Privacy Policy

This Privacy Policy explains how Geekbux Interactive, a company based in Sweden, collects, uses and shares your personal data when you use Earnit (earnit.gg). We are the controller of that data. This means we decide why and how it is used, and we are responsible for it under the General Data Protection Regulation, Regulation (EU) 2016/679 (the "GDPR"), and Swedish data protection law. Read this policy together with our Cookie Policy, which describes the cookies we set, and our Terms of Service, which govern your use of Earnit. Where we rely on your consent for something, we ask for it separately, rather than treating your use of Earnit as agreement.

Key Points

• We collect what we need to run your account, credit your rewards, pay you out and prevent fraud.
• Offers and surveys come from partners, who collect data inside their own offers and surveys under their own privacy policies.
• Identity verification is optional, and only our own staff review what you send.
• We do not run advertising or analytics trackers on our own site, we do not build advertising profiles, and we do not sell your personal data. We never have and we never will.
• You can access, correct, download or delete your data at any time by writing to privacy@earnit.gg.

These points are a summary, and the sections below apply in full.

We collect information you give us, information created as you use Earnit, and information collected automatically from your device. The table below sets out each category and where it comes from.

Category	What we collect	Where it comes from
Account	Your email address, your username, your sign-in details and your settings, such as your language and security preferences. Where you sign in with Google or Steam, or link your Discord account, the basic profile that service shares with us	You, or the sign-in service you use
Activity	The offers, surveys and tasks you take part in, the rewards you earn, your balance history and your withdrawals	Created as you use Earnit
Completions	The confirmation a partner sends us when you complete an offer or a survey, recording which one it was, the reward and its status	The partner
Profile details	The optional details you choose to give, which are your date of birth, your gender and your postal code, used to match you with offers and surveys you are eligible for	You
Device and connection	Your IP address and the approximate location it indicates, information about your device and browser, and security information derived from them to protect accounts against fraud	Collected automatically
Payout details	What a withdrawal needs to reach you, such as the cryptocurrency wallet address and network you choose, and a record of where each withdrawal was sent	You, when you withdraw
Identity verification	The personal details you enter, the date of birth you declare, government identity document images and proof of address	You, if you choose to verify
Content	Chat messages, survey feedback and support conversations	You
Referral	The referral link that brought you to Earnit, so that the person who referred you gets credit	The link you followed
Usage	Timestamps, the pages and features you use, and error logs recorded by our servers	Collected automatically

We never see the password you use with Google, Steam or Discord, and we cannot read the password you set on Earnit. We do not collect special category data, such as information about your health, your religion or your political views, and you should not send us any. For the cookies and browser storage we use, see our Cookie Policy.

We use your personal data only for the purposes below, and each purpose rests on a legal basis under the GDPR.

Purpose	Legal basis
Running your account, crediting rewards and paying you out	Performance of our contract with you, Art. 6(1)(b)
Preventing fraud, abuse and multiple accounts, and keeping Earnit secure	Our legitimate interest in protecting honest members and Earnit, Art. 6(1)(f)
Answering your support requests and handling disputes	Performance of our contract with you, Art. 6(1)(b), and our legitimate interest in resolving complaints, Art. 6(1)(f)
Understanding how Earnit is used, in aggregate, so that we can fix problems and improve it	Our legitimate interest in running a service that works, Art. 6(1)(f)
Optional cookies	Your consent, Art. 6(1)(a), which you may withdraw at any time
Offers, news and reminders about your account, sent to members	Our legitimate interest in telling our members about Earnit's own services, Art. 6(1)(f); you may object at any time, from your settings or with the unsubscribe link in any such email
Accounting, tax and anti-money-laundering records	Compliance with our legal obligations, Art. 6(1)(c)

Where we rely on legitimate interests, we have weighed them against your rights and freedoms and concluded that the processing is proportionate. You may object to it, as described under Your Rights.

Essential service messages, such as security notices and withdrawal updates, are part of running your account rather than marketing, and we send them while your account is open. Offers, news and reminders go to every member unless you turn them off, which you can do at any time from your settings or with the unsubscribe link in any of those emails. Improving Earnit does not involve profiling you for advertising, and we do not analyze you for advertising of any kind.

Automated Decisions

Because Earnit pays real rewards, we check activity automatically for fraud, and a check can hold a withdrawal or pause an account. The checks look for things such as one person running several accounts, automated activity, or a hidden location or device. We do not publish how they work, because that would help people get around them.

Where an automated decision has a legal or similarly significant effect on you, Art. 22 gives you the right to have a person review it, to express your point of view and to contest the decision. Write to privacy@earnit.gg and a person will review it. We will always tell you when a decision has affected your account.

Identity Verification

Identity verification is optional and offered in your profile. It is never required to make a withdrawal, and choosing not to verify limits nothing. It starts with details you enter yourself, and further steps, a government identity document and proof of address, are offered when they become available.

Our own staff review what you send. We do not use an outside verification company, and only the staff who carry out verification can see your documents. We delete document images a set period after you submit them, whether or not the review has finished. We keep the record that verification took place, at what level and with what outcome, because anti-money-laundering rules require us to be able to show it. Identity verification has an age requirement of 18, based on the date of birth you declare. The legal bases for this processing are our legal obligations, Art. 6(1)(c), and performance of our contract with you, Art. 6(1)(b).

We share personal data only where it is needed to run Earnit. We do not sell your personal data, and we do not share it with data brokers.

Recipient	What they receive	Their role
Offer partners	An identifier that lets them credit your completions; your age, gender and postal code, where they use them to decide which offers you can see; and your IP address, where they tailor their offers to where you are	Separate controllers
Survey partners	The same identifier; your age, or your date of birth where they need the exact date, your gender and your postal code, to match you with surveys; your country and IP address, to show you surveys available where you are; your email address, to recognize you across their surveys; and what kind of device you are using	Separate controllers
A partner site that sent you to Earnit	The reference it gave your visit, and whether you signed up, reached an earning goal or made a withdrawal, so that it can reward you	Separate controllers
Fraud-prevention services	Your IP address and information about your browser and device, to help keep accounts secure and prevent fraud	Processors acting on our instructions
Payment partners	Only what a withdrawal needs to reach you	Independent regulated companies
Infrastructure suppliers	What their service needs to handle, for hosting, databases, content delivery and email	Processors acting on our instructions
An error-monitoring service	The technical details of an error and of your request, including the IP address your device connected from and, if you were signed in, your account reference	Processors acting on our instructions
Picture services	The IP address and browser your device uses when a profile picture loads, and an account reference used to create default profile pictures	Separate controllers
Authorities and professional advisers	Only what the law requires, or what is needed to establish, exercise or defend a legal claim	Independent controllers
A buyer of our business	Your data, if Earnit is merged, acquired or sold	The new controller, after we tell you

Offer and survey partners are separate controllers for the data they collect inside their own offers and surveys, under their own privacy policies. We cannot see, and do not receive, anything else you choose to give them. Our processors handle personal data only on our instructions, under written agreements that require them to protect it.

A profile picture loads from a picture service on every page that shows one, whether it is yours or another member's, so this sharing happens as soon as such a page opens.

What Other Members Can See

Some information is visible to other members because the feature is public by design. Your username and avatar appear next to anything you do publicly: your chat messages are visible to everyone in the room, your rank appears on leaderboards you qualify for, your activity can appear in the live activity feed, and after you complete or rate an offer, you appear on that offer's completions and ratings. Your email address, your payout details and your identity documents are never shown to other members.

Your profile is public until you turn on "Private profile" in your profile settings. Anyone can open a public profile, including visitors who are not signed in, and it shows your username, avatar and country, your level, your earnings, how many offers you have completed, how many people you have referred, your recent tasks and the date you joined. A private profile hides your level, your earnings, those counts, your recent tasks and the date you joined from your profile page. The member who referred you also stops seeing the date you joined and whether you were active in the last 30 days. Your username and avatar stay visible, and on an offer's completions and ratings your username and avatar are replaced by "Anonymous". A private profile also hides your country everywhere other members can see you. A private profile does not hide the level badge beside your messages in the chat, or your rank and the amount you earned on a leaderboard you qualify for.

Earnit is operated from Sweden. Our infrastructure suppliers are located in the EU and, in some cases, in the United States. When personal data is transferred outside the EU or the European Economic Area, we rely on a recognized safeguard so that it keeps a comparable level of protection wherever it is processed.

Destination	Safeguard we rely on
EU and EEA	No safeguard needed; the GDPR applies directly
United States	The EU-US Data Privacy Framework where the supplier is certified, otherwise the European Commission's Standard Contractual Clauses
Anywhere else	The European Commission's Standard Contractual Clauses, together with an assessment of the destination

If you would like to know which safeguard applies to a particular transfer, write to privacy@earnit.gg and we will tell you which one it is and why.

We keep personal data only for as long as we have a reason to. Different records have different reasons, so each has its own period, set out below.

Record	How long we keep it	What ends it
Account and profile data	While your account is open. The account record itself stays after deletion, because financial records must refer to it	Account deletion, as described below
Activity, rewards and balance history	While your account is open, and afterwards where bookkeeping law requires it. Your entries in the public activity feed are removed when your account is deleted	Account deletion, subject to bookkeeping law
Where your withdrawals were sent	Including the recipient a payment partner reported. Kept for 12 months after your account is deleted, so that we can investigate fraud and defend payment disputes, then deleted	12 months after account deletion
Financial and tax records	The period Swedish bookkeeping law requires	That period ending
Anti-money-laundering records	The period those rules require	That period ending
Identity document images	Deleted a set period after you submit them, whether or not the review has finished	That period ending
Sessions and one-time codes	Until they expire or are used; deleted when you ask us to delete your account	Expiry, sign-out or account deletion
Support conversations	While needed to handle your request and any follow-up, then for 12 months after your account is deleted, for the same fraud and payment-dispute reasons, then deleted	12 months after account deletion
Connection and device records	While your account is open, to prevent fraud and keep accounts secure, with no fixed period while the account exists. Deleted when your account is deleted, apart from records we keep without any link to you to prevent fraud	Account deletion
Offer and survey activity	Which offers and surveys you opened, while your account is open. Deleted when your account is deleted; the rewards they produced are kept as above	Account deletion
Completion records	The record that a completion was reported and paid. When your account is deleted, the parts that identify you are removed and the record stays	Account deletion removes what identifies you
Chat messages	Kept after your account is deleted, under an anonymous name, so that other members' conversations stay readable	Not removed by account deletion

Where we keep information for statistics or security beyond these periods, we anonymize it wherever we can, so that it no longer identifies you. Anonymized records are no longer personal data, so the rights below do not apply to them.

When You Delete Your Account

You may delete your account at any time. Deletion happens in stages, so that a mistake can be undone and the point of no return is clear.

Stage	What happens	Can it be undone
Immediately	Your account is deactivated and can no longer be used	Yes
For 30 days afterwards	Your data is kept so that you can change your mind and cancel the request	Yes
After those 30 days	Your personal data is deleted or permanently anonymized, apart from the records we must keep by law and the fraud records described above	No
For 12 months after that	Where your withdrawals were sent, and your support conversations, are kept only to investigate fraud and defend payment disputes, which can arise long after an account closes, then deleted automatically	No

Once those 30 days have passed, we cannot restore your account. Records we must keep by law, such as financial and tax records and the anti-money-laundering record, stay for the legal periods above and still refer to your account record, which is why that record is not removed.

Deleting your account is not your only option. If your concern is a particular piece of data, the rights below let you correct it, restrict its use or object to a purpose, without losing your balance or your history.

We use technical and organizational measures suited to the risk, including these:

• Traffic between your device and Earnit travels over encrypted connections.
• We cannot read the password you set on Earnit, and we never receive the password you use with a sign-in service.
• Two-factor authentication is available on every account, and we recommend turning it on.
• Access to personal data is limited to the people who need it for their work, and access to identity documents is limited further.
• The processors who handle data for us are bound by contract to a comparable standard.

We monitor for security problems, work to fix them promptly and review these measures as Earnit grows. No system is perfectly secure, and we will not claim otherwise. If a breach affects your rights, we will respond as the law requires and, where required, notify you and the supervisory authority without undue delay.

Under the GDPR you have the rights below over personal data that still identifies you. They do not apply to records we have anonymized, because we can no longer connect them to you.

Right	Article	How to use it
Access, and a copy of your data	Art. 15	Write to privacy@earnit.gg
Rectification of inaccurate or incomplete data	Art. 16	Your account settings, or write to us
Erasure, subject to data we must keep by law	Art. 17	Delete your account, or write to us
Restriction of processing	Art. 18	Write to us, saying which processing
Portability, in a machine-readable format	Art. 20	Write to us
Objection to processing based on legitimate interests	Art. 21	For offers, news and reminders, your settings or the unsubscribe link in any such email; otherwise write to us, saying which purpose
Human review of an automated decision	Art. 22	Write to us, describing the decision
Withdrawal of a consent you gave	Art. 6(1)(a)	The "Cookie preferences" control, or write to us

We might need to confirm your identity before we act, so that we do not give your data to the wrong person. We will reply within the period the law allows, normally within one month, and we do not charge for a reasonable request. Withdrawing consent does not affect processing that took place before you withdrew it.

You also have the right to lodge a complaint with a supervisory authority. In Sweden that is the Swedish Authority for Privacy Protection (IMY, Integritetsskyddsmyndigheten, imy.se). You may instead complain to the authority in the EU country where you live. We would like the chance to help first, but that is your choice.

We use a small number of first-party cookies to keep you signed in, remember your choices and protect Earnit against fraud. Optional cookies stay off until you allow them, apart from the exceptions our Cookie Policy names, and you can change your choices at any time with the "Cookie preferences" control on our Cookie Policy page.

We do not currently use advertising cookies, and we do not use analytics cookies that track you across the web or build a profile of you. This applies to our own site. When you open an offer or a survey, the partner running it might set its own cookies under its own policies, which we can neither see nor control.

Under Swedish law implementing the EU ePrivacy rules, strictly necessary cookies do not need your consent, and all other cookies do. That is why essential cookies are shown as always on, and why every other category stays off until you turn it on, apart from the exceptions our Cookie Policy explains. The Cookie Policy describes the cookies we set, what each one does and how long it lasts.

Earnit is for people aged 16 and over, and we do not knowingly collect personal data from anyone younger. If you are under 18, you may use Earnit only with the permission of a parent or guardian, and only where the law where you live allows it. Identity verification has its own age requirement of 18.

Art. 8 of the GDPR lets each EU member state set its own age for digital consent, and the age in Sweden is lower than the one we require. We set ours higher on purpose, because Earnit involves real payouts and payout details, and because a rewards service is not something a young child should use unsupervised.

If we learn that an account belongs to someone under 16, we will close it and delete the personal data linked to it, apart from any record the law requires us to keep in anonymized form. If you are a parent or guardian and believe a child under 16 has given us personal data, write to privacy@earnit.gg and we will remove it. Our Terms of Service set the same age requirement for holding an account.

We may update this policy as Earnit changes or as the law requires, and we will change the effective date at the top of this page when we do. Where a change is material, for example if we start collecting a new category of personal data, use a new kind of processor or rely on a new legal basis, we will tell you where it is appropriate to do so.

We keep our Cookie Policy up to date with the cookies we set, and we update this policy whenever what we collect or share changes. We encourage you to read this policy from time to time.

For a privacy question, or to use one of your rights, write to privacy@earnit.gg. A person handles every request, and we will tell you what we have done. For anything else, our support team is at support@earnit.gg. Our Affiliate Policy covers the data involved in referring other people. Earnit is operated by Geekbux Interactive, a company based in Sweden.