and other agreements.

How We Share Your Information

We do not sell your personal information, and we do not share your personal information for cross-context behavioral advertising.

We disclose personal information to service providers and other partners that help us operate Milabee and provide the Services. We limit these disclosures to information reasonably necessary for the services they provide to us. These providers include:

• Supabase — authentication and database services. Helps us authenticate users and store account, transaction, cash back, and related records.
• Cloudflare — infrastructure and security. Provides network, security, edge infrastructure, and related services, and may process technical information associated with requests, such as IP addresses.
• HiEnergy — affiliate services. Helps track, attribute, and verify eligible purchases so that cash back can be calculated and credited.
• Tremendous — payout services. Helps process cash back redemptions through available payout methods. Tremendous receives the information necessary to process the payout method you select.
• Resend — email delivery. Helps us deliver requested install links and account, cash back, payout, security, and other service-related communications.
• Google BigQuery — product analytics infrastructure. Stores and processes limited Milabee product analytics, which may include your device ID, Milabee user ID after you sign in, usage events, timestamps, and approximate location as described in this Privacy Policy. Your IP address is not included.
• Google Analytics and Google Tag Manager — website analytics. Collect and process analytics data to help us understand how visitors use joinmilabee.com. The information they may process is described under Website analytics above. We do not use Google Analytics inside the Milabee browser extension.
• Google Forms — optional feedback. If you choose to complete a feedback survey after uninstalling the Milabee browser extension, Google processes the information you choose to provide through the form and certain technical information associated with your use of Google Forms. Participation is optional.
• Vercel — website hosting. Hosts and serves joinmilabee.com and may process technical information associated with website requests, including IP addresses.
• Sentry — error monitoring. Helps us identify and troubleshoot technical errors. Diagnostic reports may include information such as your Milabee user ID and information about the page, feature, or action associated with an error. We configure our error reporting to exclude sign-in and email-link information before diagnostic reports are sent.
• Legal, security, and protection of rights. We may disclose personal information when we reasonably believe disclosure is necessary to comply with applicable law, regulation, legal process, or lawful governmental request; protect the rights, property, or safety of Milabee, our users, or others; detect or investigate fraud, abuse, or security incidents; or enforce our Terms and other agreements.
• Business transfers. We may disclose or transfer personal information in connection with an actual or proposed merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar corporate transaction, subject to applicable law.

Extension Permissions

The Milabee browser extension requests certain browser permissions to provide its cash back features, maintain your account session, and comply with affiliate-network attribution requirements. We seek to limit these permissions to those reasonably necessary to provide the extension’s disclosed features.

• Access to websites you visit (<all_urls>). This permission allows Milabee to detect when you visit a participating brand so we can determine whether cash back is available and display an applicable offer. It also allows the extension to evaluate redirect information associated with visits to participating brands so we can comply with affiliate-network attribution and stand-down requirements — for example, if another affiliate or service referred you to a participating brand, Milabee may refrain from overriding that referral. Because affiliate redirects can involve domains that cannot reliably be identified in advance, broad host access is required for this functionality. Whether a website participates is determined on your device, so websites we do not work with involve no contact with Milabee’s servers. Apart from the two limited circumstances described under Browsing data, Milabee does not use this permission to read or collect webpage content, information entered into forms, keystrokes, or passwords.
• Tabs and navigation (tabs, webNavigation, webRequest). These permissions allow Milabee to identify the website in your active tab when needed to provide cash back features, manage temporary Milabee activation and sign-in tabs or windows, recognize when Milabee sign-in has completed, and observe relevant redirect information for affiliate attribution and stand-down compliance. Milabee uses webRequest to observe relevant network requests for these purposes. Milabee does not use webRequest to block or modify network requests.
• Extension management (management). If an installed ad-blocking extension appears to interfere with a cash back activation, Milabee may use this permission to identify recognized ad blockers installed in your browser and give you the option to temporarily disable the applicable blocker and retry the activation. Milabee does not automatically disable another extension. A recognized ad blocker is disabled only after you choose to do so, and Milabee is designed to re-enable it after the activation attempt is completed. The installed-extension information used for this feature is processed locally on your device: the names and identifiers of your extensions never leave it. Only the number of recognized ad blockers we found is reported to Milabee, so we can tell how often this situation arises.
• Local storage (storage). This permission allows Milabee to store information locally on your device, such as information used to maintain your session, the list of participating brands, and cached information needed for the extension to operate efficiently.
• Cookies (cookies). This permission is used to detect changes to your Milabee sign-in state on joinmilabee.com so the extension can synchronize your session. The extension reads only the domain associated with a changed cookie, and does not read or analyze the contents of your cookies.
• Alarms (alarms). This permission allows Milabee to schedule periodic background tasks needed to maintain the extension, including an approximately daily check-in used to determine that the extension remains active.

