This Cookie Policy explains how FXRebate uses cookies, local storage, pixels, tags, software development kits, web beacons, link-tracking technologies, device identifiers and similar technologies in connection with the FXRebate websites, client area, Affiliate Portal, online forms, communications and related Services.

This Policy applies to visitors, registered Users, corporate representatives, Affiliates and other persons who interact with the Services through a browser, device, application, email or embedded third-party service.

It explains the categories of technologies used, their purposes, when consent is requested, how preferences can be changed and where the current technology register can be found.

The definitive list of active cookies and similar technologies should be displayed through the FXRebate Cookie Settings panel. Appendix A is a drafting register and must be validated against the production environment before publication.

FXRebate is a trademark and trading brand owned by Financial Trading Art SRL.

The FXRebate platform is operated within the Financial Trading Art group by:

The entity identified as the controller in the FXRebate Privacy Policy is responsible for the processing of personal data collected through cookies and similar technologies. The two entities may act as separate controllers, joint controllers or controller and processor depending on the relevant operation.

This Cookie Policy forms part of, and should be read together with, the FXRebate Privacy Policy, Terms of Service, Affiliate Terms of Service and any Partner-specific or Promotion-specific notice.

The Privacy Policy explains the broader processing of personal data, including legal bases, recipients, international transfers, retention periods, security and privacy rights.

Where this Cookie Policy conflicts with a specific consent choice shown in the current Cookie Settings panel, the most recent valid preference selected by the User will govern the activation of optional technologies.

A cookie is a small text file placed on, or read from, a computer, mobile device or other terminal equipment when a website or online service is used.

Cookies may be:

• first-party cookies, set by FXRebate on the domain being visited;
• third-party cookies, set or accessed by an external provider;
• session cookies, which generally expire when the browser session ends;
• persistent cookies, which remain until their stated expiry date or deletion by the User.

Similar technologies may perform related functions without using a traditional cookie. These include HTML local or session storage, pixels, tags, web beacons, embedded scripts, mobile or web SDKs, link decoration, URL parameters, server-side identifiers, browser cache, device identifiers and device-fingerprinting techniques.

These technologies may store information on a device, access information already stored on a device, or transmit interaction data to FXRebate or another provider.

For Users in the European Economic Area, cookies and similar technologies are governed by Article 5(3) of Directive 2002/58/EC on privacy and electronic communications, as implemented in the relevant Member State, together with Regulation (EU) 2016/679 (GDPR). In Romania, relevant national rules include Law no. 506/2004 on privacy and personal-data processing in electronic communications.

The same rule can apply to technologies other than traditional cookies, including pixels, local storage, tracking links and certain device-fingerprinting operations.

Where the law requires it, FXRebate will obtain prior consent before storing information on or accessing information from a User's device, unless the technology is strictly necessary to transmit a communication or provide an online service expressly requested by the User.

The strictly necessary exemption is interpreted narrowly. A technology is not treated as necessary merely because it is commercially useful, improves analytics, supports advertising or assists attribution.

Valid consent is not inferred from silence, inactivity, scrolling, continued browsing, pre-selected settings or a browser's default acceptance of cookies. Consent must be capable of being withdrawn as easily as it is given.

Outside the EEA, FXRebate applies the consent and notice requirements of the relevant jurisdiction. The Seychelles Data Protection Act 2023 applies to relevant processing by organisations operating in Seychelles and recognises informed, freely given and unambiguous consent.

Where practical, FXRebate may apply the EEA consent standard more broadly as a global platform standard, even where a local law permits a less restrictive approach.

This Policy covers technologies used through:

• the public FXRebate website and Help Center;
• registration, login, password recovery and the "Remember me" function;
• the client area, Affiliate Portal, dashboards and account settings;
• Affiliate Links, referral codes, campaign links and Partner-account attribution;
• Google and Facebook social sign-in where offered;
• live chat, contact forms and support tools;
• analytics, error monitoring, advertising or conversion measurement where enabled;
• embedded social-media, video or external content;
• emails, newsletters and service communications containing pixels or tracked links;
• any future FXRebate web or mobile application using comparable technologies.

First-party technologies are set or controlled by FXRebate on the domain being visited. They may support sessions, preferences, consent records and referral attribution.

Third-party technologies are supplied by external providers. Depending on the provider and configuration, the provider may act as a processor for FXRebate, an independent controller, or a joint controller for a defined purpose.

