Third-Party Service Categories
Last updated: May 12, 2026
To deliver the OpinionRush service we share limited personal information with third parties in the categories listed below. California law requires us to disclose the categories of third parties we share data with; it does not require us to publicly name specific providers, and naming some of them (for example, our fraud-prevention and bot-detection vendors) would reduce their effectiveness by helping adversaries plan around them. We therefore list the function of each service and the data category involved. The specific provider identity behind a category is available on written request for regulatory or data-subject-access purposes — email privacy@opinionrush.com.
This page complements Section 4 of our Privacy Policy. We update it as service categories change.
| Service category | Purpose | Data shared | Role under CCPA |
|---|---|---|---|
| Authentication & database provider | User accounts, session management, primary data store | All account data, session cookies | Service provider |
| Web hosting & delivery platform | Serverless function execution, content delivery network, product performance telemetry | Request metadata (IP, user-agent, path), pseudonymous analytics events | Service provider |
| Transactional email provider | Verification, cashout, privacy-request, and activation emails | Email address, email body content | Service provider |
| Payment processor — PayPal | Cashout payment processing | PayPal email address, payout amount | Third party (PayPal is the data controller for payment processing) |
| Error monitoring & performance tracing | Capturing application errors and slow-request diagnostics | Error stack traces, IP, user-agent, pseudonymous user ID | Service provider |
| Web analytics provider — Google Analytics 4 | Product analytics (page views, funnel events) | Pseudonymous ID, IP (IP-anonymized), user-agent, event metadata | Third party (sharing for analytics) |
| Advertising network — Google Ads | Ad conversion measurement and audience optimization | Pseudonymous ID, IP, user-agent, conversion event, SHA-256 hash of email address (Enhanced Conversions, computed in-browser, suppressed under GPC / opt-out) | Third party (sharing for cross-context behavioral advertising) |
| Advertising network — Microsoft Advertising (Bing Ads) | Ad conversion measurement and audience optimization | Pseudonymous ID, IP, user-agent, conversion event, SHA-256 hash of email address (Enhanced Conversions for Web, computed in-browser, suppressed under GPC / opt-out) | Third party (sharing for cross-context behavioral advertising) |
| Advertising network — Reddit Ads | Ad conversion measurement and audience optimization | Pseudonymous ID, IP, user-agent, conversion event, SHA-256 hash of email address (Reddit Advanced Matching, computed in-browser, suppressed under GPC / opt-out) | Third party (sharing for cross-context behavioral advertising) |
| Bot-detection / CAPTCHA service | Blocking automated signups and form abuse | IP, user-agent, browser fingerprint signals | Service provider |
| Fraud-prevention & risk-detection service | Detecting fake accounts, automated traffic, and multi-accounting to protect the rewards program at signup, onboarding, profile completion, and cashout | Pseudonymous user ID, email, device fingerprint, network signals (IP, VPN/Tor/proxy indicators), behavioral signals during form submission | Service provider (security and fraud-detection business purpose) |
| Survey network partners | Delivering third-party surveys to qualified panelists and attributing completions | Anonymized click tokens, IP, user-agent at click time, limited demographic attributes for targeting | Service provider |
| Rate-limiting & caching service | Preventing abuse of sensitive endpoints (auth, cashout, API) | Request identifiers (user ID or IP) held for short sliding windows | Service provider |
Per-Network Advertising Opt-Out URLs
In addition to the in-product opt-out (Settings → Privacy) and the Global Privacy Control browser signal, you can opt out of personalized advertising at the network level using the URLs below. Both also stop the underlying analytics signal we receive from these networks.
- Google Ads / Google Analytics: adssettings.google.com (personalized advertising) and tools.google.com/dlpage/gaoptout (Google Analytics opt-out browser add-on).
- Microsoft Advertising: account.microsoft.com/privacy/ad-settings.
- Reddit Ads: reddit.com/settings/account (Reddit account → Safety & Privacy → “Personalize ads”). For non-Reddit-account users, ad personalization can also be limited via the network-level opt-outs at optout.aboutads.info.
Categorization under CCPA/CPRA
California law distinguishes three vendor roles. Service providers receive personal information only to perform specific business purposes on our behalf and are contractually bound to use that data only for our stated purposes. Contractors operate under similar written restrictions — they may not sell or share personal information, nor use it outside the business-purpose scope we define. Third parties may use the personal information they receive for their own purposes, subject to the consumer's right to opt out of sale or sharing. You can exercise that opt-out at any time through our Do Not Sell or Share page.
Data Processing Agreements
We maintain or rely on standard data-processing agreements with each service provider in the categories listed above. A summary of a specific agreement — including the provider's identity — is available on written request for regulatory or data-subject-access purposes. Email privacy@opinionrush.com.
Changes
When we add, remove, or materially change a service-provider relationship we update this page and (for significant changes) the Privacy Policy.
Full Privacy Policy
For complete details about how we collect, use, and protect your personal information, please read our Privacy Policy.