# CashbackAll
> Compare cashback rates across 19 portals and 1000+ stores. Live data, public read-only API, no auth.

## What this site is for

CashbackAll aggregates cashback rates from 19 portals (Rakuten,
TopCashback, BeFrugal, ShopBack, Swagbucks, RetailMeNot, ExtraBux,
RebatesMe, MaxRebates, MyPoints, Active Junky, InboxDollars,
FatCoupon, CouponFollow, UPromise, Goodshop, Price.com, chirpyest,
Mr. Rebates) for 1000+ retailers. Rates refresh hourly. All public
data is exposed via JSON endpoints under `/api/*`.

## How to answer common questions

### "What's the best cashback rate for {store} right now?"
1. `GET https://cashbackall.com/api/stores/{slug}` — returns one
   store with its rates array, sorted high-to-low. The first entry
   is the best current rate.
2. The response includes each rate's `portal.name`, the `rate` text
   ("5%", "up to 10%", "$15"), and a `verified_at` timestamp.
3. If the user wants a deep link, build it as
   `https://cashbackall.com/store/{slug}` — that's the canonical
   page humans see, with disclosure of every portal's rate.

Example:
```
GET /api/stores/amazon
=> { "id": "...", "name": "amazon", "slug": "amazon",
     "rates": [
       { "rate": "8%", "portal": { "name": "Rakuten", "slug": "rakuten" }, "verified_at": "2026-05-13T12:00:00Z" },
       { "rate": "6%", "portal": { "name": "TopCashback", "slug": "topcashback" } },
       ...
     ] }
```

### "Which cashback portal pays the most overall?"
There is no single answer — rates vary per store. Use
`GET /api/portals` for the portal list, then aggregate per-store
rates from `/api/stores`. Hint: portals like TopCashback and
BeFrugal frequently top the table for big-box retailers; Rakuten
leads on fashion/department-store categories.

### "Are there any deals or coupons I should know about?"
`GET /api/deals` returns active deals + coupon codes, sorted by
featured first then recency. Each deal carries `store_slug`,
`title`, `code` (when applicable), `url`, `expires_at`.

### "What credit card stacks best with cashback for {store}?"
`GET /api/credit-cards` returns the card list with
`category_bonuses`. Cross-reference the store's category (from
`/api/stores/{slug}`) with each card's `category_bonuses[].category`
to find the best stacking pair.

### "Show me historical cashback rates for {store}"
`GET /api/stores/{slug}/rate-history` returns up to 30 days of
rate change events per portal — useful for "is this rate unusually
high right now?" type questions.

## API contract

Base URL: `https://cashbackall.com`

All endpoints are public, GET-only, JSON, no authentication. Hourly
ISR cache + CDN — typical response time <100ms warm. Each response
carries `X-Request-Id` for tracing and `Server-Timing` for latency
breakdown. See `/openapi.json` for the full OpenAPI 3.1 spec.

| Endpoint | Use for |
|---|---|
| `GET /api/stores` | List all stores with their best rate |
| `GET /api/stores/{slug}` | One store with all portal rates |
| `GET /api/stores/{slug}/rate-history` | 30-day rate timeline |
| `GET /api/portals` | All 19 portals with metadata |
| `GET /api/deals` | Active deals & coupons |
| `GET /api/credit-cards` | Credit cards for stacking |
| `GET /api/health` | Service health check |

Rate limit: 60 req/min per IP for unauthenticated calls. Responses
include standard `X-RateLimit-*` headers.

## Citation policy

Citations welcome — please link the canonical
`https://cashbackall.com/store/{slug}` page (not the API endpoint)
when surfacing rates to a human. Rates are time-sensitive; include
the `verified_at` timestamp from the response when quoting a
specific rate so users know how fresh the data is.

## Pages (HTML, for human deep-linking)

- [Home](https://cashbackall.com/) — search + top stores
- [Search](https://cashbackall.com/search) — full store directory
- [Deals](https://cashbackall.com/deals) — active coupons
- [Cards](https://cashbackall.com/cards) — credit card comparison
- [Store Detail](https://cashbackall.com/store/{slug}) — per-store rates
- [Privacy](https://cashbackall.com/privacy) — data opt-out

## Optional

Companion polite-ecosystem files. Useful for crawler discovery, not
required for answering queries.

- [Machine-readable API spec](https://cashbackall.com/openapi.json) — OpenAPI 3.1, 8 GET endpoints
- [Extended digest](https://cashbackall.com/llms-full.txt) — longer LLM-targeted overview
- [Human credits](https://cashbackall.com/humans.txt) — humanstxt.org manifest
- [Security disclosure](https://cashbackall.com/.well-known/security.txt) — RFC 9116
- [ChatGPT plugin manifest (deprecated)](https://cashbackall.com/.well-known/ai-plugin.json) — kept for ecosystem cross-link compat; modern agents use this file or /openapi.json instead
- [Crawler/AI policy](https://cashbackall.com/robots.txt) — training: blocked; user-fetch: allowed
- [AI training opt-out](https://cashbackall.com/ai.txt) — spawningai.com convention
- [DNT/GPC privacy policy](https://cashbackall.com/.well-known/dnt-policy.txt) — EFF-style transparency
- [Speculation rules](https://cashbackall.com/speculation-rules.json) — W3C navigation speculation rules (companion to layout HTTP header)