Privacy

Last updated: 6 September 2026.

This policy explains what personal data Earnbitmoon collects, why we use it and what rights you have under the GDPR and equivalent laws. The controller is Earnbitmoon, the operator of this Website. Contact: [email protected].

1) What We Collect

  1. Account data - username, e-mail, hashed password, country, gender, membership level, referral link. If you sign in with Google, we also store your Google Account identifier (see section 2).
  2. Technical data - IP address at registration and each login, browser and device identifier, country detected from your IP, verified devices, session cookies and login history.
  3. Activity data - claims, PTC views, shortlinks, tasks, offerwall and survey completions, balance and transaction history.
  4. Payment data - wallet addresses and payment-processor IDs used for payouts, amounts and status. We never receive card numbers.
  5. Messages you send us through the contact form, e-mail or on-site chat.

2) Signing in with Google

You may create an account or sign in using your Google Account. This is optional - you can always use a regular e-mail address and password instead.

  1. What Google sends us. When you choose to sign in with Google, Google sends us a signed token containing your Google Account identifier (a permanent numeric ID), your e-mail address and whether Google has verified it, and your first name, full name and profile picture URL where available.
  2. What we never receive. We do not receive your Google password, and we have no access to your Gmail, Google Drive, Contacts, Calendar or any other Google service.
  3. How we use it. The Google Account identifier is stored so we can recognise you on your next sign-in. Your e-mail address becomes the e-mail address of your Earnbitmoon account and is used for account recovery, security notifications and, if you opt in, service e-mails. Your name is used only once, to suggest a username during registration - you may change it before your account is created and we do not store it afterwards. Your profile picture is not stored on our servers.
  4. Legal basis. Performance of our contract with you (creating and securing your account).
  5. How long we keep it. The Google Account identifier and e-mail address are kept for as long as your account exists and are removed when your account is deleted, in line with section 7.
  6. Sharing. We do not sell, rent or transfer data received from Google to any third party. It is never used for advertising, profiling, credit scoring or AI model training, and it is not shared with our advertising partners or offerwall providers.
  7. Disconnecting Google. You can unlink your Google Account at any time in Account Settings, provided you have set a password first. You can also revoke our access from your Google Account at myaccount.google.com/permissions.
  8. Limited Use. Earnbitmoon's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3) Why We Use It

  1. To run your account and send your payouts - legal basis: performance of our contract with you.
  2. To prevent fraud and keep the platform secure - multi-account, proxy and bot detection, login verification for new devices or countries. Legal basis: our legitimate interest in protecting the service and honest users.
  3. To answer your support requests - legal basis: contract and legitimate interest.
  4. To send newsletters and promotional e-mails - legal basis: your consent, which you can withdraw at any time in Account Settings or via the unsubscribe link.
  5. To show ads and measure traffic - legal basis: our legitimate interest in funding a free service. You can object at any time (see sections 5 and 9).
  6. To meet accounting and legal obligations and to defend legal claims.

4) Automated Checks

  1. Our anti-fraud system can automatically hold a payout, restrict features or suspend an account based on IP address, device fingerprint and earning patterns.
  2. You have the right to a human review of any such decision. Write to [email protected] and a staff member will check it manually.
  3. We never profile you using health, religion, ethnicity, political opinions or sexual orientation.

5) Cookies

  1. Necessary cookies keep you logged in, secure your session and remember your language and theme. The Website does not work without them.
  2. Analytics and advertising cookies are set by our partners (including Google Analytics, offerwall and survey providers and advertising networks) when you visit the site. They collect your IP address, device and browser data, and the pages you view, and may be used to show you ads on other websites.
  3. We do not currently use a cookie consent banner. You can block or delete cookies at any time in your browser settings, use your browser's tracking protection, or opt out through the tools of the individual providers. Some site features may stop working if you block all cookies.
  4. You can also object to this processing by writing to [email protected].

6) Who We Share It With

  1. We never sell or trade your personal data, and your e-mail is never shown to other members.
  2. Payment providers - receive the payment ID and amount needed to send your payout.
  3. Offerwall, survey and advertising partners - receive a user ID and technical data needed to serve offers and confirm completions. They apply their own privacy policies.
  4. Our service providers - hosting, e-mail delivery, CDN and bot protection, on-site chat, acting on our instructions.
  5. Authorities and courts - where we are legally required to disclose data or need to defend a claim.
  6. Data we receive from Google when you sign in is never passed to any of the partners listed above - see section 2.
  7. Some providers are outside the EEA, mainly in the United States. Those transfers rely on an EU adequacy decision or the Standard Contractual Clauses.

7) How Long We Keep It

  1. Account and activity data - while your account exists and for 270 days after your last login, then deleted or anonymised.
  2. Payout and accounting records - for the period required by tax and accounting law, even after deletion.
  3. Anti-fraud records (IP addresses, device hashes, ban records) - normally up to 12 months, longer where needed to stop a banned user re-registering.
  4. Support messages - up to 3 years.

8) Deleting Your Account

  1. You can ask us to delete your account and your data at any time, for free and without giving a reason.
  2. How: send an e-mail from your registered address to [email protected] with your username and a clear request to delete the account.
  3. There is no delete button on the site. Because accounts hold a withdrawable balance, we verify every request by e-mail to protect you against account takeover and accidental deletion.
  4. We confirm your request and complete it within one month. Withdraw your balance first - deletion is permanent.
  5. We erase or anonymise your account, activity and login data, including any Google Account identifier stored under section 2; backups are overwritten within 90 days. We keep only payout records required by law and a minimal anti-fraud identifier, and we will tell you if we have to limit your request and why.
  6. If you prefer, you can instead ask us only to stop marketing e-mails, correct your data or restrict processing, and keep your account.

9) Your Rights

Under the GDPR you can, free of charge, request:

  1. Access - a copy of the data we hold about you.
  2. Rectification - correction of inaccurate or incomplete data.
  3. Erasure - deletion of your data, as described in section 8.
  4. Restriction - that we limit how we use your data.
  5. Portability - your data in a machine-readable format.
  6. Objection - to processing based on our legitimate interests, and to direct marketing at any time.
  7. Withdrawal of consent - at any time, without affecting past processing.
  8. Human review of automated decisions - see section 4.

Write to [email protected] from your registered e-mail address so we can verify your identity. We reply within one month. You also have the right to complain to the data protection supervisory authority in your country - the list is at edpb.europa.eu. UK users have the same rights under the UK GDPR and can complain to the ICO.

10) Security & Other

  1. We use encrypted connections, irreversible password hashing, session tokens, login verification for new devices and countries, optional two-factor authentication and restricted staff access. Plain-text passwords are never stored or known to us.
  2. We are not responsible for accounts compromised because your own device, e-mail or password was not kept secure. We recommend enabling two-factor authentication.
  3. The Website is not intended for anyone under 18 and we do not knowingly collect data from minors.
  4. We are not responsible for the content of third-party ads. If you click a link and leave our site, that website's own privacy policy applies.
  5. We may update this policy and will publish any change here with a new date. Important changes are announced by e-mail or on-site notice.

11) Contact

For any privacy question, a copy of your data or a deletion request, use our contact form or e-mail [email protected].