Privacy

Last updated 26 October 2026

Short version: you can use this whole directory without an account, and we run no analytics and no advertising on it. If you do sign in, we store your Google account identifier, your email address and the listings you have claimed. Nothing else.

Who is responsible

LinkedAffiliate is run by Louis Vanhove, working as a sole trader in Belgium. That makes me the data controller for everything described here. You can reach me at louisvh.dev@gmail.com, and a person rather than a ticket queue will answer.

What we store, and why

Company and program listings

The directory itself is built from affiliate pages that companies publish on their own websites: commission rates, cookie windows, payout terms, which network runs the program, plus the page we read it from and the time we read it. That is business information about a commercial offer, not personal data about you.

It can still end up holding a person's name, because plenty of affiliate programs are run by one person under their own name. If your name or contact details show up in a listing and you would rather they did not, email me and I will take them out. You do not have to explain why, and you do not have to be the company to ask. How our crawler works covers the collection side of this in more detail.

Your account, if you sign in

Signing in happens through Google, and we ask Google for the least it will give us. We store four things: the stable account identifier Google calls a subject identifier, your email address, whether Google says that address is verified, and the times your account was created and last used.

We never receive your Google password. We do not ask for access to your Gmail, Drive, Contacts or Calendar, we do not store your name or profile picture, and we do not read anything else in your Google account. The account is keyed on that subject identifier rather than on your email address, which is a deliberate safety choice: a work address can be closed and handed to a new colleague, and keying on it would let that person inherit your claimed listings.

Claiming a listing

When you claim a company listing we store which listing it was, which account claimed it, how you proved you run the domain (an email address at that domain, a DNS record, or a manual check when neither works), whatever evidence that check produced, and whether the claim was accepted, is still pending, or was turned down and for what reason.

We keep that record for as long as the claim stands, because it is the only answer to "who changed this figure, and what gave them the right to". If someone ever disputes your listing, that record is what protects it.

Cookies

There is no cookie banner on this site because there is nothing on it to consent to. We set no analytics cookies, no advertising cookies and no third-party trackers. The only cookies we set are the ones sign-in cannot work without:

• la_session, which keeps you signed in for 30 days. It holds your account identifier and, for Google Workspace accounts, your email address and domain as proof usable for one hour when claiming a listing. Your browser will not hand it to JavaScript or send it over plain HTTP.
• Three short-lived cookies during the sign-in handshake itself, which exist to prove that the sign-in finishing in your browser is the one that started there. They are deleted the moment you land back on the site.

Sign out and the session cookie is gone. Never sign in and none of them are ever set.

What we rely on legally

Under the GDPR, your account and your claims are processed to perform the agreement you entered when you asked for an account and asked to manage a listing. The directory listings themselves rest on legitimate interests: publishing factual, sourced terms of publicly advertised commercial offers, which is the whole point of the site. Keeping the claim flow from being abused rests on the same basis.

We do not profile you, there is no automated decision-making with a legal effect, and we do not sell or rent anything to anyone. Ever, not just today.

Who else touches it

Three suppliers, each doing one job, each under a data processing agreement:

• Neon hosts the database the accounts and claims live in.
• Cloudflare runs and serves the site, so every request passes through them.
• Google handles sign-in. What Google does with your Google account is covered by Google's own privacy policy, not this one.

Some of that processing happens outside the European Economic Area. Where it does, it is covered by the European Commission's standard contractual clauses. Nobody else gets your data, and the only thing that would change that is a legal obligation I cannot refuse.

How long we keep it

Your account lasts until you ask for it to go, and then it goes, along with the claims attached to it. Listings that a deleted account had claimed go back to being ordinary scraped listings rather than disappearing, because the company they describe still exists. Ask me to delete your account and it is done by hand, usually the same day.

Your rights

You can ask for a copy of what we hold about you, have it corrected, have it deleted, have it exported, have our use of it restricted, or object to it altogether. One email to louisvh.dev@gmail.com is enough. No form, and no proof of identity beyond replying from the address on the account. I will answer within a month, and in practice much sooner.

If you think I have handled it badly, you can complain to the Belgian data protection authority, the Gegevensbeschermingsautoriteit, Drukpersstraat 35, 1000 Brussels (gegevensbeschermingsautoriteit.be). You are also free to complain to the authority where you live.

If this page changes

The date at the top moves when the substance does. If a change actually affects what happens to your data and you have an account, you get an email about it rather than a quietly edited page.

See also our terms of service.