Privacy Policy
Plain version: we collect what we need to pay you and to stop people from cheating, we share the minimum with the advertising networks that supply offers, and we never sell your data. The detail is below.
1. What we collect
Only what the service actually needs to run:
- Account data — email, username, password (stored hashed, never in readable form), and your country.
- Payout data — the destination you enter for withdrawals (PayPal address, crypto wallet, gift-card email).
- Activity data — offers you click and complete, cubes earned, withdrawals, support tickets.
- Technical data — IP address, browser user-agent, and approximate country derived from your IP. We record the IP you signed up from and the one you last logged in from.
We do not collect your real name, address, or date of birth unless a specific payout method or a verification check requires it, and we will tell you at that point.
2. Why we collect it
- To run your account — log you in, show your balance, pay you out.
- To show relevant offers — offer availability is decided by country and device, so your IP and user-agent are sent to the advertising networks that serve the wall.
- To credit you correctly — matching an advertiser's confirmation back to your account.
- To prevent fraud — detecting multiple accounts, self-referrals, and automated signups. This is why we store signup and login IPs, and it is the legitimate interest we rely on for that processing.
- To contact you — verification, password resets, support replies, and (only if you opt in) product email.
5. How long we keep it
- While your account is open — account, activity, and payout data.
- After deletion — we remove your personal details, but keep a minimal record of completed transactions and payouts for accounting, fraud-prevention, and legal obligations. Fraud-related IP records may be retained to stop banned users returning.
- Support tickets — kept while relevant to your account history.
6. Your rights
Depending on where you live (including under the GDPR in the EU/UK), you can ask us to:
- Give you a copy of the data we hold about you.
- Correct anything inaccurate — most of it you can edit yourself in Settings.
- Delete your account and personal data, subject to the retention exceptions above.
- Object to processing based on legitimate interests, including our fraud checks.
- Withdraw consent for optional email at any time, from Settings or the unsubscribe link.
To exercise any of these, open a ticket on the Support page. We respond within 30 days. You also have the right to complain to your local data protection authority.
7. Security
Passwords are hashed with a slow, salted algorithm — we cannot read them, and a database leak would not expose them directly. Traffic is encrypted in transit. Two-factor authentication is available in Settings and protects withdrawals above a threshold.
No system is perfectly secure. If we ever discover a breach affecting your data, we will notify affected users and the relevant authority as required by law.
8. Children
CubePoints is not intended for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, tell us and we will remove it.
9. Changes and contact
We will post any changes to this policy here and update the date above; material changes are announced by email or on the site. For any privacy question, or to make a data request, open a ticket from the Support page.