Privacy Policy

Last updated: September 2026

1. Data Controller

Responsible for data processing:

Timo Weber
Habichtweg 216
54662 Speicher
Germany

Email: support@flushcash.app

2. Collection and Processing of Personal Data

We process personal data that we collect as part of registration (e.g. email address) and use of the Platform (e.g. account balance, payout requests). Processing takes place in order to fulfil the usage agreement and to provide the Platform in accordance with Art. 6 (1)(b) GDPR.

When signing in, we also process the access data provided by the authentication provider (Supabase Inc.). This processing takes place on the basis of Art. 6 (1)(f) GDPR (legitimate interest in secure user management).

Log data

When you visit our website, our servers may automatically record standard data provided by your web browser. This includes your computer's IP address, your browser type and version, the pages you visited, the time and date of your visit, the time spent on each page and other details.

Device data

We may also collect data about the device you use to access our website. This data may include device type, operating system, unique device identifiers, device settings and geolocation data. What we collect may depend on the individual settings of your device and software.

3. Integration of External Survey Providers

We integrate external providers (currently CPX Research) to make surveys available. When a survey is launched, a pseudonymous user ID is transmitted to the respective provider. The collection of further data within the survey is carried out by the external provider, who is responsible for it independently.

The legal basis for transmitting the user ID is Art. 6 (1)(f) GDPR (legitimate interest in compensating users). Further information on data processing by the external providers can be found in their respective privacy policies.

4. Payout Data

To pay out earnings, we collect the data required for the selected payout method (e.g. PayPal email address). This data is processed exclusively to carry out the payout in accordance with Art. 6 (1)(b) GDPR and is subsequently deleted, unless statutory retention obligations require otherwise.

5. Server Log Files

When the Platform is accessed, technical data (IP address, date and time, pages accessed) is automatically stored in server log files. This processing takes place in accordance with Art. 6 (1)(f) GDPR for the purpose of technical provision and security. The data is deleted after seven days at the latest, unless it is needed to investigate an incident.

6. Retention Period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention obligations. Once the purpose no longer applies, the data is regularly deleted.

7. User Rights

Under the GDPR, users have the following rights:

• Right to access the data processed (Art. 15 GDPR),
• Right to rectification of inaccurate data (Art. 16 GDPR),
• Right to erasure of data (Art. 17 GDPR),
• Right to restriction of processing (Art. 18 GDPR),
• Right to data portability (Art. 20 GDPR),
• Right to object to processing (Art. 21 GDPR).

To exercise these rights, please contact the email address given above. There is also a right to lodge a complaint with a data protection supervisory authority.

8. Cookies

We use cookies and comparable technologies (in particular local storage) on the website. Cookies are small files that your browser stores on your device and that can be transmitted back to a page when it is accessed. We only use technically necessary storage, for example to keep you signed in and to remember your settings. Legal basis: Section 25 (2) No. 2 TDDDG as well as Art. 6 (1)(f) GDPR.

You can generally object to the setting of cookies in your browser settings and delete cookies already set there. Disabling cookies may mean that not all functions of the website can be used to their full extent.

9. SSL Encryption

For security reasons, this site uses SSL encryption. You can recognize an encrypted connection by the browser's address bar (https://). This protects the data you send to us from access by third parties.

10. Changes to This Policy

We reserve the right to amend this privacy policy at any time and without prior notice in order to adapt it to changed legal requirements, new technologies, or the further development of the Platform. The current version is always available on this page.

If changes have a significant impact on the processing of personal data, we will inform users in an appropriate manner, for example through a notice in the app or by email.