Third parties may combine information received through FXRebate with information obtained through their own services, subject to their own policies and the consent choices available to the User.

The live Cookie Settings panel should identify the provider and provide or link to relevant third-party information where appropriate.

Where the login or registration page offers "Sign in with Google" or "Login with Facebook", the User may choose to authenticate through the relevant provider.

When the User selects social sign-in, the provider may place or read cookies on its own domain and process login, device, security and Account information under its own terms and privacy policy.

FXRebate may receive an authentication token and approved profile information, such as name, email address or provider identifier, as described in the Privacy Policy and the permissions screen.

Social sign-in is optional. Users may use the alternative FXRebate login method where available. A connected provider may be disconnected through the Account or provider settings, subject to maintaining another valid login method.

Where technically possible, third-party sign-in scripts should not be activated before the User chooses that sign-in method or gives any required consent.

Affiliate Links and campaign URLs may contain a tracker ID, referral code, source parameter or other identifier. FXRebate may record that information in a cookie, local storage, server-side record or Account entry.

The attribution period and applicable cookie duration will be shown in the Cookie Settings panel or relevant Affiliate campaign terms.

If optional attribution technologies are refused or deleted, FXRebate may be unable to associate a registration with an Affiliate or campaign. This may affect Affiliate Commission or campaign reporting, but FXRebate will not use refusal of optional cookies to deny access to unrelated core Services.

A Partner website may use its own cookies when a User follows a Partner link. Those cookies are controlled by the Partner and governed by the Partner's cookie and privacy policies.

FXRebate prohibits cookie stuffing, hidden redirects, forced clicks, unauthorised cookie overwriting and other manipulation under the Affiliate Terms of Service.

Where required, the first visit to the Platform will display a consent interface that allows the User to:

• accept all optional categories;
• reject non-essential technologies;
• open granular settings and choose by category or provider where appropriate.

Accept and reject choices should be available with comparable prominence and should not use pre-selected optional categories or misleading interface design.

Non-essential technologies will remain blocked until the required consent is provided. If the consent mechanism is unavailable or fails, FXRebate should default to strictly necessary technologies only.

Users can change or withdraw preferences at any time through the "Cookie Settings" link in the website footer or another clearly accessible control.

Withdrawal applies prospectively and does not make prior consent-based processing unlawful.

Access to the core website will not ordinarily be conditioned on consent to optional technologies. A particular optional feature, such as an embedded video or third-party chat, may remain unavailable unless the technology required for that feature is permitted.

To demonstrate and respect User choices, FXRebate may record a pseudonymous consent identifier, consent date and time, policy or banner version, selected categories, region and subsequent changes or withdrawal.

Consent records will be retained only for as long as reasonably necessary to demonstrate compliance, resolve disputes, and honor the User's preferences. Unless a longer retention period is required by applicable law, consent records will ordinarily be retained for five (5) years after the consent is withdrawn or expires, or for the applicable statutory limitation period, whichever is longer.

FXRebate may request that Users review and renew their cookie and privacy preferences every twelve (12) months, or sooner where the purposes of processing, service providers, cookie categories, applicable law, or other material circumstances change.

Clearing browser storage, changing device or browser, using private browsing, or deleting consent cookies may cause the banner to appear again.

The live Cookie Settings panel should provide the current register of active technologies, including, where relevant:

• cookie or technology name;
• provider and domain;
• purpose;
• category;
• first-party or third-party status;
• session or persistent status;
• expiry or retention period;
• whether consent is required.

Because providers, cookie names and expiry periods can change through software updates, the live register may be updated more frequently than the narrative text of this Policy.

A material new purpose or category will not be activated on the basis of an earlier consent that did not cover it. New consent will be requested where required.

Depending on the technology, FXRebate or a provider may collect:

• IP address and approximate location derived from IP;
• browser, operating system, device type, language and time zone;
• cookie, session, device, advertising or consent identifiers;
• pages viewed, buttons clicked, navigation path and timestamps;
• referring page, Affiliate Link, campaign source and URL parameters;
• login, session, security, error and performance information;
• chat, social sign-in, embedded-content and communication interactions;
• conversion, attribution and marketing-preference information.

When a User is logged in, cookie-derived information may be associated with the Account where reasonably necessary for security, preferences, referral attribution, rebate administration, support or another disclosed purpose.

