Privacy Policy

What we know about you, and what we do with it.

Bullmark keeps a sealed ledger of vouchers and credit. That shapes this policy more than anything else: we collect little, and what goes into the ledger stays there.

Last updated: October 23, 2026

Bullmark is operated by Axowl, Inc., a Delaware corporation, United States ("Bullmark", "we", "us").

These pages are translated for convenience. Where a translation and the English version disagree, the English version governs — except where local law says otherwise.

What we collect

Your account. You sign in through Axowl, our authentication provider. We receive your account identifier and the email address you authenticated with. We never see or store your password.

What you do with vouchers and credit. The vouchers you claim, buy, hand over, reserve and redeem; the credit you hold and spend; and, for brands, what you mint, issue, sell and withdraw.

What a brand tells us about itself. Company page, products, prices, and the payout account it connects.

Your mobile number, only if you opt in. If you choose to receive text messages, we keep the mobile number you give us and when you agreed (or turned texts off). We use it only to send those texts, and we do not sell it or share it with third parties for their marketing.

Technical records. IP address and request logs, kept to run the service, rate-limit it and investigate abuse.

How you use the site. Through Axowl behavior analytics: the page path (never the query string), time on the page, the referring site's domain and campaign tags, linked to your account when you are signed in. No IP address or email is stored with it, and Do Not Track and Global Privacy Control are respected.

We do not collect card numbers. Card payments are handled by Stripe on Stripe's own pages; we receive the result of a payment, not the card.

What we use it for

To run Bullmark: to show you what you hold, to let a brand honour a voucher, to pay a referrer for a real redemption, to settle money to the right account, to prevent fraud, and to answer you when you write to us. We do not sell personal data and run no advertising trackers on this site; the only analytics is Axowl's usage analytics described above, which tells us which pages people use.

Who else sees it

Axowl — signs you in, holds a fingerprint (a hash) of each sealed record with its own timestamp, and receives the usage analytics described above. For sealed records it receives the hash, never the contents.

Stripe — processes card payments and payouts.

The brand whose voucher you hold. When you redeem, the brand learns that this voucher was presented and used. A brand can read the sealed history of its own vouchers.

Hosting and delivery providers that serve the site and store the database on our behalf.

Authorities, when the law requires it.

The sealed ledger, and what it means for deletion

Voucher and money records are append-only and sealed, so that nobody — including us — can quietly rewrite what happened. The email address a voucher was issued to is inside that seal. The consequence is plain: we can close your account and stop using your data, but we cannot erase a sealed record without breaking the ledger other people rely on. Those records are kept for as long as the ledger exists, and as the law requires for financial records.

Your choices

You can ask us what we hold about you, ask us to correct it, or ask us to close your account. Write to [email protected] from the email address on your account. Depending on where you live you may have further rights under local law; we will honour them.

Children

Bullmark is not for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes in a way that matters, we will say so on this page and change the date at the top. See also the cookie policy and the terms of service.

Loading…
an unhandled error has occurred. reload ✕