Privacy Policy.

1. Who is responsible for your data

Moonetix is operated by Shark Earnings LLP, whose details are at the bottom of this page. For the processing described in this policy, Shark Earnings LLP is the data controller. Privacy inquiries go to privacy@moonetix.com.

When our offerwall runs inside a publisher's website or app, the publisher is a separate controller for its own user accounts, rewards, and payouts. Section 5 explains how responsibilities are divided in that situation. Where a publisher instructs us to process data only on its behalf under a data processing agreement, we act as its processor for that processing.

2. Whose data this policy covers

• Account holders and business contacts: the people who register and manage Moonetix accounts, apply as publishers, or contact us on behalf of a business, including advertisers we work with under a custom integration.
• End users: people who open a Moonetix offerwall inside a publisher property and view or complete offers. End users do not have a Moonetix account; they are identified to us only through the publisher.
• Visitors: people who browse moonetix.com without an account.

3. What data we collect

Account holders and business contacts. Username, email address, a one-way hash of your password, the verification status of your email address, and, if you sign in with Google or Discord, the account identifier, email address, and display name we receive from that provider (we never receive your Google or Discord password). If you turn on login verification by email, we keep a list of your trusted devices with the browser and system name and the IP address each was added from. If you fill in the optional billing details in your account settings, we keep your full name, company name, postal address, and country, and use them on invoices and payout records. Publishers who add a payout method give us the chosen coin and network and their wallet address, which we keep to send payouts. We also keep the details of your publisher application, such as your contact app and handle, your website or app, its monthly active users, and its description, settlement and payout details needed to pay publishers, support correspondence (including the name, email address, topic, and message you send through our contact form), and sign-in records such as time and IP address. For advertisers we work with under a custom integration, we keep the business contact details, the agreed terms, and the invoices and payment records of that integration.

End users. The pseudonymous user identifier the publisher assigns to you, the publisher and property you came from, your IP address and the approximate location and internet provider derived from it, device, browser, and language characteristics, a device identifier used for fraud prevention, the offers you view, start, and complete, for older completions that required it the proof you submitted, such as answers or screenshots, completion and reversal status with timestamps, and the click identifiers exchanged with offer partners. We ask publishers not to send us names, email addresses, or other direct identifiers, and the offerwall does not ask you for them.

Visitors. IP address, browser and device information, the pages you request, your cookie choice, and the result of security checks that protect our forms.

Messages and reports. When you use our contact form, write to us in the support chat in your dashboard, or report a missing reward, we receive your name, email address, and message, and any image you choose to send in the chat. Chat images are stored privately, shown only to you and our team, and deleted 90 days after the conversation is closed. For a reward report the site or app you use, your user identifier there, the offer, and the date. To answer a reward report, we look up your clicks and results with that identifier on that site and, when needed, send the advertiser the details of that click so they can check it.

Data from third parties. Confirmations, rejections, and reversals from advertisers and offer partners, risk signals from security providers, and payment status from payment providers.

4. Why we use it, and on what legal basis

Where we rely on legitimate interests, we have weighed them against your rights and freedoms. You can object to that processing as described in section 12.

5. End users on publisher properties

The publisher operates the website or app in which you use the offerwall. It is responsible for your account with it, for the rewards it offers you, for paying them, and for its own privacy notice, including telling you that the offerwall is provided by Moonetix and obtaining any consent your jurisdiction requires before your data reaches us.

Moonetix decides independently how offer activity is recorded, attributed, and checked for fraud, so we are a controller for that processing. We send the publisher the completion and reversal events linked to the identifier it gave us, together with the offer, the reward, and the country, device type, and IP address recorded for the completion, so that it can credit you and check it for fraud. Advertisers and offer partners confirm results from their own systems. They receive only what they need to confirm a result and to stop the same person from completing an offer twice, such as click identifiers, a pseudonymous ID that cannot be traced back to the identifier your publisher gave us, country, device type, and completion status. When you report a missing reward, we may also send the advertiser the details of that click, such as when you started the offer, so they can check it. Advertisers and offer partners do not receive your name or contact details from us.

