Privacy policy

Last updated 12 November 2026

affsome is run by September Media OÜ, Sepapaja 6, 15551 Tallinn, Estonia (VAT EE102194377). We are the data controller for the personal data described here. Questions or requests: hello@affsome.com.

You can browse affsome without an account and without giving us any personal data. We don't sell personal data, we don't show ads based on you, and analytics cookies are only set if you accept them.

What we collect and why

• Account (email login). When you log in we store your email address, when you first and last logged in, and the page you signed up from. Login links are single-use and expire after 30 minutes. To stop abuse we store a one-way hash of the requesting IP address with each login request, never the IP itself. Legal basis: providing the service you asked for (GDPR Art. 6(1)(b)); the IP hash is our legitimate interest in preventing abuse (Art. 6(1)(f)).
• Watchlist and alerts. If you watch an offer or save a search, we store which offers and filters you chose and email you from alerts@affsome.com when they change or when new offers match. You can remove them at any time on your watchlist. Legal basis: Art. 6(1)(b).
• Newsletter. If you tick the newsletter box or subscribe, we store your email address and a record of your consent (time and wording) and add you to our list. Opens and clicks are counted anonymously, not per subscriber. Every email has a one-click unsubscribe link. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time by unsubscribing.
• Join and Sign up clicks. When you click a link to a network, we log the network, the offer, where on the page the link was, your country (as reported by Cloudflare) and the referring website. This log has no IP address, cookie or account ID, so it can't identify you. We use it to see which pages are useful.
• Visit statistics (Google Analytics). Only if you click “Accept” in the cookie banner, Google Analytics 4 records the pages you view, how you arrived (search, link, campaign), your approximate location, device and browser, under a random ID stored in a cookie. Google does not store your full IP address. Google signals and ad personalisation are switched off, and statistics are deleted after 14 months. We use them to improve affsome and to show advertisers how many people visit, only ever as totals. Legal basis: your consent (Art. 6(1)(a)); change it any time under “Cookie settings” at the bottom of every page.
• Emails you send us. If you write to us, we keep the conversation so we can reply and follow up. Legal basis: Art. 6(1)(f).
• Technical data. Like every website, our host Cloudflare processes your IP address and browser details to deliver pages and block attacks. Technical request logs are kept for up to 7 days for troubleshooting. Legal basis: Art. 6(1)(f).

Cookies and local storage

Login cookies are strictly necessary and always on. Analytics cookies are set only after you accept them in the cookie banner; “Reject” works just as well as “Accept”, and you can change your choice under “Cookie settings” at the bottom of every page.

• as_sess: your login session (HttpOnly, 90 days or until you log out).
• as_li: contains only “1”, so the page header can show “Log out” (90 days).
• as_consent: remembers your cookie choice (6 months).
• _ga, _ga_*: Google Analytics visitor ID, only with your consent (13 months).
• affsome-theme (local storage, not a cookie): remembers light or dark mode if you switch it. It never leaves your browser.

Fonts and scripts are served from our own domain. The only third-party request is Google Analytics, and only after you accept it.

How long we keep it

• Account, watchlist and saved searches: until you ask us to delete your account.
• Login requests (email and IP hash): 30 days.
• Login sessions: until they expire (90 days) or you log out.
• Newsletter: until you unsubscribe. After that we keep your address on a do-not-email list so we never mail you again by mistake, together with the consent record as proof.
• Emails to us: as long as needed to handle your request, then up to 3 years.

Who processes data for us

• Cloudflare, Inc.: hosting, database, security, and login and alert emails.
• Amazon Web Services (Amazon SES): newsletter delivery.
• FastComet: hosts our newsletter software (Sendy) on a server in Frankfurt, Germany.
• Google: Google Workspace (our mailboxes, for emails you send us) and Google Analytics (visit statistics, with your consent).

Cloudflare, Amazon and Google are US companies. Transfers to them rely on the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. We share nothing with the affiliate networks listed on the site. When you click through to a network, its own privacy policy applies to what happens there.

Your rights

You can ask us to show you, correct, export or delete your data, to limit how we use it, or to stop using it based on legitimate interest. You can withdraw newsletter consent at any time. Email hello@affsome.com from the address you use with affsome and we'll reply within one month. We don't make automated decisions about you.

If you think we handle your data wrongly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the data protection authority where you live.

Children

affsome is a tool for affiliate marketers and is not meant for anyone under 18. We don't knowingly collect data from children.

Changes

If we change this policy, we update the date at the top. Important changes are also announced in the newsletter.