Privacy policy | Affiliate Programs NZ

In shortWe don't run accounts or newsletters. If you use the Contact form, we collect your name, email and message only to reply to you. We use PostHog analytics to understand how the site is used, and our host (AWS) keeps standard server logs. This policy is written with the New Zealand Privacy Act 2020 in mind.

1. Who we are

This policy covers affiliateprograms.co.nz ("the site", "we", "us"), an independent, informational website about affiliate programs open to New Zealand publishers.

2. Contact form

The site has no user accounts, comments or newsletters. The only place we ask for personal information is the Contact form. When you use it, we collect your name, your email address and your message, plus the address of the page you sent it from. The form is processed by a small server function hosted by Supabase, which emails your message to us through Resend, our email delivery provider. We use these details only to read and reply to your message. We don't add you to any mailing list, and we don't sell or share your details. The message stays in our email inbox until we no longer need it. We also record an analytics event in PostHog when a form is sent successfully, but this event doesn't include your name, email or message.

3. Analytics (PostHog)

We use PostHog, hosted in the United States (us.i.posthog.com), to understand how people use the site so we can improve it. When you visit, the PostHog script:

stores a randomly generated identifier in a first-party cookie and your browser's local storage, so visits from the same browser can be counted together;
records the pages you view and when you leave them, the referring website, and any UTM campaign tags in the URL;
records clicks on program "Join" buttons in the directory, and successful Contact form submissions, as analytics events (without the contents of the form);
collects technical information such as browser type, device type, operating system and screen size, plus page-performance measurements (web vitals);
receives your IP address, which PostHog uses to estimate your approximate location (country and city).

We don't use session recording (screen replays), heatmaps or automatic click capture across the site. We don't use analytics to identify you by name, and we don't sell analytics data. We don't use Google Analytics or advertising cookies. You can block or clear cookies and local storage in your browser settings, or use a content or tracker blocker, and the site will still work.

4. Outbound links and referrers

When you click a link to an affiliate program, we add UTM parameters (for example utm_source=affiliateprograms.co.nz) so the program can see the visit came from us. Your browser may also send the program our site address as the referrer (we use a strict-origin-when-cross-origin referrer policy, so other sites see only our domain, not the full page address). These don't contain your personal information. Once you're on a third-party site, its own privacy policy applies, and we're not responsible for how it handles your information.

5. Hosting and server logs

The site is hosted on Amazon Web Services (Amazon S3 and CloudFront). Like most web hosts, AWS may automatically log technical request details such as IP address, date and time, page requested, browser user agent and referrer, for security, performance and operational purposes. AWS may process this information outside New Zealand.

6. Fonts

The site loads fonts from Google Fonts, so your browser connects to Google's servers, which receive your IP address and browser details.

7. Overseas storage and security

Our analytics, hosting and contact-form providers (PostHog, AWS, Supabase and Resend) store or process information overseas, including in the United States. We choose established providers and only use the information for the purposes described in this policy. We keep analytics data only as long as it's useful for understanding site usage, in line with PostHog's retention settings.

8. Your rights

Under the Privacy Act 2020 you have the right to ask for access to personal information we hold about you and to ask us to correct it. Because we generally can't link analytics data to a named person, we may need information from you (such as your browser's analytics identifier) to find any records. You can make a request using the Contact form.

If you aren't satisfied with how we handle a privacy concern, you can complain to the Office of the Privacy Commissioner.

9. Changes to this policy

We may update this policy, for example if we add new features or change providers. The "last updated" date shows when it last changed.