Cookies and Similar Technologies

We use cookies and similar technologies on the Milabee website to keep you signed in, remember certain preferences, attribute referrals, and understand how visitors use our website.

Essential cookies

We use first-party cookies and similar technologies that are necessary to operate Milabee. These include an identifier that allows us to recognize the same browser in connection with our website and browser extension, so that your account, cash back activity, and related information remain consistent across the Services. This is an ordinary first-party cookie set on joinmilabee.com: when the extension is installed, it reads and writes that cookie on our own website, which is how both surfaces come to share one identifier. It lasts approximately 13 months, which reflects the longest cookie lifetime current browsers will honor rather than a period we selected.

Referral cookies

If you arrive at Milabee through a referral link, we may store a first-party cookie or similar identifier so we can attribute your signup or other qualifying referral activity to the appropriate Milabee member. This referral information is retained for 30 days.

Website analytics

We use Google Analytics, implemented through Google Tag Manager, to collect and process analytics data and understand how visitors use joinmilabee.com. Google Analytics may use cookies and similar technologies and process website interactions, page and referral information, browser and device information, approximate location, and pseudonymous identifiers. We do not use Google Analytics inside the Milabee browser extension.

You can control or delete cookies through your browser settings and, where available, through the choices described in the Your Choices section below. Disabling certain cookies may affect the functionality of Milabee.

Email

We do not use tracking pixels or similar technologies in our emails to determine whether you open or click them. Our email service provider may process limited delivery information, such as whether an email was successfully delivered, bounced, or reported as spam, to help us operate and maintain our email communications. We disable website analytics and other measurement tags on pages containing one-time confirmation links and on other pages where we determine that additional tracking is unnecessary or inappropriate.

Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, use, disclosure, alteration, or destruction. These safeguards may include encryption, access controls, and other security measures appropriate to the nature of the information we process.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of your information. We regularly review and work to improve our security practices as Milabee and our Services evolve.

Data Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain your account, fulfill the purposes described in this Privacy Policy, and meet our legal, tax, accounting, fraud-prevention, security, and compliance obligations. Retention periods vary depending on the type of information and the purpose for which it is processed. In particular:

• Pre-account cash back activity. Click and activation records that have not been associated with a Milabee account are retained for purchase attribution, troubleshooting, and fraud prevention, and are generally deleted after 7 days unless they become associated with a Milabee account, or longer retention is reasonably necessary for security, fraud prevention, or legal purposes.
• IP addresses. The IP addresses we record when you activate a cash back offer, when you sign up, and when you request a payout are all generally removed after 1 year, unless longer retention is reasonably necessary for security, fraud prevention, or legal purposes. The underlying records — your cash back activity, your account, and your payout history — are retained as described elsewhere in this section, without the IP address.
• Account, cash back & payout records. Account information and records relating to cash back, transactions, referrals, and payouts are retained while your account is active, and afterward for as long as reasonably necessary for financial, tax, accounting, fraud-prevention, dispute-resolution, and legal purposes.
• Affiliate transaction data. Raw or diagnostic transaction data received from our affiliate service providers may be retained for troubleshooting, transaction reconciliation, and fraud investigation, and is generally deleted after 90 days, unless longer retention is reasonably necessary for a transaction, dispute, security investigation, or legal obligation.
• Desktop install link requests. The email address and IP address you submit are held in a record used to enforce limits on install-link requests, and are generally deleted after 7 days.
• Email delivery records. We keep a record of each message we send, for security and troubleshooting. The recipient address and the message contents are generally removed from those records after 90 days, unless longer retention is reasonably necessary for security, fraud prevention, or legal purposes. What remains — which message it was, whether it was delivered, and when — stays linked to your account, so we can still answer questions such as whether a payout notification reached you.
• Product analytics events. Raw events may be retained without a fixed expiration while your account is active so we can measure and improve the Services. They may contain Milabee’s internal user and browser identifiers, but not your name, email address, or IP address. Your IP reaches our servers with the request, we use it to work out the approximate country and city, and we discard it — only the approximate location is kept. If you delete your account, we delete raw analytics events associated with it after a short processing period. Aggregate statistics already produced from those events may remain, but do not contain your account or browser identifiers.
• Account deletion. If you delete your Milabee account, we delete or de-identify personal information associated with your account except where retention is reasonably necessary or permitted by law, including for financial, tax, accounting, fraud-prevention, security, dispute-resolution, or other legal and compliance purposes. If you received a signup bonus or other applicable promotional reward, we may retain the cryptographic hash derived from your email address described above to help prevent repeated or abusive bonus claims. We do not use this retained hash for marketing purposes.

