Privacy Policy

1. What we collect

We collect the email address you sign up with, your hashed password (or your Google ID if you sign in with Google), the IP address and user agent of each session, your activity on the platform (tasks started, coins earned, payouts requested), and any information you provide when contacting support.

2. How we use it

We use this information to operate the service, prevent fraud, credit you for completed tasks, deliver redemptions, communicate updates and promotional offers (you may opt out at any time), and comply with legal obligations.

3. Sharing

We share information with our partner networks (offer walls, survey providers) only to the extent needed for them to credit you for completing their offers — typically a partner-specific subId, never your email or real identity. Payment processors receive only the information required to deliver your redemption. We do not sell your personal data.

4. Security

Passwords are hashed with Argon2id. Reset tokens are single-use, stored as SHA-256 hashes, and expire after one hour. Sessions use httpOnly + SameSite cookies. All traffic is TLS-encrypted.

5. Your rights

You can request a copy of your data, ask us to correct it, or close your account at any time by contacting support. Account closure deletes personal data within 30 days, subject to legal retention requirements.

6. Contact

For privacy-related questions, contact privacy@extracash.example.