Privacy Policy

1. Information we collect

We collect the following:

• Account details you provide, such as your email address, display name, and password (stored only as a secure hash, never in plain text).
• Activity data, including points earned and spent, offers and surveys completed, redemptions, referrals, levels, and daily streaks.
• Technical data, such as your IP address, device and browser (user agent) information, and pages visited. Your IP is used to help offer providers match surveys and to detect fraud.
• Security data, such as two-factor authentication settings and challenge results.

2. How we use your information

• To operate the Service — crediting points, processing redemptions, and paying referrals.
• To match you with relevant offers and surveys through our providers.
• To detect, prevent, and investigate fraud, abuse, and violations of our Terms.
• To secure accounts, including two-factor authentication and bot protection.
• To understand usage and improve the Service.
• To communicate with you about your account or support requests.

3. Cookies and analytics

We use cookies that are necessary to sign you in and keep your session secure. We also use Google Analytics to understand how the Service is used; it may set cookies and collect usage and device information. We use Cloudflare Turnstile to protect sign-up, login, and promo-code redemption from bots. If you choose social sign-in, we receive a basic profile (and email when the provider shares one) from Google, Discord, or Telegram.

4. How we share information

We share information only as needed to run the Service:

• Offer providers (such as Lootably and CPX Research) receive an identifier for your account and your IP address so they can serve offers and report completions back to us.
• Fulfillment providers (such as Boosts.to) receive the details needed to deliver a reward you redeem, such as a Discord invite link.
• Infrastructure and security providers (such as Cloudflare) and Google Analytics process data on our behalf.
• Legal and safety — we may disclose information if required by law or to protect the rights, safety, and property of rewrrd, our users, or others.

We do not sell your personal information.

5. Data retention

We keep your information for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. We may retain limited records after account closure for fraud prevention and legal purposes.

6. Security

We protect your account with measures including password hashing, optional two-factor authentication, and bot protection. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password and two-factor codes confidential.

7. Your choices and rights

You can update your email and password, enable or disable two-factor authentication, and manage your account from your settings. Depending on where you live, you may have rights to access, correct, or delete your personal information. To make a request, use the Contact page or open a Help ticket after you sign in. You can also opt out of Google Analytics using Google’s browser add-on.

8. Children

The Service is not directed to, and may not be used by, anyone under 18 years of age. We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Your continued use of the Service after changes take effect means you accept the revised policy.

10. Contact

Questions about this Privacy Policy can be sent through the Contact page.