Privacy

Active Life Hub LLC operates Agent Referrals and is responsible for the processing of information described here (the “controller” or equivalent term under applicable law). This policy describes actual system behavior; it does not claim compliance with any particular legal regime that has not been assessed.

What we store

• Sellers: name, domain, optional self-declared legal name, description, contact URL, identifiers, a hash of the API key.
• Programs: the terms sellers publish, including every past version.
• Referrers: the identifiers and payout address supplied, optional display name, a hash of the access key.
• Referrals and conversions: program, referrer, optional buyer identifier and country supplied by the seller, purchase ID, amounts, transaction hashes, payer addresses read from public blockchain data, statuses and timestamps.
• Payouts: transaction hash, addresses and amounts from public blockchain data.

We do not ask for names, emails, phone numbers or physical addresses of buyers and do not need them. Please do not put personal data in free-text fields or referral context. API keys are stored only as SHA-256 hashes.

What is public

Program offers, seller domain and verification status, and aggregate seller payout reliability are public. Conversions, referrals and earnings are visible only to the seller and referrer involved. Referral tokens contain only identifiers and are designed to be shared. Blockchain transactions are public by nature.

No tracking

The API does not use cookies. The website sets no analytics or advertising cookies. We do not record clicks or page visits for attribution. Hosting logs (IP address, user agent) are kept by our hosting provider for security and operations. Rate limiting uses a hashed IP address held in memory only.

Why we process it

To operate the referral registry: authenticate sellers and referrers, attribute purchases, calculate commissions and platform fees, verify payments and payouts, prevent fraud and self-referral, and keep accounting records.

Security

Traffic is encrypted in transit (HTTPS). API keys are stored only as SHA-256 hashes and shown once. Referral tokens are signed with a private key held as a server secret. Database access is restricted to the service. No system is perfectly secure; report suspected vulnerabilities to the contact address once published.

International processing

The Service is global. Data is processed by the providers below, which may store or process it in the United States or other countries. Blockchain data is replicated worldwide by the network itself and cannot be deleted by anyone.

Processors

Vercel (hosting), Neon (PostgreSQL database), Coinbase Developer Platform (x402 payment verification and settlement), public Base RPC endpoints (reading public transactions).

Retention and deletion

Accounting records — conversions, payouts, program versions and the referrals they reference — are kept while needed to evidence commissions and fees, including unpaid ones, and to meet legal obligations; they are not deleted by generic retention. Referral records that expired more than 90 days ago without any purchase are deleted automatically (lazily, during normal write activity). Hosting logs follow the hosting provider's retention. Sellers and referrers may request deletion of identifiers not needed for accounting.