Who we are
ReturnFee runs returnfee.com. This page covers the website and your member account. For any question or request about your data, write to [email protected].
What we collect and why
Email address. To sign you in and tell members apart. Your sign-in link is sent to it.
Sign-in link. A random, one-use link that works for 15 minutes. We store only a scrambled (hashed) copy.
18+ confirmation. When you confirm you are 18 or older, we store your email, the time, your IP address and the version of the terms shown. Only the first confirmation per email address is stored.
Exchange UIDs. The exchange, the UID, whether it checked out, when it was checked and, if the exchange tells us, when the account joined. If two members claim the same UID, we record a note of it to sort out.
Payback entries. The exchange, UID, date and amount for the UIDs you linked. They show in your dashboard.
Sign-in and linking activity. To stop repeated attempts, we count requests by email address, member account and IP address.
Promoter interest form. If you fill in the form on our OKX sub-affiliate page, we receive your email address and channel, to contact you about promoting ReturnFee.
Exchange clicks. When you click through to an exchange, we log the time, the exchange, the page and the language. No IP address, cookie or browser details, so this cannot point to you.
Server logs. The usual request lines: time, connecting address, path and status. Login tokens, codes and email addresses in a URL are masked.
Binance payout address. The payout address you give for Binance payouts, and the code we email you to confirm a change. Setting or changing it stores your IP address and browser details.
The site does not ask for your exchange password or API keys.
Cookies and browser storage
__Host-rf_session is your sign-in. It lasts 30 days or until you sign out, and page scripts cannot read it. Our server holds only a hashed copy of it.
rf_lang remembers the language you picked. It lasts one year.
rf_next (local storage) holds a page path and a timestamp so the admin sign-in can send you back to the page you came from. It is removed after sign-in, or after 30 minutes.
rf_notice (local storage) remembers that you closed the cookie notice. It has no expiry: it stays until you clear your browser storage.
We set no advertising or analytics cookies. Visits are counted with Cloudflare Web Analytics, which works without cookies. Apart from that, scripts and fonts come from our own site. We save the route you first arrived through (the utm tags in the link) in your browser, not in a cookie, and also send it to our server to count which channels sign-ups come from.
Who we share data with
Formspree receives what you submit in the promoter interest form.
Resend sends the sign-in and address-change emails, so it receives your email address, sign-in link, confirm code and new address.
Cloudflare sits in front of the site and sees every request. Its edge analytics counts visits by page, browser type and country.
Oracle Cloud hosts the server and the database.
The exchanges (OKX, Bitget, MEXC, Binance): see the next section.
Our server and database are in Oracle Cloud's Dubai region (UAE). Cloudflare, Resend and Formspree may handle data in other countries.
Exchanges and UIDs
When you link a UID, we check it against the exchange's affiliate reporting for ReturnFee's own invite codes, to confirm you signed up through us. We do not send your email address for this. For Binance, the check uses the referral list we read about every 10 minutes.
The exchange's affiliate API also gives us the figure it reports for your UID, which is how a payback is worked out. Your account at the exchange stays under the exchange's own privacy terms.
How long we hold it
Sign-in links work for 15 minutes.
A session lasts 30 days, or ends when you sign out.
Sign-in and linking activity records are removed roughly 24 hours later.
Server logs, including web access logs that record IP addresses, are rotated automatically and stored for up to about 15 days.
Your email, 18+ confirmation, UID links (including rejected link attempts, which are removed only when another member's verified claim for that UID replaces them), payback entries, your Binance payout address (with its change history) and promoter interest form details are not deleted automatically. A record of each sign-in link request (email address and times) and of past sessions is not deleted automatically either, including for addresses that never finished signing in. They stay until you ask us to delete them.
Your choices
To see what we hold, correct it or have it deleted, write to [email protected] from the email address you signed in with. We handle these requests by hand and tell you what we deleted and what we could not delete. A few records are append-only on purpose and cannot be deleted, such as the history of which member held which exchange UID and each Binance address change.
You can sign out any time from your dashboard, which ends your session.
Security
The site runs over HTTPS only. Sign-in links are single-use and stored hashed. The session cookie is hidden from page scripts. Sign-in and UID linking have request limits. The login service runs under an account with no shell, and only a small number of people who run ReturnFee can open the member admin view.
Age
ReturnFee is only for people aged 18 or older, and sign-up asks you to confirm it. See the terms.
Changes
If this page changes, we update it and the date at the top.