• Art. 6(1)(a) — Consent: You gave clear consent for a specific purpose (e.g., newsletters, analytics).
• Art. 6(1)(b) — Contract: Necessary to fulfill our service agreement (e.g., account management, payouts).
• Art. 6(1)(c) — Legal Obligation: Required by law (e.g., financial record-keeping).
• Art. 6(1)(f) — Legitimate Interests: Fraud prevention, platform security, and partner quality assurance.

• TLS/SSL Encryption (HTTPS): All transmitted data is encrypted end-to-end.
• Access Controls: Physical and electronic access is restricted to authorized personnel.
• Fraud & VPN Detection: We analyze device fingerprints, IP addresses, and usage behavior to detect proxies, VPNs, and multi-accounting under Art. 6(1)(f) GDPR.
• Privacy by Design: Data protection is integrated from the earliest stages of system design.

Your data may be shared with third parties only where necessary — IT providers, payment processors, offerwall partners, or email services. Data processing agreements are in place in all cases. We do not sell your personal data.

For transfers to the USA, we rely on:

• EU-U.S. Data Privacy Framework (DPF) — recognized as adequate by the EU Commission (July 10, 2023).
• Standard Contractual Clauses (SCCs) — as a secondary safeguard.

For other third countries, we apply SCCs, explicit consent, or other legally required mechanisms.

We delete personal data once the processing purpose no longer applies and no legal obligation requires retention.

Contact us at support@prizehour.com to exercise your rights.

We process data of users and clients to deliver services, manage billing, and safeguard business operations. Data is deleted after statutory warranty periods — generally 4 years, or up to 10 years for tax records.

Payouts are processed via encrypted channels. We do not store bank or card details — only payment confirmation status is received by us.

FaucetPay — Crypto Payouts

Transaction data (wallet address, amount, transaction ID) is transmitted to FaucetPay under Art. 6(1)(b) GDPR. FaucetPay Privacy Policy

Access logs are retained for a maximum of 30 days for security purposes, then deleted.

• Hetzner Online GmbH — Server hosting (Germany). Privacy Policy
• Cloudflare, Inc. — CDN & DDoS protection (USA — DPF certified). Privacy Policy
• Brevo (Sendinblue GmbH) — Email delivery (Germany). Privacy Policy

• Session Cookies: Deleted when you close your browser.
• Persistent Cookies: Stored up to 2 years for login state and preferences.

Cookies requiring consent are only set after your approval. You can manage or revoke cookie consent at any time via your browser settings.

• We collect username, email, password (hashed), and IP address at registration.
• Pseudonyms (usernames) are permitted instead of real names.
• User profiles are not publicly visible by default.
• Two-factor authentication (2FA) is available for additional security.
• Account data is deleted upon termination, subject to legal retention obligations.

Community chat posts are publicly visible. IP addresses and timestamps are stored for security. Conversation contributions may be retained in anonymized form after account deletion. You may request full deletion at any time.

You may log in via Google. We receive only a user ID and authentication confirmation — we never see or store your Google password. Google Ireland Limited, Dublin 4, Ireland. Transfers: DPF. Privacy Policy

When you contact us, we process your name, contact details, and message solely to handle your inquiry. Data is deleted after resolution, subject to legal retention periods.

Newsletters are sent only with explicit consent. Unsubscribe anytime via the link in any email. After unsubscribing, your email may be retained on a suppression list for up to 3 years. Sent via Brevo (Germany). Privacy Policy

Participant data is deleted no later than 6 months after the contest ends. Winners' data may be kept up to 3 years for prize fulfillment.

Survey responses are evaluated anonymously. Personal data is only processed to the minimum extent technically necessary to display and resume surveys.

We use Google Analytics with pseudonymous user IDs. EU user IPs are not logged — only coarse geographic data (city/country) is derived and immediately anonymized.

• Opt-Out: Google Analytics Opt-Out Plugin
• Ad settings: myadcenter.google.com

When completing tasks, technical tracking data is exchanged with offerwall providers solely for commission attribution. We use or reserve the right to use the following networks:

• Instagram / Facebook — Meta Platforms Ireland Ltd. Privacy Policy | DPF + SCCs
• LinkedIn — LinkedIn Ireland Unlimited Co. Privacy Policy | DPF + SCCs
• X (Twitter) — X Internet Unlimited Co., Ireland. Privacy Policy
• YouTube — Google Ireland Ltd. Privacy Policy | DPF

• Google Fonts: Hosted on our own servers — no data sent to Google.
• YouTube Videos: Loaded with your consent. Google Privacy Policy

We update this Privacy Policy as needed. If changes require your action (e.g., renewed consent), we will notify you directly. Please check this page regularly for the latest version.