Privacy Policy

Last updated October 22, 2026

This policy explains what information Voubox collects, why we collect it, who can see it, and the choices you have. We’ve tried to write it plainly. If anything is unclear, ask us.

1. Who we are

voubox.com is a service where brands offer discount codes and collaborations to creators, and creators share those codes with their followers. Voubox is an independent project, not a registered company, and is currently free. “Voubox”, “we” and “us” mean the people who run it. If Voubox becomes a company, we’ll update this policy with its details.

2. What we collect

If you have an account (brands and creators)

  • Account details: your email address, the role you chose (brand or creator), your name or brand name, your @handle, and optionally a bio, photo or logo, website, social links and store links.
  • Creator applications: where your biggest audience is and your handle or profile link there, so we can review your application.
  • Affiliate details (creators, optional): your Amazon Associates tracking ID and any product links you set for a deal.
  • Payment details (creators, optional): your PayPal email or bank details, if you add them to send invoices for collabs. Voubox doesn’t process payments.
  • What you do on Voubox: deals you create or reserve, collabs you post, apply to or join, messages you send in a collab workspace, invoices, invitations, and your notification settings.

If you get a code from a creator’s page (followers)

  • You don’t need an account. We record which code was given out, and when.
  • To stop one person taking many codes from a “one per customer” deal, we store a random device ID in a cookie and a one-way hash of your IP address, not the address itself.
  • If you choose Email me voucher, we store your email address to send you the code. If you also tick the box to share your email with the brand, we store that choice too.

Everyone

  • Reports you send through Report a problem, including an email address if you give one.
  • Usage counts: we count page views, opens and clips for each deal and creator, as daily totals.
  • Technical data: like any website, our hosting provider processes your IP address, browser type and the pages you request, to deliver the site and protect it from abuse.

We don’t buy data about you, and we don’t use third-party advertising or analytics trackers.

3. How we use it

  • To run Voubox: sign you in, show your page, give out codes, connect brands and creators, and deliver messages and notifications.
  • To send emails you need, such as sign-in links, codes you asked for, invoices, and the notifications you’ve turned on in Settings.
  • To review creator applications and keep Voubox safe: stopping abuse, spam and fraud, and enforcing our terms.
  • To show brands and creators how their deals perform.
  • To help you when you contact us. Our support team can view Voubox as you see it, to investigate a problem.

Where the law requires a legal basis, we rely on performing our contract with you, our legitimate interest in running and protecting the service, your consent (for example, sharing your email with a brand), and legal obligations.

4. Who can see what

  • Public pages: a creator’s page shows their name, handle, photo, bio, social links and the deals they share. A brand’s page shows its name, handle, logo, about text, website, stores, live deals and open collabs. A brand’s page never shows which creators share its deals.
  • Brands see the handle, name, photo and audience of creators who reserve their deals or apply to their collabs, and how those deals perform. Brands never see a creator’s email address. A brand sees a creator’s payment details only on an invoice the creator sends them.
  • Creators see the brand details shown on deals and collabs.
  • Followers’ emails are shared with a brand only when the follower ticks the box to share them.
  • Collab messages are visible to the brand and creator in that collab, and to Voubox support when needed.
  • We may disclose information if the law requires it, to protect people’s safety or our rights, or if Voubox is transferred to a company set up to run it or to a new operator (we’d tell you first, and this policy would keep applying to your information).

We don’t sell your personal information, and we don’t share it for cross-context behavioural advertising.

5. Service providers

We use a small number of providers who process data on our behalf, under contracts that limit what they can do with it:

  • Cloudflare hosts Voubox, stores its database and images, and protects forms with Turnstile (a privacy-friendly check that you’re not a bot).
  • Amazon Web Services (Amazon SES) sends our emails.

Links to stores and products, such as Amazon, take you to those sites, which have their own privacy policies.

6. Cookies

We only use cookies Voubox needs to work:

  • vb_session keeps you signed in.
  • vb_device is a random ID used to give the same code back to the same device and to enforce “one per customer” deals. It lasts up to 400 days.
  • vb_invite remembers an invitation link you followed, for up to 30 days, so the connection is made when you sign up.

Cloudflare may also set cookies needed for security, such as for Turnstile. We don’t use advertising cookies.

7. How long we keep it

  • Account information is kept while your account is open. If you ask us to delete your account, we delete or anonymise your personal information within 30 days, except what we must keep for legal, tax or security reasons, or to settle disputes.
  • Sign-in links expire after a short time and are deleted after a day. Expired sessions are deleted automatically.
  • Read notifications are deleted after 90 days.
  • Records of codes given out are kept so brands can reconcile them and so “one per customer” works. They are kept while the deal’s brand account is open.

8. Your choices and rights

  • You can change most of your information, and your notification settings, in Settings.
  • You can ask us for a copy of your information, or to correct or delete it, by emailing hello@voubox.com from the address you use on Voubox.
  • Depending on where you live (for example, the EU, UK or California), you may have further rights, such as to object to or restrict some processing, to data portability, and to complain to your local data protection authority. We won’t treat you differently for using them.

9. Security

Voubox has no passwords to steal: you sign in with a one-time email link. Sessions and sign-in links are stored only as hashes, connections are encrypted with HTTPS, and IP addresses used for abuse checks are hashed. No system is perfectly secure, so please tell us at once if you think your account has been misused.

10. Children

Accounts are for people aged 18 or over. Voubox isn’t directed at children under 13, and we don’t knowingly collect their personal information. If you think a child has given us information, contact us and we’ll delete it.

11. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for these transfers.

12. Changes

If we change this policy, we’ll update the date at the top. If the change is significant, we’ll also tell account holders by email or on the site before it takes effect.

13. Contact

Questions or requests about privacy: hello@voubox.com.