Privacy Policy

1. What We Collect

When you use Crypto Hits, we collect the following types of information:

• Account data: email address, username, password (hashed — never stored in plain text).
• Activity data: surf history, credit transactions, payout requests, referral activity.
• Technical data: IP address (logged per surf for anti-fraud purposes), browser session data.
• Payout data: wallet addresses or FaucetPay account details you provide when requesting a cashout.

2. How We Use Your Data

• To operate the platform and process your earnings and payouts.
• To detect and prevent fraud, bot abuse, and policy violations.
• To send transactional emails (email verification, payout confirmations, password resets).
• To send occasional announcements or newsletters if you have not opted out. You may opt out at any time via your profile settings.
• To improve the platform through aggregate, anonymised analytics.

3. Data Sharing

We do not sell your personal data. We do not share your data with third parties except:

• Payment processors (FaucetPay, NOWPayments, PayPal) when you initiate a payout — only the data necessary to process the transaction.
• Law enforcement if required by a valid legal process or to prevent imminent harm.

4. Cookies

We use session cookies to keep you logged in. We do not use tracking cookies for advertising purposes. Third-party ad networks displayed on our site (such as a-ads) may set their own cookies — please review their privacy policies separately.

5. Data Retention

We retain your account data for as long as your account is active. If you close your account, your personal data is deleted within 30 days. Surf history and transaction records may be retained for up to 12 months for audit purposes.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact support with your request.

7. Security

We use industry-standard security practices including password hashing (bcrypt), HTTPS encryption, CSRF protection, and session security. However, no system is 100% secure. Please use a strong, unique password and do not share your credentials.

8. Contact

For privacy-related questions or data requests: contact our support team.