Privacy Policy

Last updated 21 September 2026

This page lists the personal data Ernoxa keeps, why, who else receives any of it, and what you can do about it. We collect what running a rewards account needs and what protecting it against fraud needs, and nothing for advertising.

1. What we collect

Account: your email address, a hash of your password (never the password itself), your Google account id if you sign in with Google, and your country.
Profile, if you add it: name, date of birth, postal code and time zone.
Sign-in and security: the IP address and browser of each session, and a device fingerprint. The fingerprint is a one-way hash of a few browser properties (such as browser version, language, time zone and screen size); it is used to spot several accounts on one device.
Activity: which opportunities you were shown and started, how long you were active, and the rewards, reversals, withdrawals and disputes on your account.
Payment methods: the payout details you enter, stored encrypted.
Two-step verification: your authenticator secret, stored encrypted, and hashes of your recovery codes.

2. Why we use it

To run your account, credit rewards and pay withdrawals.
To show you opportunities that match your country and device.
To prevent fraud and abuse, including multiple accounts.
To send you the emails you chose in Settings, and security alerts.
To keep the financial records the ledger and the law require.

3. Who receives it

Reward partners: to show and track opportunities, a partner receives a random-looking identifier derived from your account (not your email or name), and your IP address and browser details when it needs them to target and verify activity. Each partner has its own privacy policy for what you do on its pages.
Payment providers: the payout details needed to send a withdrawal you request.
Google: only if you choose to sign in with Google.
Hosting and email: the website is served by Netlify; the API and database run on OVHcloud servers in France; emails are sent through our email provider.

We do not sell personal data and do not share it for advertising.

4. How long we keep it

Account and security data is kept while your account is open. Financial records (rewards, withdrawals and the ledger entries behind them) are kept for as long as accounting and anti-fraud obligations require, even after an account is closed. Public transparency reports contain only aggregates, and a period is not published when too few people earned in it to keep individuals anonymous.

5. Your choices and rights

See and update your profile in the app.
Choose which emails you receive in Settings. Security alerts are always sent.
See and end your active sessions in Settings.
Ask for a copy of your data, a correction, or deletion of what is not needed for financial records, using the contact below.

6. Cookies

Ernoxa uses only the cookies it needs to keep you signed in and secure. See the cookie policy.