Privacy Policy
This policy explains what personal data the PlayNexa app for Android and the website playnexa.eu process, why we process it, who receives it, how long we keep it and what rights you have. It is written in plain language.
In short: you do not need a real e-mail address or a password. PlayNexa is for adults (18+). Ads are shown through Google AdMob; in the European Economic Area, the United Kingdom and Switzerland you decide about personalised ads first. Withdrawals are paid by PayPal. You can delete your account in the app (Settings, Delete account). We do not sell your data.
1. Who is responsible
The controller is the operator of PlayNexa:
Maher Belguesmi, Puchsbaumgasse 5-7, 1100 Wien, Austria.
E-mail for all privacy questions: contact@playnexa.eu. The Imprint is at playnexa.eu/impressum.html.
2. What we process, why, and on what legal basis
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Account data: your PlayNexa ID, the display name and the profile picture you choose, your language, a referral code and who invited you. We also create an internal account identifier that looks like an e-mail address but is not a real one: it never reaches an inbox. | to run your account and the app in your language | contract (art. 6(1)(b)) |
| Activity data: your answers to quizzes and lessons, game levels and scores, videos watched, missions, hints, your Activity Progress, rewards, your Wallet balance and history, and your place in leaderboards and challenges | to run the app, to check that activities are real, and to credit rewards | contract; our legitimate interest in fair rewards and in preventing fraud (art. 6(1)(b) and (f)) |
| Content you post: comments on videos. They are shown to other users with your display name. | to offer the comment function | contract (art. 6(1)(b)) |
| Phone and connection data: an identifier that Android creates for our app on your phone (we store only a keyed hash of it, which cannot be turned back into the original), country codes from your mobile network, your SIM card and your phone’s region setting, the country of your connection, the IP address of your latest visit, and the time of your first and last visit | to allow one cash-paying account per phone, to stop fraud and multiple accounts, and to apply the rules of the right country | legitimate interest in preventing fraud (art. 6(1)(f)) |
| Notification token (Firebase Cloud Messaging) and your notification setting | to send reminders and messages about your account and withdrawals | contract; your consent through the Android notification permission (art. 6(1)(a)) |
| Withdrawal data: the PayPal e-mail (or other payout detail) you enter, the amount, the fee, the status and the dates. We compare payout details between accounts so that one payout account is not used by several accounts. | to pay you, to keep payment records, and to prevent fraud | contract; legal duty to keep accounting records (art. 6(1)(b) and (c)); legitimate interest (art. 6(1)(f)) |
| Survey and offer partners: your PlayNexa ID and the account identifier in e-mail format (not a real address) are sent to the partner, and the partner sends back its confirmation, the reward amount and the status | to credit the reward | contract (art. 6(1)(b)) |
| Advertising data: the advertising ID of your phone, IP address, basic device information and how you interact with ads. This is collected by Google AdMob, see section 3. | to show and measure ads | your consent (art. 6(1)(a)) in the EEA, the UK and Switzerland; otherwise our legitimate interest in financing the app (art. 6(1)(f)) |
| Messages you send us by e-mail | to answer you | contract; legitimate interest (art. 6(1)(b) and (f)) |
| Technical server logs: IP address, time, the address that was requested and error information | to keep the service secure and working | legitimate interest (art. 6(1)(f)) |
What we do not collect: your real name, your real e-mail address, your phone number, your contacts, photos, camera or microphone, your precise location, SMS or calendar. The app asks for only two permissions: Internet access and, on Android 13 and later, notifications. We do not use analytics or crash-reporting services, and we do not track you across other apps.
You are not required by law to give us this data, but without it the app cannot work, rewards cannot be checked, and a withdrawal cannot be paid.
3. Ads, consent and the advertising ID
PlayNexa is financed by ads. The ads are shown by Google AdMob (Google Ireland Limited for users in the EEA and the UK, Google LLC elsewhere). There are ads between activities, and optional rewarded videos that you choose to watch (for example for a hint). Watching or clicking an ad never gives cash.
- European Economic Area, United Kingdom and Switzerland: when you first open the app, a consent message of Google’s consent management platform asks whether Google and its partners may use your data for personalised ads. You may accept, refuse or choose in detail. If you refuse, you still see ads, but not personalised ones. You can change your choice at any time: Settings, Privacy options (the entry is shown where the law requires it).