We may also retain records of cash back transactions and payouts as necessary for financial, accounting, tax, fraud-prevention, dispute-resolution, and legal purposes. Where appropriate, we reduce the information associated with retained records, such as by removing your name and email address and maintaining the record under an internal identifier.

Your Choices

• Uninstall the extension. You can uninstall the Milabee browser extension at any time through your browser. Once the extension is removed, it will no longer collect information through the extension. Uninstalling the extension does not automatically delete your Milabee account or information that we are permitted or required to retain.
• Delete your account. You may request deletion of your Milabee account and associated personal information by contacting us at privacy@joinmilabee.com. We will delete or de-identify information associated with your account, subject to information we may retain as reasonably necessary or permitted by law, as described in Data Retention.
• Email preferences. You can unsubscribe from marketing emails at any time by using the unsubscribe link provided in those messages or through any email-preference controls we make available. Even if you opt out of marketing communications, we may still send you non-promotional messages relating to your account, cash back, payouts, security, or the Services.
• Website analytics and cookies. You can manage or delete cookies through your browser settings. You may also use Google’s Google Analytics opt-out browser add-on to limit Google Analytics measurement in supported browsers. The Milabee browser extension does not use Google Analytics or advertising measurement tags.

Your Privacy Rights

Depending on where you live, applicable U.S. state privacy laws may provide you with certain rights regarding your personal information. Although these rights vary by state, Milabee extends the following privacy rights to all users in the United States, subject to applicable exceptions and limitations.

• Access and know. You may request information about the personal information we have collected about you, including the categories of personal information we collect, the purposes for which we use it, the categories of sources from which it was collected, the categories of recipients to whom we disclose it, and a copy of personal information associated with you.
• Delete. You may request deletion of personal information associated with you, subject to applicable exceptions and information we are permitted or required to retain, as described in Data Retention.
• Correct. You may request that we correct inaccurate personal information associated with you.
• Opt out of sale or sharing. Milabee does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable privacy laws. Accordingly, Milabee does not currently engage in activities that require an opt-out from sale or sharing.
• Sensitive personal information. Milabee does not use or disclose sensitive personal information for purposes that require a right to limit under the California Consumer Privacy Act.
• Non-discrimination. We will not unlawfully discriminate against you for exercising your applicable privacy rights.

How to exercise your rights. You may submit a privacy request by emailing privacy@joinmilabee.com from the email address associated with your Milabee account. If we cannot reasonably verify your identity based on the information associated with your request, we may ask you to provide additional information reasonably necessary to verify your identity. We use information provided for verification only for verification and related security purposes, except as otherwise permitted by law.

We will respond to verified requests within the time required by applicable law. For requests subject to the CCPA, we generally respond within 45 days and may extend that period when permitted by law, in which case we will notify you.

Where permitted by applicable law, an authorized agent may submit a request on your behalf. We may require appropriate proof that the agent is authorized to act for you and may take reasonable steps to verify your identity directly. If we deny a request and applicable law provides a right to appeal our decision, you may appeal by replying to our response or contacting us at privacy@joinmilabee.com.

Minors

Milabee is intended for individuals who are at least 18 years old, and you must be at least 18 to create a Milabee account or use the Services. We do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without legally valid parental consent, we will take reasonable steps to delete it. If you believe a child has provided personal information to Milabee, please contact us at privacy@joinmilabee.com.

Contact Us

If you have questions about this Privacy Policy, our privacy practices, or would like to exercise your privacy rights, contact us at privacy@joinmilabee.com