Privacy Policy

1. Who we are

Rebatify (www.rebatify.net) is an aggregator of crypto-exchange sign-up offers and trading-fee cashback. We operate the site, the related Telegram channel @rebatify, the Discord server, and the YouTube channel @rebatify_global. This policy explains what personal information we collect when you visit the site, sign in, or register an exchange UID with us, and how we use it.

2. What we collect

a. Telegram sign-in (membership)

If you sign in with the “Login with Telegram” widget on our site, Telegram sends us the following fields from your Telegram account:

• Telegram user ID (numeric)
• First name, last name (whatever you have set on Telegram)
• Username (e.g. @yourhandle), if present
• Profile photo URL, if your Telegram privacy settings allow
• An authentication hash + timestamp Telegram signs to prove the data is genuine

We do not receive your Telegram phone number, contact list, or message history.

b. Discord linking (optional)

If you link your Discord account so we can grant you the “Rebatify Member” role on our Discord server, we receive your Discord user ID and username through Discord OAuth. We use these fields only to assign the role; we do not read your Discord messages.

c. Exchange UID registration

When you register the UID (account ID) you opened on a partner exchange under our referral, we store: your Telegram user ID, the exchange name, the UID string you submitted, and the time of submission. We use this only to confirm your sign-up qualifies you for the cashback / sign-up bonus published on that exchange’s card.

d. Session cookies

After a successful Telegram sign-in we issue a JSON Web Token (JWT) stored in an HttpOnly cookie so you stay signed in across page loads. The cookie contains only your Telegram user ID and an expiry. It is not shared with third parties and is removed when you sign out or the token expires.

e. Anonymous click analytics

Outbound clicks on exchange cards (referral links) fire an anonymous beacon to our own server so we can show aggregate totals (e.g. “most-clicked exchange this week”) and tune the homepage ordering. The beacon contains the click target, the page path, and nothing personally identifying — no Telegram ID, no cookie value. We do not use Google Analytics or any third-party analytics tag.

f. Standard server logs

Our web server records routine request metadata (IP address, user agent, requested path, timestamp) for security and debugging. These logs are kept for up to 30 days and are not cross-referenced with member accounts.

3. How we use it

• To run the membership feature (issue your session, grant the Discord role, deliver admin DM / broadcast).
• To verify your exchange sign-up so the published cashback / bonus reaches you.
• To improve which deals get the most prominent placement on the homepage (aggregate click totals only).
• To respond to support questions you send us through Telegram DM.

4. What we don't do

• We do not sell, rent, or trade your personal information.
• We do not embed third-party tracking pixels, ad networks, or cross-site analytics tags.
• We do not share your Telegram ID with the exchanges; the exchange only sees the UID you registered with them, attributed to our referral code.

5. Where data lives

All member data (Telegram profile fields, Discord link, exchange UID records) is stored in our PostgreSQL database running on a server we control. Backups stay encrypted at rest. Access is restricted to the site operator and the automated scripts that run on the same host.

6. Third-party services we rely on

Some features depend on services run by other companies. Information shared with them is limited to what the feature needs:

• Telegram — authentication widget, channel hosting, admin DMs.
• Discord — OAuth for the optional role grant.
• YouTube (Google) — we publish Shorts to our own channel via the YouTube Data API. Viewers’ data is governed by Google’s Privacy Policy; we do not receive viewer-identifying data from YouTube.
• Partner exchanges (Binance, Bybit, OKX, Bitget, etc.) — clicking through to an exchange sends you to their site under our referral code. Their privacy policy governs anything you do there.

7. Your rights

You can ask us to do any of the following. The fastest path is a Telegram DM to @nakohkimz.

• See what we have on file linked to your Telegram ID.
• Correct a wrong UID or update your Discord link.
• Delete your account — we remove your Telegram profile row, your Discord link, and your registered UIDs. Aggregate click totals stay because they are not tied to your identity.
• Unlink Discord without deleting the rest of your account.

8. Children

Rebatify is intended for adults using crypto exchanges that themselves require users to be of legal age in their jurisdiction. We do not knowingly collect information from anyone under 18.

9. Changes

If we make a material change to this policy we’ll update the “Last updated” date above and, when the change affects member data, post a note in the Telegram event channel.

10. Contact

Questions, deletion requests, or anything else — reach the site operator at @nakohkimz on Telegram.