Privacy Policy

Last updated: 6 May 2026

1. Who We Are

EarnXtra (“we”, “us”, “our”) operates the website at https://earnxtra.co.uk. We are the data controller for personal data collected via this website.

2. What Data We Collect

We collect the following categories of personal data:

  • Usage data: Pages visited, time on site, browser type, approximate location (country/region) — collected via analytics cookies with your consent.
  • Account data (Phase 3+): Email address, display name, password (hashed), and profit tracking entries you add manually.
  • Payment data (Phase 5+): Billing details are processed by Stripe. We do not store card numbers.
  • Referral data (Phase 6+): Referral codes set via query parameters are stored in a first-party cookie for up to 30 days.

3. How We Use Your Data

  • To provide the service (account functionality, profit tracking)
  • To send transactional emails (registration, password reset)
  • To analyse and improve the website (analytics — only with consent)
  • To calculate affiliate commissions (referral tracking)

We do not sell or share your personal data with third parties for marketing purposes.

4. Legal Basis (UK GDPR)

  • Contract: Processing your account data to provide the service
  • Consent: Analytics and non-essential cookies
  • Legitimate interests: Fraud prevention, platform security

5. Cookies

We use cookies for essential site functionality and, with your consent, for analytics. You can manage your cookie preferences at any time via the cookie settings link in the footer. See our cookie consent banner for full details.

6. Your Rights

Under UK GDPR you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing
  • Data portability

To exercise any of these rights, contact us at the email address below.

7. Data Retention

We retain account data for as long as your account is active. Profit entries and offer completions are retained until you delete your account. Analytics data is retained in aggregated, anonymised form.

8. Third-Party Services

  • Supabase — database and authentication (EU data residency)
  • Vercel — hosting
  • Stripe (Phase 5+) — payment processing
  • Resend (Phase 3+) — transactional email

9. Contact

For any privacy-related questions or data subject requests, please contact us at: privacy@earnxtra.co.uk

You also have the right to lodge a complaint with the ICO: ico.org.uk