Last updated 12 August 2026
We collect what we need to pay you and to stop fraud. We do not sell your personal data. You can ask for a copy of your data at any time, and for its deletion — we delete everything we are not legally required to keep, and tell you what stays and for how long.
Account details (email, country, password hash), your ledger and withdrawal history, the offers and surveys you complete, your signup IP address, a device fingerprint generated in your browser, and usage events (pages visited, offers opened, withdrawals requested) tied to your account.
To run your account and pay you, to calculate referral earnings, to detect duplicate accounts and fraudulent activity, and to understand which parts of the site work. Our legal bases are contract performance and a documented legitimate interest in fraud prevention. Analytics cookies follow the cookie choices described below.
Partner networks receive a pseudonymous member identifier — it does not include your name or email, but we can link it back to your account, which is how your rewards reach you. Survey providers receive your answers and, where you consent, demographic details. Our payment providers receive the details needed to send your payout. Our analytics provider receives event data without your email address.
Our database is hosted in the United States. For members in the UK, Canada and Australia this is an international transfer, covered by our hosting provider's standard contractual safeguards, including the UK addendum to the EU standard contractual clauses.
The site works without marketing cookies — there are none. In the UK we ask before turning on analytics cookies; elsewhere they are on unless you turn them off in the cookie bar. Either way, your choice changes nothing about your account or earnings. The device fingerprint is not optional: it is how we enforce one account per person, and it is used for nothing else.
Account and ledger data for six years after account closure, because we are required to keep financial records. Postback logs for two years, for dispute resolution. Device fingerprints for two years. These retention periods are the 'what stays' when you ask for deletion.
Access, correction, deletion, portability and objection. Email hello@tidyearnings.com and we will respond within 30 days. You can complain to your data protection regulator: the ICO in the UK, your state attorney general in the US, the Office of the Privacy Commissioner of Canada, or the OAIC in Australia.