Privacy Policy

1. Information We Collect

We collect the following categories of personal information:

2. How We Collect Information

We collect personal information through:

• Directly from you: When you register for an account, complete the onboarding profile, update your settings, or submit a cashout request.
• Automatically: We collect your IP address, browser type, user-agent, device information, and product-usage events when you access the Service. These are collected via server logs, cookies, and JavaScript-based analytics (a third-party web analytics provider and our hosting provider's usage-telemetry service — see /privacy/vendors).
• Marketing attribution: When you first arrive on the Service, we capture the referring URL, landing page, UTM parameters, and advertising click IDs (advertising click identifiers from advertising networks) and store them in your browser's localStorage. If you sign up, these are attached to your account so we can understand which channels and campaigns produce users.
• From third parties: We receive survey completion data and status updates from our affiliate networks and survey providers to verify completions and credit coins.

3. How We Use Your Information

We use the personal information we collect for the following purposes:

• Provide the Service: Match you with relevant surveys based on your demographic profile, track your coin balance, and manage your account.
• Process payouts: Facilitate cashout payments via our payment processor using the payout email address you provide.
• Fraud prevention: Detect and prevent fraudulent activity, including duplicate accounts, bot usage, and survey manipulation.
• Communication: Send you account-related emails, including cashout confirmations, survey reminders, and important service updates.
• Improve the Service: Analyze usage patterns and errors to improve the performance, reliability, and user experience of OpinionRush.
• Legal compliance: Comply with applicable laws, regulations, and legal obligations.

4. How We Share Your Information

We may share your personal information with the following categories of third parties:

• Survey providers and affiliate networks: We share anonymized demographic data (such as age range, gender, and zip code) with survey providers and affiliate networks to match you with relevant surveys and to receive completion callbacks. We do not share your name or email with these providers; each click is identified by a one-time token.
• Payment processors: We share your payout email address with our payment processor to process cashout payments.
• Email delivery: We use an email delivery provider to send transactional and reminder emails. It receives your email address and the contents of the messages we send you.
• Hosting and infrastructure: The Service is operated on cloud hosting and database platforms that receive routine infrastructure data (e.g., IP addresses, request metadata) necessary to serve pages and manage authentication. Our hosting provider also offers an anonymized usage-telemetry tool that we use to monitor performance.
• Error monitoring: We use a third-party error-monitoring service to capture and diagnose bugs. It may receive technical data such as IP address, browser type, and error context.
• Fraud-prevention and bot-detection service: We use a third-party fraud-prevention service to distinguish real users from bots, fake accounts, and multi-accounting at security-sensitive moments (signup, onboarding, profile completion, cashout request). We share a pseudonymous user identifier, email address, device fingerprint, network indicators (IP, VPN / Tor / proxy signals), and behavioral signals collected during form submission. This provider is a service provider under CCPA §1798.140(e)(8); the data is used solely for security and fraud prevention, is not sold, and is not shared for cross-context behavioral advertising. Because the purpose is security, this category is not subject to the Global Privacy Control opt-out.
• Product and advertising analytics: We use a third-party web analytics provider to understand how people use the Service (page views, survey starts, completions, bonus claims, cashout requests) and one or more advertising-conversion networks to measure signups driven by our ad campaigns. They receive a pseudonymous identifier, IP address, user-agent, and the specific events listed above. See Section 5 for the tracking technologies involved and /privacy/vendors for the specific service providers and per-network opt-out URLs.
• Law enforcement: We may disclose your personal information if required to do so by law, in response to a subpoena or court order, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

The categories of third parties we share personal information with, their roles under CCPA (service provider / contractor / third party), and the data each category receives are published at /privacy/vendors and updated as those relationships change. California law requires disclosure of categories of third parties; it does not require us to publicly name specific providers, and for some categories (notably fraud-prevention and bot-detection) naming the specific provider would reduce its effectiveness. The specific provider identity behind a category is available on written request for regulatory or data-subject-access purposes — email privacy@opinionrush.com.

We do not sell your personal information for money. Our use of third-party analytics and advertising-conversion services may qualify as "sharing" personal information for cross-context behavioral advertising purposes under California law. You may opt out of this sharing — see our Do Not Sell or Share page.

