Legal
Privacy Policy
Last updated July 22, 2026
How we collect, use, share, and safeguard the personal data of Dune Sale partners. Each section has a plain-English summary followed by the full legal text.
Section 01
What we collect
In plain English
Email, name, tax ID, address, payment details. Click and conversion data. Some browser and device info. That's it — no invasive tracking.
The categories of personal data we collect are:
- Identity data: legal name, email, country, age confirmation.
- Financial data: tax identification, addresses, bank/crypto/gift card recipient details.
- Traffic-source data: URLs, channel handles, follower counts you provide.
- Attribution data: clicks, conversions, IP address, user-agent, referrer URL of visitors sent through your links.
- Device data: browser, operating system, language.
Section 02
Why we collect it
In plain English
To run the network: pay you correctly, prevent fraud, meet tax obligations, support you when things go wrong.
We process the above categories for the following purposes:
- Providing the service — account management, tracking, payouts.
- Compliance — anti-money-laundering, sanctions, tax reporting.
- Security — fraud detection, duplicate account prevention.
- Support — resolving your questions and disputes.
- Improving the platform — aggregate analytics, no individual profiling for advertising.
Section 03
Legal basis (GDPR)
In plain English
Contract to provide the service, legal obligations for tax and compliance, and legitimate interests for fraud prevention.
Under Article 6 of the GDPR, our lawful bases are (a) performance of the contract with you (partner registration through payment); (b) compliance with legal obligations to which we are subject (tax reporting, anti-money-laundering laws); and (c) our legitimate interest in preventing fraud and maintaining platform security, balanced against your rights under Article 6(1)(f).
Section 05
How long we keep it
In plain English
Financial records: 7 years (tax law). Attribution data: 5 years. Support tickets: 3 years. Delete-on-request for everything else.
We retain identity and financial records for seven (7) years after account closure to satisfy tax and accounting laws. Attribution data is retained for five (5) years to facilitate chargebacks and audits by upstream networks. Support communications are retained for three (3) years. All other personal data may be deleted upon request as soon as any pending payout obligations have been settled.
Section 06
Your rights
In plain English
Access, correction, deletion, portability, restriction, objection. Email privacy@dunesale.com. We reply within 30 days.
Depending on where you reside, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of data not required by law
- Receive your data in a portable format
- Restrict or object to certain processing
- Withdraw consent where processing is based on consent
To exercise any of these rights, email privacy@dunesale.com. We will respond within thirty (30) days.
Section 07
Children
In plain English
Under 18? You can't use Dune Sale. If we find out, we close the account.
Dune Sale is not directed to children under 18. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected such data, we will delete it and close the associated account.
Section 08
Changes to this policy
In plain English
We update this doc when we change practices. Material changes get emailed to you.
We may update this policy from time to time. Material changes will be notified to you by email at least thirty (30) days before taking effect. Continued use of Dune Sale after that date constitutes acceptance of the updated policy.