1. Data we collect

When you register we store your chosen username, email address, payout currency and a salted password hash. We also store your country derived from your IP at signup and a one-way SHA-256 hashed fingerprint of your IP for abuse prevention. We never store your raw IP address.

2. Cookies

We use a single HttpOnly session cookie to keep you signed in. It does not contain identifying information beyond a random session token stored on our servers.

3. Cloudflare Turnstile

To protect the faucet from abuse we use Cloudflare Turnstile on registration, claiming and the contact form. Turnstile processes limited device and network signals on Cloudflare's infrastructure under Cloudflare's privacy policy.

4. How we use your data

We use your data to operate the faucet (login, accounting, payouts through FaucetPay), to prevent fraud and multi-accounting, and to respond to support messages. We do not sell your personal data to third parties. Public "proof of payments" pages show masked usernames and transaction IDs only.

5. Payouts & FaucetPay

To send you a payout we disclose your email and the payout amount to FaucetPay, the payment provider. FaucetPay processes these under its own privacy policy.

6. Data retention & deletion

Accounts that are inactive for 12 months or more may be deleted along with all associated data. You may request deletion of your account and data at any time via the contact page; pending withdrawals are forfeited on deletion.

7. Security

Passwords are hashed with PBKDF2-SHA256 with a per-account salt. All traffic is served over HTTPS. Headers such as Content-Security-Policy and X-Frame-Options are applied to protect your session.

8. Contact

Privacy questions can be sent via the contact page.