Legal
Privacy Policy
Draft: this text is under legal review and may change.
Controller
[to be added], [to be added], [to be added]. This policy follows the EU General Data Protection Regulation (GDPR).
What we collect
- Account data: e-mail, username, password hash, Telegram ID and name if you sign in with Telegram, language and theme.
- Activity data: rewards, tasks, games, ledger entries, withdrawals and payout addresses.
- Security data: IP address, a shortened network address, browser type, a random device identifier (cookie ch_did), sign-in history and risk events.
- Advertising data: only after consent, ad networks may process data in their own frames under their own policies.
Why and on which basis
- To provide the account, rewards and withdrawals — contract (Art. 6(1)(b)).
- To prevent fraud, multi-accounting and abuse, and to protect the service — legitimate interest (Art. 6(1)(f)).
- To keep accounting and legal records — legal obligation (Art. 6(1)(c)).
- To show ads and send optional notifications — consent (Art. 6(1)(a)), which you can withdraw at any time.
Processors and recipients
Hosting provider, e-mail provider, FaucetPay (withdrawals), Telegram (sign-in and bot), captcha providers, the IP check service (proxycheck.io, only the IP address), offerwall and ad partners. Some of them may process data outside the EU under standard contractual clauses.
How long we keep data
- Account data — while the account exists.
- Sessions — up to 7 days after expiry. IP checks — 7 days. Device and network links — 180 days.
- Ledger and withdrawal records — as long as accounting law requires.
Your rights
Access, correction, deletion, restriction, portability, objection and withdrawal of consent. Write to [to be added]. You can also complain to a data protection authority.
Age
The service is for persons aged 18 or older. We do not knowingly collect data of younger persons.