Data we collect

Account identifiers: email, username, profile fields, and authentication metadata.

Product activity: predictions, ledger events, task completions, box openings, and referral relationships.

Task tracking: hashed IP, hashed user agent, referrer, country, device class, and click identifiers.

Security signals: device fingerprint hashes, signup velocity markers, VPN/proxy heuristics, and fraud scores.

How we use data

Operate accounts, balances, rewards, leaderboards, and support workflows.

Detect abuse, automation, referral fraud, and invalid task completions.

Send transactional email for account verification and password reset.

Improve product analytics and operational safety.

When you open a task destination link, we may record a click identifier to verify dwell time or completion.

Task click logs support verification workflows and abuse detection.

We do not sell raw account passwords or email contents to third parties.

We compute fraud scores from velocity, referral patterns, win-rate anomalies, and task timing.

Administrators may review proofs, freeze accounts, and reverse ledger transactions.

Hashed identifiers are used where possible instead of storing raw IP addresses in analytics tables.

CAPTCHA, rate limits, and manual review queues may be applied to suspicious actions.

Authentication sessions may use secure cookies or bearer tokens depending on the client surface.

Referral attribution and device fingerprint helpers may use browser storage for anti-abuse purposes.

Analytics cookies are limited to operational product metrics in the current release.

Ledger and audit records are retained for accounting and compliance review.

Task click logs are retained for verification and fraud-prevention windows.

Users may request account review, correction, or deletion through the published contact email where legally permitted.

Some records may be retained after account closure when required for fraud prevention or dispute resolution.

Privacy questions and data requests can be sent to the legal contact email shown in the footer.

We may update this policy by changing the legal version date at the top of the published page.