5. Cookies & Tracking Technologies

OpinionRush uses the following cookies and tracking technologies:

• Authentication cookies (strictly necessary): Set by our authentication provider to keep you signed in and manage your session.
• Bot-protection challenge (strictly necessary / security): Our third-party CAPTCHA provider may set cookies during signup and sensitive actions to verify that you are a real person.
• First-party marketing attribution (localStorage): We store referrer, landing page, UTM parameters, and ad click IDs in your browser's localStorage (key opinionrush_attribution) so we can attribute your eventual signup to the marketing channel that brought you here.
• Web analytics (analytics): A third-party web analytics provider sets first-party cookies (e.g. _ga, _ga_*) to measure how people use the Service. We send custom events for key product actions such as survey_start, survey_complete, bonus_claimed, and cashout_requested. The specific provider is listed at /privacy/vendors.
• Advertising-conversion tracking (advertising): One or more third-party advertising networks fire a conversion event when you complete onboarding so we can measure which of our ad campaigns actually produce users. These networks set first-party cookies (e.g. _gcl_*, _uet*, MUID). When your email address is available at the moment of signup, a SHA-256 hash of that email is also transmitted as "Enhanced Conversions" data so the network can attribute the signup when its ad click identifier is unavailable. The hash is computed in your browser and is suppressed when you set Global Privacy Control or otherwise opt out of sharing. The specific networks and per-network opt-out URLs are listed at /privacy/vendors.
• Hosting provider analytics (analytics): Our hosting provider's anonymized performance and page-view telemetry helps us diagnose slowness and route issues.
• Error monitoring (operational): Captures and diagnoses errors in the Service to improve reliability.

You can block analytics and advertising cookies at any time by using your browser's tracking-protection settings or a reputable ad blocker. Blocking them does not affect your ability to use the Service or receive payouts.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service. Specific retention periods:

• Account data: Retained while your account remains active. You may request deletion at any time.
• Signup IP address: The IP address used to create your account is retained on your profile until account deletion and is used to detect referral-program abuse (for example, multiple accounts from the same address claiming referral bonuses).
• Transaction and completion records: Financial records (earnings, cashouts, transactions) and survey-completion records are retained for seven (7) years to comply with financial record-keeping obligations and to resolve disputes with survey providers.
• Deletion on request: When you request account deletion, we anonymize your account within 45 days. Specifically: your name, date of birth, gender, zip code, household income, education, employment status, signup IP, and payout email are cleared; your email address is replaced with a non-identifying placeholder so your transaction history remains linkable for financial records without containing personal data. Fraud-prevention records associated with your account (pseudonymous identifier, risk scores, and audit log entries) are deleted, and we request deletion of your record from our fraud-prevention service provider via their deletion API.

7. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) grants you the following rights:

• Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you.
• Right to delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions.
• Right to correct: You have the right to request that we correct inaccurate personal information.
• Right to opt out of sale/sharing: We automatically honor the Global Privacy Control (GPC) browser signal as an opt-out request for "sharing." You can also toggle opt-out in Settings → Privacy (when signed in), or email us.
• Right to non-discrimination: We will not discriminate against you for exercising any of your privacy rights.
• Right to limit sensitive personal information: We do not collect "sensitive personal information" as defined by CPRA §1798.140(ae), so this right does not apply to our service.

Signed-in users can exercise the right to know (data export), right to delete, and right to opt out directly from Settings → Privacy. The Privacy Settings page also explains how authorized agents (with notarized power of attorney or California Secretary of State certification per 11 CCR § 7063) can submit requests on your behalf.

To exercise any of these rights, please contact us at support@opinionrush.com. We will verify your identity before processing your request and respond within 45 days as required by law.

8. Do Not Sell or Share

OpinionRush does not sell your personal information to third parties for monetary consideration. Our use of third-party analytics and advertising-conversion services may qualify as "sharing" personal information for cross-context behavioral advertising under the CCPA/CPRA. For details about what we share, how to opt out, and the tools you can use to block this sharing, visit our Do Not Sell or Share My Personal Information page. Our application automatically suppresses advertising and analytics tracking when your browser sends a Global Privacy Control signal.

8.5. Financial Incentive Program

We operate a coins-for-data financial incentive program under CCPA §1798.125(b). Complete terms, a good-faith valuation, and your right to withdraw are disclosed on our Financial Incentive Notice page.

9. Do Not Track Signals

Some web browsers transmit "Do Not Track" (DNT) signals to websites. At this time, OpinionRush does not respond to DNT browser signals, as there is no industry-standard technology for recognizing or honoring DNT signals. If a standard is established in the future, we will update this policy accordingly.

10. Children's Privacy

OpinionRush is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will promptly delete that information. If you believe a child has provided us with personal information, please contact us at support@opinionrush.com.

11. Security

We implement industry-standard security measures to protect your personal information, including:

• Row-Level Security (RLS) policies on all database tables to ensure users can only access their own data.
• Encrypted connections (HTTPS/TLS) for all data transmitted between your browser and our servers.
• Secure authentication through our authentication service provider with session management and token-based access controls.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page. For material changes, we will notify you by email at the address associated with your account. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at support@opinionrush.com.