Privacy Policy
Last updated August 25, 2026
This policy explains what CashLand (cashlandapp.com) collects about you, why, and what you can do about it. Contact us any time at josh@cashlandapp.com.
1. What we collect
You give us
- Email address — to create your account, sign you in, and send withdrawal notifications.
- Username and optional avatar image URL.
- Payout details — the PayPal address, gift-card email, or wallet address you ask us to send a withdrawal to.
Generated by your use of the Service
- Coin ledger — every credit, debit, bonus, referral payment, and reversal, with the reason and the resulting balance.
- Offer activity — which offers you started, when, and whether they were confirmed.
- Withdrawal history — amounts, methods, status, and review notes.
- Daily check-ins and streaks, and referral relationships (who invited whom).
Collected automatically
- IP address — recorded with offer postbacks for fraud prevention, and by our authentication system for security and rate limiting.
- Postback payloads from offer providers, which identify the offer and the completion.
- Server logs, which may include request paths, timestamps, and user agent.
We do not collect payment card numbers, bank details, or government identification. We never ask for them.
2. Why we use it
- To operate your account and show your balance and history.
- To credit offers, pay referrals, and process withdrawals.
- To detect and prevent fraud — multi-accounting, falsified completions, and chargeback abuse. This is the main reason we retain IP addresses.
- To send transactional email about your account and withdrawals.
- To comply with legal obligations and to enforce our Terms.
Where the GDPR or UK GDPR applies, our legal bases are: contract for running your account and paying you; legitimate interests for fraud prevention and service security; and legal obligation where we must retain records. We do not rely on consent for any of the above, and we do not sell your personal data.
3. Who we share it with
- Offer providers and advertisers. To credit a completion, a provider receives an identifier for your session and the completion. What each provider collects inside their own offer is governed by their privacy policy, not ours.
- Payout processors. When you withdraw, the destination you supplied and the amount are shared with the relevant payment provider.
- Our email provider, which delivers withdrawal and account emails.
- Our hosting provider, which operates the servers our database and application run on.
- Authorities, where we are legally required to disclose, or where disclosure is necessary to investigate fraud.
We do not sell or rent your personal data to anyone.
4. Cookies
We use cookies that are strictly necessary to run the Service: they keep you signed in and protect against request forgery. We do not use advertising or cross-site tracking cookies. Clearing them signs you out.
5. How long we keep it
- Account data — for as long as your account is open.
- Financial records — the coin ledger and withdrawal history are kept after account closure for as long as needed for accounting, tax, and dispute resolution.
- Fraud-prevention records, including IP addresses associated with postbacks, are retained for a limited period proportionate to that purpose.
The coin ledger is append-only by design: entries are never edited or deleted, and a correction is written as a new offsetting entry. That is what makes balances auditable, and it means ledger history cannot be selectively erased.
6. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to complain to your data protection authority.
To exercise any of these, email josh@cashlandapp.com from the address on your account. We will respond within the period required by applicable law.
Deletion has limits: we will remove your profile and contact details, but we retain the financial records described in section 5 where we are required or permitted to, and we retain fraud-prevention records where erasing them would let a banned account return.
7. Security
Passwords are hashed by our authentication system and never stored in readable form. Access to the database is restricted by row-level security, so one account cannot read another’s data, and administrative access is limited and logged. No system is perfectly secure, but if a breach affects your data we will notify you as required by law.
8. Children
The Service is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact josh@cashlandapp.com and we will remove it.
9. International transfers
Our servers and some of our providers may be located outside your country. Where we transfer personal data internationally we rely on appropriate safeguards, such as standard contractual clauses.
10. Changes
We will update the date at the top of this page when this policy changes, and give notice in the app or by email where a change materially affects you.