Privacy & Cookies

1. Controller

ScalePoint Ventures Oy
Business ID: 3620767-9
Almavägen 26, 65610 Mustasaari, Finland

ValueAgain is a brand operated by ScalePoint Ventures Oy. For privacy questions or requests, contact privacy@valueagain.com.

2. Scope of this notice

This notice explains how information is processed when you visit the public website, interact with its affiliate features or contact us directly. ValueAgain does not sell or accept travel bookings. Processing for a ValueAgain cashback account, once an account function is active, is described in the separate Account Privacy Notice.

3. Personal data we may process

Website and security data

Our hosting and security providers may process technical information needed to deliver and protect the website, such as IP address, request time, requested page, browser or device information, referrer and security events.

TruConversion on the public website

Only if you separately opt in, we load TruConversion on valueagain.com to understand page visits, clicks, touch, pointer and scroll activity, and potentially heatmaps or session recordings. TruConversion may process the page URL and content, browser and device data, a visitor/session identifier and interaction events. We configured it not to store IP addresses or location and to obfuscate input in recordings. The script is not loaded on app.valueagain.com, including login, account and bank-data pages.

The offers directory also contains direct tracked affiliate links supplied by affiliate networks or providers. When you follow one, your browser connects to the relevant affiliate-network or provider domain, which may receive technical data such as your IP address, browser information, referring site and affiliate-link identifiers to route and attribute the referral and prevent abuse.

If you follow a link to a third-party website, that provider processes information under its own privacy and cookie notices.

Direct enquiries

If you email us, we process the contact information and message content you provide, together with related correspondence and any information reasonably necessary to respond.

4. Purposes and legal bases

• Operating and securing the website: our legitimate interests in providing a reliable website, preventing misuse and protecting our systems.
• Direct affiliate referrals: your request to follow a provider link and our legitimate interests in routing and measuring referrals, preventing abuse and operating the affiliate directory. Any terminal storage or access that is not strictly necessary remains subject to consent.
• Optional TruConversion analysis: your separate consent to understand how visitors use the public website. Rejecting it does not affect registration, cashback or affiliate links.
• Responding to enquiries: our legitimate interests in communicating with prospective partners and other contacts, and taking steps at your request before a possible contract where applicable.
• Compliance and legal claims: compliance with legal obligations and our legitimate interests in establishing, exercising or defending legal claims.

5. Sources of data

We receive enquiry data directly from you. Technical website data is generated when your browser communicates with the website and its hosting infrastructure. If you follow a direct affiliate link, we may receive referral and transaction-attribution information from the relevant affiliate network or provider.

Providing information by email is voluntary. Without usable contact details, we may be unable to reply.

6. Recipients and service providers

Personal data may be processed by service providers that support website hosting, security and business email. Affiliate networks and linked providers may process referral and transaction-attribution data. TruConversion provides optional public-site usage analysis. Service providers act under applicable contractual and data-protection requirements. We may also disclose information to professional advisers or public authorities where necessary and legally permitted.

We do not sell personal data.

7. International transfers

Some service providers may process personal data outside the European Economic Area. Where this occurs, we rely on a lawful transfer mechanism, such as an adequacy decision or approved standard contractual clauses, together with supplementary measures where required.

8. Retention

Technical logs and affiliate-performance information are retained only for as long as reasonably necessary for website operation, security, reporting and incident handling, based on the settings and retention periods of the relevant provider. Enquiry correspondence is retained for as long as needed to respond, manage the relationship and meet applicable legal or limitation-period requirements. Data is then deleted or anonymised unless longer retention is legally required.

9. Cookies and similar technologies

Optional website measurement: Only after your separate analytics consent, ValueAgain records steps from the landing page through registration and cashback activation. A random first-party browser visit identifier lasts at most 24 hours and works across valueagain.com and app.valueagain.com. The database keeps only its hash, event type, headline variant A/B (or no assignment), coarse mobile/desktop category and timestamp, for up to 30 days before daily deletion. This dataset contains no account ID, email, IP address, search text or visited URL. It is separate from affiliate attribution and does not establish a booking. Infrastructure providers may process normal request logs as described elsewhere in this notice. We compare two landing-page messages for consenting visits; this choice alone does not load a third-party analytics SDK. Rejecting or withdrawing does not affect account or cashback access. The consent preference itself lasts six months. Withdrawal removes the visit cookie and stops future measurement; it cannot recall a request already sent.

TruConversion: This is a separate, unchecked choice. Only after you select it, the public website loads TruConversion and its cookies, including session cookies such as _tcfv and _tcSecSess and returning-visitor or page-visit cookies such as _tisfrv and _tiupvc (up to two years). Other cookies may be used if optional TruConversion campaigns are activated. This enables analysis of the public-site journey and, if configured, heatmaps or recordings. No TruConversion script is loaded in the account app. We do not configure surveys or form analytics here. See TruConversion's privacy policy and cookie information.

Favorites: Only when you save a provider, its public identifier is stored in a first-party cookie for up to six months, shared by the website and account app in this browser. Clear it by removing favorites. Your account can separately save favorites at your request; they remain until removed or your account is deleted. Browser favorites are imported into your account only when you ask. These are user-requested preferences, not advertising profiles.

Travelpayouts provides more information in its Privacy Policy and Cookie Policy. A destination website reached through an affiliate link may set its own cookies or use similar technologies under its own policies.

Your choice is stored in a first-party preference cookie for six months. You can change it using “Privacy settings”. Withdrawing consent reloads the current page without TruConversion and prevents that script from loading on future page views; it cannot undo processing that occurred before withdrawal. You can clear existing TruConversion cookies in your browser. TruConversion also provides a separate opt-out.

First-party measurement and TruConversion have separate choices. Use “Privacy settings” to review or withdraw them. The first-party measurement preference is shared between the public website and the account app; the TruConversion choice applies only to the public website. No additional advertising or analytics service is enabled by accepting account terms.

10. Your rights

Depending on the circumstances and legal basis, you may have the right to request access to your personal data, correction, deletion, restriction of processing, data portability and to object to processing based on legitimate interests. Where processing relies on consent, you may withdraw that consent at any time.

We do not use personal data from this website for solely automated decisions that produce legal or similarly significant effects.

Send requests to privacy@valueagain.com. We may need to verify your identity before responding.

11. Right to lodge a complaint

You have the right to lodge a complaint if you consider that processing of your personal data infringes data-protection law. You may contact us first so we can address your concern, but doing so does not affect your right to complain.

Office of the Data Protection Ombudsman
Complaint information at tietosuoja.fi

12. Changes

We may update this notice as the website or ValueAgain service develops. The current version and update date will remain available on this page.