Because we only know you through the publisher's identifier, please include the name of the publisher and, if you can, your user identifier there when you contact us about your data. Requests about your reward balance or payouts belong with the publisher.

6. Fraud prevention and automated decisions

Advertisers pay only for genuine results, so we limit how often each end user can complete an offer, limit request rates, and block networks and accounts that have abused the Service. When an end user opens the offerwall or starts an offer, we check their IP address to detect connections that hide where a user really is, because offers cannot be tracked reliably through them; if one is detected, offers are not shown until the user connects normally. To recognize the same person across several accounts, the offerwall also keeps a random device identifier in the browser, reads device signals such as browser and graphics characteristics and the time zone when an offer is started, and runs connection checks in the end user's browser through fraud prevention providers. We use these signals only to prevent fraud and enforce bans, never for advertising or to follow anyone across other websites. Advertisers and offer partners confirm or reverse offer results, and our staff review reports of missing rewards and may reverse completions or ban accounts. These measures can lead to an offer not being shown, a completion being rejected or reversed, or a network or account being blocked from offers.

Decisions with a significant effect on a business account, such as closing it or withholding a publisher settlement, are reviewed by a person before they become final. Any end user or account holder may ask for human review, express their point of view, and contest a decision by writing to support@moonetix.com.

7. Cookies and similar technologies

When you first visit moonetix.com we ask for your cookie choice, and we store it in your browser's local storage so we do not ask again. You can change it at any time with the Cookie settings link at the bottom of every page.

• Strictly necessary: a session cookie that keeps forms and sign-in secure, a sign-in cookie that keeps account holders logged in for up to 30 days, set only when they tick "Remember me", a random device identifier kept for up to 2 years that we use to detect fraud and enforce bans, the storage entry that remembers your cookie choice, a preference cookie that remembers for up to 12 months whether you chose the light or dark theme in the dashboard or on docs.moonetix.com, a cookie that remembers a trusted device for up to 12 months if you turn on login verification by email, so that you are not asked for a code at every sign-in, and cookies set by our security and delivery provider, Cloudflare, to protect the site and to run its Turnstile security check on forms, and, if you open a publisher's referral link, a cookie that remembers for up to 30 days which publisher referred you, so the referral can be credited when you sign up. These are required for the site to work and are used without consent.
• Offerwall: inside a publisher property, the offerwall sets no cookies of its own. It keeps one random device identifier in your browser's local storage and reads device signals, such as browser and graphics characteristics and your time zone, when you start an offer. Scripts from fraud prevention providers also check your connection in your browser when the offerwall opens and before an offer opens, without setting cookies, and the offerwall sends one request to a Google ad server address to find out whether an ad blocker would stop offers from being tracked. That request carries your IP address and browser details, but no identifier from us. All of this is used only to prevent fraud, as described in section 6, and is strictly necessary for the offerwall you chose to use.
• Convenience storage: on docs.moonetix.com, your browser's local storage remembers which programming language you chose for the code examples. In the dashboard, it remembers the balance and the latest result you last saw, so that we can highlight what changed since your last visit. These entries stay in your browser and are not sent to us.
• Analytics: only if you choose "Accept all", we load Google Tag Manager and Google Analytics. They set cookies, such as _ga, to measure how visitors use moonetix.com, for example which pages are visited and how people arrive. Nothing is loaded if you choose "Necessary only", and you can withdraw your consent at any time with the Cookie settings link. Advertising and remarketing cookies are not used.

Advertiser and offer partner websites you open from the offerwall set their own cookies under their own policies. You can also block or delete cookies in your browser, although blocking the strictly necessary ones may stop parts of the site from working.

