Privacy, plainly.

What is stored

AutoRebate preferences and operator transaction recovery records are stored in this browser using local storage. Recovery records can include public wallet addresses, token amounts, transaction hashes, and the non-personal settlement reference you enter. Pending records are removed after verification; the verified deployment record remains. No sample purchase history is shown. The app does not collect card numbers, bank credentials, seed phrases, or private keys.

A connected wallet address is used to request publicly available balances and reward event logs. The app’s portfolio endpoint forwards that address to the configured Robinhood RPC provider. Wallet addresses and onchain activity are public blockchain data.

Connected services

Privy handles sign-in, connected-wallet state, and its own authentication storage. The wallet-only sign-in flow sends your wallet address to Privy. Read Privy’s privacy policy before signing in.

The application server fetches asset metadata and quotes from Robinhood’s public APIs. Fonts and the generated hero image are served as local site assets. Your hosting provider may retain normal server access logs. No custom advertising or analytics trackers are included in this build.

Authentication providers and wallet extensions can use their own cookies or local storage. Rebate does not claim that third-party sign-in is cookie-free.

Your control

Sign out using the wallet button. Reset device preferences in Settings or clear this site’s browser storage. Disconnect the site in your wallet to remove its connection. Clearing local storage cannot remove public blockchain records. Do not clear pending transaction recovery records until you have checked wallet activity; doing so removes the browser’s duplicate-request guard.

This is a draft product privacy notice. An operator identity, contact channel, retention policy, and any merchant-provider processing must be added before a consumer launch.