Privacy notice
Last updated 12 August 2026
The short version
We collect what we need to pay you and to stop fraud. We do not sell your personal data. You can ask for a copy of your data at any time, and for its deletion. We delete everything we are not legally required to keep, and tell you what stays and for how long.
What we collect
Account details (email, country, password hash), your ledger and withdrawal history, the offers and surveys you complete, your signup IP address, a device fingerprint generated in your browser, and usage events (pages visited, offers opened, withdrawals requested) tied to your account. Once your payouts for a year approach the level where tax reporting rules apply, we also ask for and store your legal name, address and taxpayer number, and where a withdrawal requires an identity check, the result of that check, and we keep the technical details the survey companies send us about each completed offer, including the IP address it came from.
Why we collect it
To run your account and pay you, to calculate referral earnings, to detect duplicate accounts and fraudulent activity, and to understand which parts of the site work. Our legal bases are contract performance and a documented legitimate interest in fraud prevention. Analytics cookies follow the cookie choices described below.
Who we share it with
Partner networks used to deliver optional surveys and games (for example, BitLabs) receive a pseudonymous member identifier and your IP address, which is how they decide what you are eligible for. The specific providers, their processing locations and the applicable legal basis may change over time as providers are added or removed. The identifier does not include your name or email, but we can link it back to your account, which is how your rewards reach you. Survey providers receive your answers and, where you consent, demographic details. Where we ask you to verify your identity, our verification provider receives the documents and details you submit for that check, and returns the result to us. Our payment providers receive the details needed to send your payout. Our analytics provider receives event data without your email address.
Where it lives
We are established in Germany and our database is hosted in the United States, so your data is transferred outside the EU. That transfer relies on the European Commission's standard contractual clauses, with the UK addendum for members in the United Kingdom.
Cookies and analytics
There are no marketing or advertising cookies. We ask before turning on analytics, everywhere, and the site works fully whether you say yes or no; your choice changes nothing about your account or earnings, and you can change it any time from the cookie choices link in the footer. Essential cookies keep you signed in and keep the site secure. The device fingerprint is not optional: it is how we enforce one account per person, and it is used for nothing else.
How long we keep it
Account and ledger data for six years after account closure, because we are required to keep financial records. Postback logs for two years, for dispute resolution. Device fingerprints for two years. These retention periods are the 'what stays' when you ask for deletion.
Your rights
Access, correction, deletion, portability and objection. Email hello@tidyearnings.com and we will respond within 30 days. You can complain to your data protection regulator: the Berlin Commissioner for Data Protection and Freedom of Information, who supervises us, the ICO in the UK, your state attorney general in the US, the Office of the Privacy Commissioner of Canada, or the OAIC in Australia.