Privacy Policy
Last updated: 12 October 2026
Freebin helps you discover referral offers and, if you choose to create an account, save and track rewards. Public AI discovery does not require a Freebin account and does not access your inbox or private claim history.
Public discovery and AI clients
Public discovery requests contain only the search phrase and offer filters or identifiers you provide. Do not send passwords, payment details, identity documents or confidential information in search queries. The live public MCP gateway forwards allowlisted read-only actions to the existing Freebin public API. It cannot read saved rewards, inbox results or personal claim history and cannot submit, claim or change records. Your AI provider receives the information and links returned to it and processes your conversations under its own policies. No OAuth token or Freebin account is required for public discovery.
Account and stored activity
Account sign-in is handled by Base44 and the sign-in provider you choose. Freebin uses account identity, email and role for saved offers, preferences, saved searches, reward records, referral activations, reports and moderation. Submitted referral links and codes may be published following review; do not include private information in public submissions. Reward experience reports can contain your chosen display name, review and reported reward. Evidence attachments are uploaded privately and referenced by a file identifier; authorised review flows can generate temporary signed access links.
Optional Personal Reward Inbox
The signed-in Reward Inbox can connect your own Gmail or Outlook account with your permission. The scanner retrieves sender, subject and date metadata for a selected period to identify possible rewards and match brands. Its optional selected-message analysis retrieves message bodies to extract reward values and expiry dates; it does not download attachments. The scanner returns results to the browser and does not persist raw messages in Freebin entities. Selecting Save persists the email subject as the saved offer title, company details and reward information. Unsaved scan results remain in page memory, not in the offer database. The Finish flow attempts to disconnect provider access; if disconnection fails, revoke access in your provider's settings. The public MCP gateway never accesses these connectors.
Analytics, browser storage and communications
The website records certain button clicks, page paths, offer/company identifiers, device category, authentication state and a per-tab session identifier. It also sends events to Base44 analytics. Browser storage supports sign-in, preferences and session state; the deployed infrastructure may also use cookies. A newsletter signup stores your email, subscription status and source. The contact form opens your own mail app with the details you entered; it does not directly send the message or create a Freebin contact record. Notification subscriptions can store a push endpoint and delivery keys if you enable them.
Gateway security logs
The live gateway uses request metadata for origin checks and records a generated request identifier, method/tool name, response status and elapsed time. Its application logs do not include raw search phrases, tool arguments, offer ids, IP addresses, cookies, access tokens or returned records. Cloudflare and Base44 may process network/request metadata and operational logs under their service policies. Request bodies and results are not cached by the gateway.
Recipients and external links
Base44 supplies hosting, database, authentication, file storage and integrated AI services. If the gateway is deployed on Cloudflare, Cloudflare supplies edge processing and rate limiting. Google and Microsoft process your optional email-account connections. AI assistants receive public responses when you use their connection. Referral companies receive the URL, attribution parameters and usual network/browser information when you follow their links. Sponsored or affiliate links may associate a visit or qualifying transaction with a referrer. These third parties have their own policies. Freebin does not send your private inbox results to the public MCP gateway.
Retention and your choices
Public offer records are maintained for catalogue operations. Account-linked saved rewards, reports, activity and preferences remain stored until removed through an available control or handled by the operator. The application does not currently implement a universal automatic deletion schedule, and infrastructure backups or logs may persist separately. Unsaved inbox scan results are held in page memory; saved results are stored until removed. Disconnect providers, disable notifications and request access, correction, deletion, export or marketing opt-out through the contact page. We do not promise that every request is automated or that deletion removes legally required records or all backup copies immediately.
Rights, children and updates
Depending on your location, you may have rights to access, correct, delete or transfer personal data, restrict or object to processing, withdraw consent, and complain to a relevant regulator. Freebin is not designed for children under 13; individual offers, especially financial offers, may require adulthood and additional eligibility checks. Significant changes will be reflected here with a new update date.
Questions about this policy? Contact us through the contact page.