- Other countries: ads may be personalised. You can turn personalisation off or reset your advertising ID in your phone: Settings, Google, Ads.
- Google handles the ad data as an independent controller. How Google uses data from apps that use its services: policies.google.com/technologies/partner-sites. Google’s Privacy Policy: policies.google.com/privacy.
- Our ad requests are marked as not directed to children, because PlayNexa is for adults only.
- If you live in a US state with a privacy law: we do not sell personal information for money. Personalised ads through Google can count as “sharing” or “targeted advertising”; you can opt out through Privacy options (where shown) or through the ad settings of your phone.
4. Who receives data
- Hosting: Hostinger (data centre in Frankfurt, Germany) stores our servers and database, and acts for us as a processor.
- Google: AdMob (ads), Firebase Cloud Messaging (notifications) and YouTube (videos). See sections 3 and 5.
- Survey and offer partners (for example CPX Research, and other partners we may add): they receive your PlayNexa ID and the identifier in e-mail format. The survey list is shown by the partner inside the app, so the partner also receives what any web page receives (your IP address and device details) and the answers you give on its pages. The partner’s own privacy policy applies there. We update this policy when we add a partner.
- PayPal receives the e-mail and the amount of a withdrawal.
- Authorities, courts and our professional advisers, where the law requires it or to defend legal claims.
We do not sell your personal data.
5. YouTube
Some videos in the app are shown with the YouTube player. YouTube can set cookies and receives your IP address and the fact that you play a video. By using these videos you also accept the YouTube Terms of Service, and the Google Privacy Policy applies. We do not receive your YouTube or Google account data, and PlayNexa does not ask you to sign in to Google. If you ever give an app access to your Google data, you can withdraw it at any time on the Google security settings page.
6. Transfers outside the EEA
Some partners, for example Google and PayPal, process data outside the EEA, also in the United States. We rely on an adequacy decision (for example the EU-US Data Privacy Framework for certified companies) or on the standard contractual clauses of the European Commission, where they apply.
7. How long we keep data
| Data | How long |
|---|---|
| Account and activity data | until you delete your account |
| IP address (stored with your phone record) | only the IP of your latest visit; deleted automatically after 90 days without a visit, and at once when you delete your account |
| Hashed phone identifier after you delete your account (without the IP address) | up to 12 months, to stop people from opening new accounts to get rewards again; then deleted |
| Withdrawal and payment records | 7 years, because Austrian tax and commercial law requires it; kept without your name where possible |
| Notification token | until you delete your account or the token stops working |
| Technical logs | our application logs: about 90 days at most; the access logs of our hosting provider: for the short period that the provider sets (we do not use them to identify players) |
| Backups of our database | up to 30 days, then they are overwritten |
| Login records of our admin panel (administrators only) | 12 months |
| Your e-mails to us | as long as needed to answer you and close the matter, at most 12 months afterwards, unless a legal claim requires more |
8. Your rights
You have the right to access, correction, deletion, restriction of processing, a copy of your data in a common format (portability), and to object to processing that is based on our legitimate interest. Where processing is based on consent you can withdraw it at any time; the withdrawal does not affect what happened before. Write to contact@playnexa.eu; we answer within one month. You can delete your account yourself in the app (see Account and data deletion).
You may complain to the Austrian data protection authority (Datenschutzbehörde, Barichgasse 40-42, 1030 Wien, www.dsb.gv.at) or to the authority of the country where you live.
9. Children
PlayNexa is for adults only (18 or older). We do not knowingly collect data from minors. If we learn that a minor has an account, we delete it.
10. Security
The app and our servers communicate over encrypted connections (HTTPS). We store the phone identifier only as a keyed hash, keep your login token in the secure storage of your phone, limit who can open our systems, protect the admin panel with login limits and optional two-factor login, and keep access records.
11. Automated decisions
Our systems check activity automatically to find cheating, for example duplicate accounts or answers that are too fast to be real. If such a check holds back a reward or a withdrawal or restricts an account, you can ask a person to review it at contact@playnexa.eu.
12. Cookies and local storage
The website playnexa.eu does not use cookies, analytics or tracking. The app stores on your phone your login token, your settings and the progress of some games. Pages of partners that open inside the app (for example YouTube or a survey partner) can set their own cookies; their policies apply.
13. Changes
When we change this policy in an important way, we tell you in the app before the change takes effect. The date at the top shows the current version.