Information collected through cookies and similar technologies may be used to:

• operate and secure the Platform;
• authenticate Users and maintain sessions;
• save preferences and consent choices;
• attribute Affiliate and campaign referrals;
• support Partner-account and rebate processes;
• provide chat, social sign-in and embedded functionality;
• measure and improve performance;
• detect fraud, bots, duplicate Accounts and security incidents;
• measure advertising or communications where consented;
• comply with law and enforce FXRebate terms.

Cookie-derived information may be combined with Account, referral, rebate, Affiliate, support or payment information only where necessary for a disclosed purpose and subject to the Privacy Policy.

FXRebate does not sell personal data for monetary consideration. Any targeted-advertising, audience or cross-context sharing activity will be disclosed and controlled as required by applicable law.

Categories of providers that may use or support these technologies include:

• hosting, content-delivery, security and infrastructure providers;
• consent-management platforms;
• analytics and error-monitoring providers;
• Google and Meta social-login providers;
• live-chat and customer-support providers;
• email, SMS and communications providers;
• advertising and conversion-measurement providers;
• embedded video, social-media and content providers;
• Partners and Affiliate technology providers where relevant.

FXRebate selects and configures providers with appropriate regard to privacy, security and contractual requirements. However, providers acting independently remain responsible for their own processing.

Clicking an external link may take the User to a separate site that sets its own cookies. FXRebate does not control cookies set solely on an external Partner or provider website.

Cookie and technology providers may process information in Romania, Seychelles, the European Economic Area, the United Kingdom, the United States or other jurisdictions.

Where GDPR-protected personal data is transferred outside the EEA to a country without an adequacy decision, FXRebate will use an appropriate transfer mechanism where required, such as Standard Contractual Clauses, together with supplementary safeguards where appropriate.

Further information concerning international transfers is provided in the FXRebate Privacy Policy and may be requested through privacy [at] fxrebate.eu.

Most browsers allow Users to view, block, delete or restrict cookies. Device and application settings may also control advertising identifiers, local storage, tracking permissions or embedded content.

Browser controls apply in addition to, but do not replace, the FXRebate Cookie Settings panel. Browser deletion may remove FXRebate preferences and cause the consent banner to reappear.

Blocking all cookies may prevent login, "Remember me", form submission, security controls, live chat, referral attribution or other functions from working correctly.

Instructions differ by browser and device. Users should consult the current help documentation supplied by the browser, operating-system or device provider.

Some browsers send a "Do Not Track" signal. Because no universally accepted standard determines how every website must interpret that signal, FXRebate may not respond to all Do Not Track signals.

Where a legally recognised opt-out signal, such as Global Privacy Control, applies to a particular activity and is supported by the FXRebate consent technology, FXRebate will use reasonable measures to honour it for the relevant sale, sharing or targeted-advertising activity.

FXRebate does not currently sell personal data for monetary consideration. The Cookie Settings panel remains the primary way to manage optional technology preferences on the Platform.

Session technologies generally expire when the session or browser closes. Persistent technologies remain until the stated expiry date, deletion by the User or earlier removal by FXRebate or the provider.

Each cookie or technology duration should be shown in the live register. FXRebate will not retain a cookie longer than necessary for its disclosed purpose.

Information generated from a cookie, such as security logs, referral records, consent evidence or analytics reports, may be retained separately under the periods explained in the Privacy Policy, even after the browser cookie itself expires.

Where cookie-derived information is personal data, applicable law may provide rights of access, rectification, erasure, restriction, portability, objection, withdrawal of consent and complaint to a supervisory authority.

Withdrawing cookie consent through the Cookie Settings panel is separate from a request to delete or access personal data held in FXRebate systems.

Privacy-rights requests may be sent to privacy [at] fxrebate.eu and will be handled as described in the FXRebate Privacy Policy.

The Services are intended only for persons aged 18 or older. FXRebate does not knowingly use optional tracking technologies to target children.

If FXRebate learns that an underage person has created an Account or provided personal data, it may close the Account and take appropriate deletion or restriction steps, subject to legal retention obligations.

FXRebate may update this Policy to reflect changes in technology, providers, Services, law, regulator guidance, security or business operations.

The updated version will display its new effective date. Material changes may be communicated through the website, client area or email.

Where a change introduces a new optional purpose or expands the scope of consent, FXRebate will request new consent rather than treating continued use as consent.