Last updated: 7 August 2026

This policy explains what the Soleback browser extension collects, what it
deliberately does not collect, and where your data goes. It covers the
extension only. The Soleback website and account service are covered by the
privacy policy at soleback.com.



The extension needs your account details to credit cashback to you, and it
needs to know which store you are on to offer a cashback rate for it.

It does not send us your browsing history. Detecting whether a website
offers cashback happens entirely inside your browser, by comparing the site
against a list of partner stores stored on your device. That list is
downloaded to you; your browsing is not uploaded to us.




When you create an account or sign in through the extension, your email
address and password are sent to our servers. If you register, we also
collect the username you choose. If you sign in with Discord or Google
instead, we receive your email address and basic profile information from that
provider.

We use this to identify your account and credit cashback to it.


When you activate cashback at a partner store, the extension sends our
redirect service your account identifier and the address of the store page
you activated from. The affiliate network needs this to attribute the
purchase to you; without it, cashback cannot be tracked.

When the extension detects that you are on a partner store, it requests that
store's current cashback rate and voucher codes from our servers. As a result,
we learn which partner stores you visit, though not the individual pages
within them.


Your region, language, currency, and toolbar and notification settings are
stored in your browser and synchronised across browsers where you are signed
into your browser account.



Your browsing history. The extension keeps a local list of partner store
domains and matches the sites you visit against it on your device. Addresses of
sites you visit are never transmitted to us for this purpose. Sites that are
not Soleback partners are never reported to us at all.

Analytics or tracking. The extension contains no analytics, telemetry, or
advertising code of any kind. We do not measure how you use it.

Payment details. The extension displays your balance but never handles card
or bank details. Withdrawals happen on the Soleback website.

Page content. The extension reads a page's address to identify the store.
It does not read, collect, or transmit the content of pages you visit.



Data stored in your browser:

• your signed-in session token
• the cached list of partner stores
• records of which stores you have activated cashback on
• sites where you have dismissed the extension's toolbar
• your preferences

Signing out clears your session and account data from the browser. Removing the
extension deletes all of it.

Data stored on our servers is your account, balance, and transaction
history, as described in the soleback.com privacy policy.

• Cloudflare Turnstile — a bot check shown when signing in or registering.
  Cloudflare receives the information needed to run that check.
• Discord and Google — only if you choose to sign in with them. We receive
  your email address and basic profile from the provider you pick.
• Affiliate networks — when you activate cashback, you are redirected
  through the relevant affiliate network so your purchase can be attributed.
  The network receives the referral according to its own privacy policy.

We do not sell your data, and we do not share it with advertisers.



| Permission | Why it is needed |
|---|---|
| storage | Keeps your session, preferences, and the partner store list on your device |
| tabs | Reads the current tab's address to identify a partner store, and opens store, deal, and account pages you ask for |
| identity | Runs the Discord or Google sign-in window, if you use it |
| alarms | Refreshes the partner store list and your settings periodically |
| offscreen (Chrome) | Loads the affiliate redirect invisibly, so activating cashback does not open a tab in front of you |
| Access to api.soleback.com | The only server the extension communicates with |



If you are in the EU or UK, you can request access to your data, correction of
it, deletion of it, or a copy of it in portable form, and you can object to
processing. Contact us using the details below and we will respond within the
period the law requires.

You can stop all collection at any time by signing out and removing the
extension.



Account and transaction data is retained while your account is open, and after
closure only as long as needed to meet legal and accounting obligations.
Data held in your browser is kept until you sign out, clear it, or remove the
extension.



If this policy changes materially, we will update it here and adjust the date
above. Continuing to use the extension after a change means you accept it.



support@soleback.com
Soleback, soleback.com