Rewards Privacy Notice
How Optimisus uses account, engagement, consent and campaign data in the Rewards experience.
Last updated August 3, 2026 · Version 2026-08-03-v3What we collect
We collect account details such as email address and display name; Rewards profile information you choose to provide; verified reading, quiz, mission, referral, achievement and redemption activity; campaign participation; consent records; and security or support information needed to operate the service. To deter duplicate-account abuse, Rewards may also use a first-party random device identifier and short-lived rotating network signals. Only one-way HMAC references are stored; raw device tokens and raw IP addresses are not written to Rewards tables.
Why we use it
We use this information to create and secure your account, verify Rewards activity, maintain the OptiPoints ledger, identify related-account patterns for human review, prevent abuse, fulfil rewards, operate private beta testing, improve the product and produce aggregated campaign analytics. Shared-device or network signals are not treated as automatic proof of fraud.
Sponsors and marketing
Sponsors receive anonymous or aggregated performance reporting by default. Your name or email is shared for a sponsor’s marketing only when a campaign names that sponsor and you actively choose the separate optional permission. Declining does not reduce your campaign reward. You can withdraw sponsor permission from the Privacy Center.
Optimisus updates
Email updates from Optimisus are optional and controlled separately from account and service emails. Security, verification, reward fulfilment and essential account messages may still be sent when needed to operate the service.
Retention and security
We keep account and ledger records for as long as needed to operate Rewards, resolve disputes, prevent fraud and meet legal or accounting obligations. Related-device and rotating network links are retained for a limited operational window configured by Optimisus and then cleaned up. