Privacy Policy

What IdlePay collects, why, and how long we keep it.

What we collect

• Account: your email, a salted hash of your password, two-factor settings and referral relationships.
• Devices and connections: device name, operating system, app version, and each connection's public IP address with its approximate location (country, region, city), network operator and connection type.
• Usage: bytes relayed per connection and per day, connection times and uptime.
• Payouts: your payout addresses, withdrawal history and, when verification is required, your identity-verification status plus a one-way fingerprint that stops one identity verifying several accounts.
• Security logs: sign-in attempts with IP address and browser, and a record of account and payout-address changes.

We don't record the contents of traffic that passes through your connection. See the Bandwidth Sharing Agreement for the metadata we keep about it.

Why

To run the service and pay you; to detect fraud such as multiple accounts or disguised connections; to keep accounts secure; and to meet legal obligations.

Who we share it with

Service providers that operate parts of IdlePay for us — hosting, email delivery, our crypto payout processor and, when used, an identity-verification provider — only as needed for that purpose. We share information with authorities when the law requires it. We never sell your personal information, and partners that route traffic through the network don't receive your account details.

Cookies

We use a session cookie to keep you signed in and a security cookie that protects forms. We don't use advertising trackers. Our pages load fonts and scripts from third-party content delivery networks, which see your IP address when they serve them.

Retention

Account and earnings records are kept while your account is open and afterwards as long as needed for accounting, tax and fraud-prevention obligations. Security logs and connection metadata are kept for a limited period, then deleted or aggregated.

Your rights

You can ask for a copy of your data, its correction or its deletion, subject to the records we must keep by law. Use the email address on your account so we can verify the request.

Changes

We'll post updates here and notify you of material changes.