Privacy Policy

SplitChamp ("SplitChamp," "we," "us") provides revenue-sharing infrastructure: merchants ("Merchants") use our service to give partners ("Champs") shareable links, track the visits and sales those links produce, and calculate the commissions owed. This policy explains what information we handle, why, and the choices you have. It applies to splitchamp.com, our dashboards, our API, and the tracking we perform on behalf of Merchants.

Our two roles

As a controller, we decide how data is used for our own operations: Champ and Merchant accounts, our websites, and our emails to you.

As a processor, we handle data on behalf of Merchants who integrate our API — including information about their buyers and site visitors. The Merchant decides why that data is collected; we process it only to provide the service. If you are a buyer or visitor on a Merchant's site, that Merchant is your primary point of contact for privacy questions, and their privacy policy also applies.

Information we collect

Champs (partners)

• Display name and chosen link name (slug)
• Email address, used for sale notifications and passwordless sign-in
• Payout details you later provide (for example, a PayPal email address)
• Your link's performance: visits, unique visitors, sales, and commission amounts

Merchants (account owners)

• Account name and owner email address
• API credentials (we store only a cryptographic hash of your API key, never the key itself)

Visitors who click a partner link

• Time of the visit, IP address, browser user-agent string, and referring page
• A randomly generated visitor identifier, stored in a first-party cookie on the Merchant's own site — see "Cookies" below

Buyers (on behalf of the Merchant)

• Name and email address, as provided to the Merchant at purchase
• Product purchased, amount paid, currency, payment provider, and payment reference

We do not collect or store card numbers, bank details, or other payment credentials. Payments are processed entirely by the Merchant and its payment providers.

Cookies

• Attribution cookie (set on the Merchant's site, e.g. sc_attr): a signed, opaque token identifying which partner link a visitor arrived through, a random visitor id, and the click. It expires after 30 days, is not readable by other sites, and is not used for advertising or cross-site tracking. Its purpose is one thing only: crediting the right Champ if a purchase happens.
• Session cookies (on splitchamp.com): keep Champs and Merchants signed in to their dashboards. Deleted on sign-out; expire after 30 days.

We use no advertising cookies, no third-party analytics cookies, and we do not sell or share personal information for advertising.

How we use information

• Attributing visits and sales to the correct partner link and calculating commissions
• Showing Champs and Merchants their own dashboards and statistics
• Sending transactional email: sign-in links and sale notifications
• Filtering automated/bot traffic out of partner statistics
• Securing the service, preventing fraud (such as fake clicks or self-dealing), and debugging
• Complying with legal obligations, including financial record-keeping

Where the GDPR or similar laws apply, our legal bases are: performance of a contract (providing the service you signed up for), legitimate interests (security, fraud prevention, accurate commission accounting), and legal obligation (records of amounts owed and paid).

Who we share it with

We share personal information only with the parties needed to run the service:

• The Merchant and their Champs, with each other: a Merchant can see their Champs' statistics and buyer details for attributed sales; a Champ can see their own statistics and, where the Merchant enables it, the buyer name and email for their attributed sales.
• Infrastructure providers: Cloudflare (hosting and network), Amazon Web Services (email delivery), and our database hosting provider. Each processes data only to provide their service to us.
• Authorities, if required by law, or in connection with a merger or sale of the business (with notice).

We do not sell personal information, and we have not sold it in the preceding 12 months.

International transfers

We are based in the United States and process data there, with content delivery through Cloudflare's global network. If you are in the EEA, UK, or Switzerland, your information is transferred to the US; we rely on standard contractual protections with our providers for those transfers.

Retention

• Click and visit records: kept while the Merchant's account is active, so historical statistics stay accurate
• Sale and commission records: kept as financial records for as long as legally required
• Sign-in tokens: expire within 15 minutes and are single-use
• Account data: deleted or anonymized within a reasonable period after account closure, except records we must keep by law

Your rights

Depending on where you live (including the EEA/UK under GDPR and California under CCPA/CPRA), you may have rights to access, correct, delete, or export your personal information, to object to or restrict certain processing, and to not be discriminated against for exercising these rights.

To exercise them, email john@temeculadsp.com. If your data reached us through a Merchant's site (you're a buyer or visitor), we may direct your request to that Merchant or ask them to confirm it, since they control that data. EEA/UK residents may also lodge a complaint with their local supervisory authority.

Security

Attribution tokens and session cookies are cryptographically signed; API keys and sign-in tokens are stored only as hashes; connections are encrypted in transit. No system is perfectly secure, but we design so that a leaked database alone cannot be used to impersonate accounts or forge attribution.

Children

The service is not directed to children under 16, and we do not knowingly collect their data.

Changes

We'll post any changes here and update the date above. For material changes, we'll notify account holders by email.

Contact

SplitChamp · john@temeculadsp.com