SayAndEarn
Log in

Privacy & cookies

Last updated: 2026-11-04. Data controller: [YOUR FULL NAME OR COMPANY NAME], [BUSINESS ADDRESS, FRANCE] — [email protected].

What we collect and why

  • Account: email address, name (from Google if you use Google login), date you confirmed you are 18+. Purpose: run your account (contract, GDPR art. 6(1)(b)).
  • Earnings & rewards: completed surveys/tasks reported by our partners, points history, cash-outs. Purpose: pay you and keep accounting records (contract and legal obligation, art. 6(1)(b) and (c)).
  • Security & fraud prevention: IP address, country, browser type, a random device identifier, VPN/proxy checks. Purpose: one account per person, protect rewards from fraud (legitimate interest, art. 6(1)(f)).
  • Support emails you send us.

We do not sell your data. We do not use advertising trackers or analytics cookies.

Survey partners

When you open a survey partner (for example CPX Research or BitLabs), you leave our control: the partner shows its own surveys and may ask you questions and set its own cookies, under its own privacy policy. We only send them a random user number (never your name or email unless you agree inside their survey). Please read their privacy policies before answering.

Who processes data for us

  • Hosting: [VPS PROVIDER COMPANY NAME] (servers in the EU).
  • Cloudflare (network security, CAPTCHA) — USA, EU Standard Contractual Clauses / Data Privacy Framework.
  • Brevo (sending emails) — France.
  • Tremendous (delivering gift cards and PayPal payments) — USA, Standard Contractual Clauses.
  • proxycheck.io (VPN detection, IP address only) — UK.
  • Google (only if you choose “Continue with Google”).

How long we keep it

  • Account data: while your account is open, then deleted or anonymised within 3 months.
  • Points and payment records: 10 years (French accounting law), anonymised where possible.
  • Security logs (IP, device): 12 months.

Your rights

You can ask to access, correct, delete or export your data, object to processing, or restrict it: write to [email protected]. We answer within one month. Decisions to refuse a cash-out for suspected fraud are always made by a human, and you can ask us to explain and review them. You can also complain to the CNIL (www.cnil.fr).

Cookies

We only use cookies that are strictly necessary for the site to work and to keep it secure, so no consent banner is needed:

  • sae.session_token — keeps you logged in (30 days).
  • wd — random device identifier used only for fraud prevention (one account per person) (2 years).
  • ref — remembers which friend invited you, so they get their invite bonus (30 days).

Survey partners shown on our pages may set their own cookies; we show you a notice before you open one.