8. Who we share data with

We do not sell personal data. We share it only as follows:

• Publishers, limited to the offer activity and completion events linked to the identifiers they assigned to their own end users, including the country, device type, and IP address recorded for each completion.
• The publisher who referred you, if you signed up through another publisher's referral link. They can see your username, the date you joined, your status, and your earnings, so that they can follow the commission described in our Referral Program Terms. To prevent self-referrals, we record who referred you, the referral code, and the IP address and device identifier used when you signed up.
• Advertisers, limited to statistics about their own offers and the details they need to confirm or check results, as described in section 5. They do not receive end users' names or contact details from us and are prohibited from trying to identify them.
• Offer partners, limited to what is needed to attribute and confirm results.
• Payment providers, to send publisher payouts.
• Google, if you choose to sign in with Google, which handles that sign-in under its own privacy policy, and, only if you accept analytics cookies, as the provider of Google Analytics and Google Tag Manager, which receive your IP address, browser and device details, and the pages you visit on our behalf. Inside a publisher property, the offerwall also sends one request to a Google ad server address to check for ad blockers, which gives Google your IP address and browser details.
• Discord, only if you choose to sign in with Discord, which handles that sign-in under its own privacy policy. We only request your Discord username and email address, and we do not keep an access token.
• Security and fraud prevention providers, to protect our forms and the Service from abuse and to check offerwall connections for fraud.
• Infrastructure providers, including hosting, content delivery, and email, acting on our instructions.
• flagcdn.com, which serves the small country flag images in the dashboard. Your browser loads them directly from flagcdn.com, which therefore receives your IP address and basic browser details, as any website does.
• Professional advisers, authorities, and courts, where the law requires it or where it is necessary to establish, exercise, or defend legal claims.
• A successor, if the business is reorganized, merged, or sold. You will be told before your data becomes subject to a different privacy policy.

Service providers we use

These providers process personal data for us, or receive it when you choose to use them:

• Cloudflare, Inc. (United States) - content delivery, DNS, protection against attacks, and the Turnstile security check on our forms. All traffic to moonetix.com passes through Cloudflare, which processes your IP address, request details, and browser information, and tells us the approximate country of each request. Privacy policy.
• Hostinger International Ltd. (Cyprus, EU) - the servers that store Moonetix data, and the service that delivers our emails, such as sign-in codes and account notices. Privacy policy.
• NOWPayments (Estonia, EU) - sends crypto payouts to publishers. For payouts it receives the publisher's wallet address, coin, and amount. We receive the payout status, reference, coin, amount, and transaction hash. Privacy policy.
• PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, EU) - sends payouts to publishers who choose PayPal. For these payouts it receives the publisher's PayPal email address and the amount. We receive the payout status and transaction ID. Privacy policy.
• Google Ireland Limited and Google LLC - Sign in with Google, only if you use it, and Google Analytics and Google Tag Manager, only if you accept analytics cookies, and the ad blocker check on the offerwall described in section 7. Privacy policy.
• An IP reputation service (United Kingdom) - checks the IP address of end users who open the offerwall or start an offer, to help prevent fraud. It receives the IP address. We keep the name of this provider out of public view so that it cannot be used to get around the check, and we give it to you on request.
• A fraud prevention provider (United States) - its script runs a connection check in the end user's browser before an offer opens, to detect connections that hide where a user really is. It receives the IP address, browser and device details, and the page address of the offerwall, which includes the pseudonymous identifier the publisher assigned. We keep the name of this provider out of public view for the same reason, and we give it to you on request.
• A second fraud prevention provider (United States) - its script runs on offerwall pages and checks the end user's connection in the browser, to detect connections that hide where a user really is. It receives the IP address, browser and device details, and the page address of the offerwall, which includes the pseudonymous identifier the publisher assigned. We keep the name of this provider out of public view for the same reason, and we give it to you on request.
• Discord Inc. (United States) - Sign in with Discord, only if you use it. Privacy policy.
• flagcdn.com - the country flag images in the dashboard, loaded directly by your browser.

9. International transfers

We are established in Canada, and some of our providers and partners are located in the United States and other countries. Our servers and email delivery are provided by Hostinger in the EU, and payouts by NOWPayments and PayPal in the EU. When personal data is transferred out of the EEA or the UK, we rely on an adequacy decision where one covers the destination, including the European Commission's decision for Canadian commercial organizations and the EU-U.S. Data Privacy Framework for certified US companies such as Cloudflare and Google, or otherwise on Standard Contractual Clauses together with an assessment of the transfer. You can ask for a copy of the safeguards at privacy@moonetix.com.

