Security

How we keep your money and your codes safe

A voucher code is as good as cash, so we protect it like cash: at checkout, in storage and at the moment it is spent.

When you pay

Your bank confirms each card payment, usually with a code or a tap in your banking app.

You type your card on the payment processor's form. We never see or store your full card number.

The charge shows as a voucher purchase, so it is easy to recognise.

Every page is served over HTTPS only.

Codes are stored encrypted. Staff cannot read them in the database.

We ask for your password again before showing a full code in your vault.

Recovery emails go only to the address used for the order.

We email you 30 days and 7 days before a voucher expires.

A code is redeemed once, for its full amount.

During a redemption the code is reserved for one customer. Nobody else can use it at the same time.

If the merchant cancels or the reservation runs out of time, the code is active again.

Every request and notification between us and merchants is signed and checked.

Set daily, weekly or monthly caps. Lowering a limit works at once; raising it takes 24 hours.

Take a break from buying for a set time. A pause cannot be shortened once it starts.

Above a 30-day spending threshold we verify the buyer's identity once, online.

Merchants join by invitation, after we verify the company, its owners and its business.

If someone asks you to pay a debt, a fine or a stranger with vouchers, it is a scam. Stop and contact us.

Seen something wrong with an order, a code or this site? Tell us.