Refueler (incorporating as Refueler Ltd, England & Wales) is the data controller for the personal data described here.
Processors
| Processor | Role | Region |
|---|---|---|
| Cloudflare | Hosting, file storage for Share, the check that a visitor is a person, and Share sign-in emails | Global |
| Supabase | Database for Share Citizen accounts and the report register | EU (Ireland) |
| Stripe | Card payments, for paying Share Citizens only. During a card payment Stripe runs a fraud check by hCaptcha, which sees your IP address | Global |
Each works under its Data Processing Agreement. These three are all of them. Cloudflare and Stripe may handle data outside the UK; this is covered by the safeguards in their agreements.
A few small cookies, each with one job:
| Cookie | What it does | Lasts |
|---|---|---|
__Host-rfs_session |
Keeps you signed in to Share as a Citizen. Set only when you sign in | Ends after 1 hour unused, 24 hours at most |
__cf_bm, cf_clearance |
Set by Cloudflare, our host, only when it needs to tell people from automated traffic | __cf_bm 30 minutes; cf_clearance after a check |
| Stripe's own | Set by Stripe, our card processor, and hCaptcha, the fraud check Stripe runs, on their own sites, not refueler.io. Only on Share's Plans page, and only after you press Continue to payment | Set by them: see Stripe's privacy notice |
These, and nothing for advertising or tracking across sites.
Some choices stay in your own browser and are never sent to us: Paper or Carbon, the notes that let an interrupted upload carry on, and whether you have seen a notice (cleared when you close the tab).
You can check this yourself: your browser's developer tools → Storage (or Application) → Cookies. Step by step, for each browser.
refueler.io pages, including Share's front page and Plans but never Share itself at share.refueler.io, count visits with our own counter: the page, the site you came from, your country, whether you are on a phone or a computer, the theme, how far you read an article, and whether you went on to Share. It sets no cookie, stores nothing in your browser and keeps no IP address.
These pages also load fonts from Google Fonts and Fontshare, which see your IP address as any host does. Share loads its fonts from its own server.
| Activity | Legal basis |
|---|---|
| Sending and receiving a transfer you asked for | Art. 6(1)(b) — performance of contract |
| Citizen sign-in, plan and payment | Art. 6(1)(b) — performance of contract |
| The check that you are a person, and error notes | Art. 6(1)(f) — legitimate interests: keeping the service safe and working |
| Counting visits to refueler.io pages | Art. 6(1)(f) — legitimate interests: knowing which pages are read |
| Handling reports about a link | Art. 6(1)(c) — legal obligation: our Online Safety Act duties |
You can ask us to show, correct, export or delete what we hold about you, to pause its use, or to stop a use that rests on legitimate interests. Email privacy@refueler.io. We reply within 30 days, usually much sooner.
Citizens. To delete your account, email us for now; a Delete account option is coming to your account page.
Free transfers are not linked to you. To have one removed before it expires, send us the link up to the # — never the part after it, which is the key.
No decision with legal or similar effect is made about you automatically.
Right to complain to the ICO
If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) under Article 77 of the UK GDPR.
ICO website: ico.org.uk · Helpline: 0303 123 1113
We would always prefer the chance to put things right first — please write to privacy@refueler.io.
We check this page against the live services on a regular schedule. The date at the top says when it last changed.
Material changes — new kinds of data, new processors, new legal bases, longer retention — are announced on the Share status page before they take effect. Version history is kept in a private Git repository.
Email: privacy@refueler.io
Post: [Registered address — to be confirmed at incorporation]
Every privacy enquiry is read and answered personally.