10. How long we keep data

• Business account data: for as long as the account exists. When you delete your account in your account settings, it is removed immediately, together with its notifications, sessions, and trusted devices.
• Trusted devices: up to 12 months, or until you remove them. Saved logins ("Remember me"): up to 30 days, or until you log out.
• End user offer activity and attribution records: up to 24 months after the last activity, so that late reversals and reports of missing rewards can be settled.
• Records linked to confirmed fraud, including device identifiers: up to 5 years, so that the same actor cannot simply return.
• Invoices, payment records, and settlements: up to 7 years, to meet accounting and tax obligations.
• Support correspondence: up to 3 years after the last message.
• Server and security logs: normally up to 12 months.

When data is no longer needed, we delete or anonymize it. Where a legal obligation or an active dispute requires a longer period, we keep the relevant records until it ends.

11. How we protect data

All traffic is encrypted in transit. Passwords are stored only as one-way hashes. Secrets and credentials are kept outside the public web root, access to production systems is limited to the people who need it and is logged, and we apply a restrictive content security policy. Our providers are bound to keep the data they handle secure and confidential. No system is perfectly secure; if a breach is likely to put your rights at risk, we will notify the competent supervisory authority and, where the risk is high, the people affected. Account holders help by using a unique, strong password.

12. Your rights in the EU, EEA, and UK

If the GDPR or UK GDPR applies to you, you have the right to access your data, to have it corrected, to have it erased, to restrict processing, to data portability, to object to processing based on legitimate interests or to direct marketing, to withdraw consent at any time without affecting earlier processing, and not to be subject to a decision based solely on automated processing that has legal or similarly significant effects.

Write to privacy@moonetix.com to exercise these rights. We answer within one month and may ask you to verify your identity or, for end users, to confirm the publisher and identifier concerned. You may also complain to the supervisory authority where you live or work, although we would welcome the chance to address your concern first.

13. Your rights in US states

If you live in California or another US state with comparable privacy legislation, you may request to know the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we share it with, and you may request a copy, correction, or deletion. We do not sell personal information and do not share it for cross-context behavioral advertising as those terms are defined in that legislation. You may use an authorized agent, and we will not discriminate against you for exercising your rights. Requests go to privacy@moonetix.com.

14. Your rights in Canada

Under PIPEDA and, where applicable, British Columbia's Personal Information Protection Act, you may access the personal information we hold about you, ask for corrections, and withdraw consent subject to legal and contractual limits. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the Office of the Information and Privacy Commissioner for British Columbia.

15. Do Not Track signals

There is no common industry standard for responding to Do Not Track browser signals, so we do not change our processing when we receive one. We do not track visitors across unrelated websites. Advertiser and offer partner sites you open from the offerwall may behave differently under their own policies.

16. Content screening

Where you submit content such as offer material, publisher applications, or messages, we may review it with automated tools and trusted providers to detect and prevent illegal or abusive content, including child sexual abuse material, and we may report it to the competent authorities where the law requires.

17. Marketing messages

We send marketing email to business contacts only where the law allows, and every such message contains a working unsubscribe link. Service messages, such as verification codes, security alerts, invoices, settlement notices, and notices about changes to our terms, are not marketing and are sent regardless. Our practice is designed to comply with Canada's Anti-Spam Legislation.

18. Children's privacy

The offerwall is not intended for anyone under 16, and publishers must not show it to them. Moonetix accounts, and advertisers we work with, require an age of at least 18. We do not knowingly collect data about anyone below these minimum ages. If we learn that we have, we delete it, except for any record we must keep by law. If you believe a child's data has reached us, contact privacy@moonetix.com.

19. Links to other sites

Offers and partner pages take you to websites and apps we do not operate, and this policy does not cover them. Read their privacy notices before you share personal data with them.

20. Changes to this policy

We update this policy when our practices or the law change. The "last updated" date at the top always shows the current version. For material changes we notify account holders by email or in the dashboard before the change takes effect.

21. How to contact us

For anything in this policy, including requests to exercise your rights, write to privacy@moonetix.com. For everything else, write to support@moonetix.com.