Privacy policy
Effective 2026-09-17-v3. This policy explains how Community Rewards handles information used to provide membership.
Information we use
We process your first and last name, display name, email address, country of residence, stated age and its confirmation date, account identifier, profile completion status, and recorded policy choices. You may provide a Telegram username. When you use Google sign-in, available profile information may include a profile photo. Passwords are managed by the authentication provider and are not visible to community administrators.
Why we use it
We use account information to authenticate members, assess published age and country eligibility, prevent duplicate or ineligible claims, fulfill rewards, respond to requests, and protect the platform. Age and country are self-declared, and fulfillment may require the checks disclosed in the campaign rules. We record policy versions, consent decisions, and timestamps so that choices can be honored and demonstrated. We also save onboarding completion, your intended return page, and dismissal of the optional Kick invitation.
Email preferences
Essential account and reward emails support the service you request. Promotional email is optional and off by default. You can opt out in Settings or by using the unsubscribe link in a promotional email. Delivery already in progress may complete before a withdrawal reaches the delivery provider.
Telegram preferences
Providing a Telegram username or linking Telegram is optional. A username alone does not connect the bot or authorize messages. When you initiate the bot connection, we store the Telegram user and private chat identifiers needed for requested account and reward updates. Promotional Telegram messages require a separate opt-in. Disconnect in Settings, or send /stop to the bot to disconnect and withdraw promotional Telegram consent.
Google sign-in
When Google sign-in is available and you choose it, Supabase receives the account identity and profile details authorized through Google to sign you in and prefill available profile information. Google authentication does not accept community policies or promotional messages on your behalf. You confirm missing registration details and your choices before entering the member space. A displayed Google profile photo may be served by Google.
Progress and reward records
We record campaign enrollment and its accepted rule version, token credits and debits, XP wheel outcomes, Gold and Super attempt outcomes, participation and bonus XP, membership levels, reward requests, fulfillment status, and account notifications. These records maintain your history, reserve campaign capacity, prevent repeated or invalid transactions, and support reward reviews. Tokens and XP are progression records and have no cash value. Cash reward records remain separate.
Optional sponsored activities
If a compatible rewarded-video provider is enabled and you choose an activity, a session identifier links its completion to your account. We record the provider and event identifiers, session timing, completion or cancellation status, and relevant failure information to validate the activity and avoid duplicate token awards. Opening or closing an advertisement is not evidence of completion. The provider may process information under its own privacy policy. Sponsored activities are optional. Daily check-ins and published missions offer other ways to make progress; rewards and limits are shown before participation. Offerwall completion awards only the coins and XP disclosed for that activity.
Kick verification and shared activity
If you request Super eligibility, we record your Kick username, submission reference, review status, administrator evidence and subscription expiry. A submitted name or link click is not verification. Changing the username invalidates its prior review. Sharing your activity is optional and off by default. When enabled, your display name, eligible earned XP, ranking and reward activity may appear publicly. You can withdraw in Community settings; your private transaction history remains available. Team-authored updates are identified separately from member activity. Administrative grants are excluded from weekly ranking.
Service providers
The platform uses Supabase for accounts, database records, and file storage; Vercel for hosting; Resend for email delivery; Google when you choose an enabled Google sign-in option; and Telegram when you choose to link your account. An enabled sponsored-video provider handles optional video activities. Opening the optional Kick channel link takes you to Kick, where its own terms and privacy policy apply; opening that link does not verify a follow. These services process the information needed for their respective functions and may process data outside your country.
Retention and your choices
Account and reward information is retained while needed to provide membership, fulfill requests, resolve disputes, and satisfy applicable obligations. Consent records are kept separately as evidence of your choices and are subject to documented retention and privacy-request procedures. You may request access, correction, account closure, or deletion by contacting the community team. Certain information may need to be retained for a specific legal obligation.
Cookies and security
Essential session cookies keep you signed in, and a return-destination cookie preserves the member page you intended to visit. No advertising provider is activated by default. Optional third-party activities may use their own cookies or similar technologies as explained in the provider’s privacy policy and any required consent choices. Administrative credentials remain on the server, access to member records is restricted, and private reward downloads use temporary access links. Contact the community team to report a privacy concern.