Legal
Privacy policy
What we collect, what we deliberately do not, and what you can ask us to do with any of it.
Last updated June 25, 2026
1Data Controller
This Privacy Policy describes how Tributly.io ("we", "us", "our") processes personal data.
Tributly.io is operated by: • Company Name: Cortallis • Business Address: Jana Kochanowskiego 31, Warsaw, Poland (Note: This is a private office address and not a storefront. Please do not visit this address.) • Contact Information: contact@cortallis.com
We have not appointed a Data Protection Officer under Article 37 GDPR. However, we have designated a contact point for data protection inquiries: contact@cortallis.com
2Overview
We are committed to protecting your privacy and handling your personal data in a transparent and secure manner.
3Legal Basis for Processing
We process your personal data based on:
- Performance of a contract (service functionality and earnings)
- Legitimate interests (fraud prevention and service improvement)
- Consent (cookies and analytics)
- Legal obligations (tax and compliance)
4Information We Collect
Account Information
Email address and display name
Device Identifier
A pseudonymous identifier linked to your account
Ad Interaction Data
Impressions, clicks, timestamps, campaign details, and technical signals confirming an ad was actually rendered and visible in an active browser tab, used to verify payouts and prevent fraud
IP Address
Used for security and fraud prevention, stored temporarily
Payment Information
Processed via third parties (e.g. Stripe)
5Information We Do Not Collect
We do not collect source code, prompts, chat history, or external browsing activity.
6Local Processing
Processing occurs on-device and no sensitive data is transmitted.
7Cookies and Analytics
Analytics and advertising cookies run only with your consent, given through our cookie banner and withdrawable at any time from the "Cookie settings" link in the footer. Until you accept, those scripts are not loaded at all. Our processors are PostHog for product analytics, on servers in the European Union, and Google Analytics and the Meta Pixel for advertising measurement.
8Data Use
We use data to operate the service, show ads, prevent fraud, and improve performance.
9Data Sharing
We do not sell data. Data may be shared with service providers and payment processors.
10International Transfers
Data may be transferred outside the EEA using safeguards such as Standard Contractual Clauses (SCCs).
11Data Retention
Data is retained for up to 5 years based on legal and business needs.
12Your Rights
You have rights including access, correction, deletion, restriction, portability, objection, and the right to lodge a complaint with supervisory authorities.
13Security
We use encryption, secure authentication, and access controls.
14Changes
We may update this policy and notify users when required.
15Contact
contact@cortallis.com