Privacy Policy
This policy explains what personal information Freebin handles, why it is used, which service providers receive it, how long it is kept, and your choices. It covers our website and the public read-only Freebin MCP connection used by ChatGPT and other compatible AI clients.
1. Who operates the service and how to contact us
Freebin operates the Freebin website and its referral-discovery API/MCP services. For a privacy request, question or complaint, contact hello@freebin.app or use our contact page. The same contact can be used to request the operator's legal-entity details, if required.
2. Information we process and why
| Category of data | Purpose of processing | When it applies |
|---|---|---|
| Public MCP tool input: a company name, search phrase, filters and an offer/referral identifier | Search, retrieve or compare public referral listings, return known requirements and canonical links, and prevent unauthorised tool actions. | Only when you ask your AI assistant to use Freebin. |
| Technical and usage information: request time, method or tool name, status, response time, request identifier, browser/device category, page interactions and session information | Operate the site and gateway, secure the service, measure usage, detect errors and abuse, and improve performance. | When browsing Freebin or using its public services. Infrastructure providers may separately process your IP address and other network metadata. |
| Optional account details: email address, authentication identity, account role and chosen preferences | Authenticate users, maintain accounts and provide account-specific features. | Only if you sign in or register. |
| Optional saved offers, reward notes, reports, subscription and preference information | Save offers, track reported reward activity, manage a newsletter or notification subscriptions and respond to user reports. | Only when you choose these features. |
| Optional connected Gmail/Outlook metadata and selected messages | With your permission, identify potential personal rewards. Initial scans may access sender, subject and date; selected-message analysis may access the message body. Freebin does not need your inbox to provide public MCP discovery. | Only when you explicitly connect an email account and use the separate Personal Reward Inbox feature. |
| Referral destinations, codes, catalogue review information and affiliation flags | Publish the approved referral catalogue, retain attribution links, prevent misleading reward claims and distinguish sponsored or referral relationships. | For Freebin's referral catalogue; this is not derived from private MCP-user accounts. |
We ask users not to enter payment-card details, identity documents, passwords, authentication tokens, sensitive health information or confidential information into public Freebin searches.
3. The public MCP / ChatGPT connection
Freebin's public MCP server is available at https://mcp.freebin.app/functions/mcpGateway. It exposes read-only tools for referral discovery and does not require a Freebin login or OAuth token. A connected AI provider sends only the tool name and parameters needed for the request. Freebin returns approved public catalogue data such as company names, referral codes and permitted destination URLs. No email inbox or saved personal reward history is exposed by this connection.
Public MCP requests are processed to generate a response; Freebin does not create a saved user-search record in its application database for each request. Application-level gateway logs may record request IDs, tool names, statuses and elapsed time, but not the full tool arguments or returned referral records. Freebin's infrastructure providers may collect additional network information for security and service operation. Your AI service handles the conversation and tool results under its own terms and privacy policy.
4. Recipients and third-party services
We use Base44 for website hosting, database services, authentication, server functions, file storage and analytics; and Cloudflare for network delivery or request processing, as applicable. These providers may process technical metadata to run and protect the service. If you choose to connect a Gmail or Outlook account for optional private features, Google or Microsoft processes the connection. When you use Freebin in ChatGPT or another AI assistant, that AI provider sends the public tool request and receives the tool response.
When you click a referral link, the destination company or referral programme may receive the click, normal browser/network information and the referral parameters in the URL. Referrers, partners or Freebin may receive an affiliate benefit if programme conditions are met. The destination company controls its own privacy practices; review its terms before registering or making a purchase. Freebin does not sell private AI conversation contents through the MCP gateway.
5. Retention: how long information is kept
| Information | Retention period or deletion event |
|---|---|
| Public MCP search parameters and returned results | Processed for the duration of the tool request. They are not saved as individual search-history records in Freebin's application database. |
| Unsaved Personal Reward Inbox scan results | Held in the browser for the active session and discarded when the page/session is cleared. If you select Save, the chosen reward summary becomes an account record. |
| Account details, saved rewards, reports and preferences | Kept while the account or selected record remains active; removed or reviewed following a valid deletion request, subject to legal obligations and provider backup lifecycles. Freebin does not currently operate a universal automatic deletion schedule. |
| Newsletter or notification subscription data | Kept while subscribed and removed or disabled when you unsubscribe or request removal, subject to lawful suppression records and backup lifecycles. |
| Browser storage, including sign-in and preferences | Kept until you sign out, clear browser data, or the applicable stored token expires. Storage is governed by browser and provider behaviour. |
| Gateway/hosting security and performance logs, analytics events and backups | Retention varies by the underlying Base44, Cloudflare and other service-provider configuration. Freebin does not claim a fixed deletion period for logs or backups it cannot independently control. Contact us for details about the currently applicable retention arrangements. |
| Published referral records and programme details | Kept while the programme remains in the catalogue and until corrected, withdrawn or removed following review. |
6. Your choices and privacy rights
- Use Freebin without an account: public offer browsing and MCP discovery do not require account registration.
- Disconnect optional integrations: use the in-app disconnect option when available or revoke access from your Google or Microsoft account. You may disable push notifications in your browser/device.
- Unsubscribe: unsubscribe from marketing communications and disable notification subscriptions.
- Control local data: clear cookies and local/session storage in your browser settings. Blocking essential storage can prevent sign-in from working.
- Request data rights: contact hello@freebin.app to ask for access, correction, export, deletion, restriction, objection or withdrawal of consent where the law provides these rights. We may need to verify the request before acting and may retain information where required by law.
Depending on your location, you may complain to a data-protection regulator. UK residents may contact the Information Commissioner's Office (ICO).
7. Cookies and local storage
Authentication, session state, preferences and some analytics rely on browser storage or provider-operated cookies. Freebin's public MCP integration does not require a Freebin browser session. Please read the Cookie Policy for more information. You can adjust browser preferences or use private browsing if you do not wish to retain optional local data.
8. Children, security and changes
Freebin is not intended for children younger than 13. Some company referral programmes are restricted to adults. We use access controls and limited public tool permissions but cannot promise that network services are risk-free. Material changes to this privacy policy will be published here with an updated date.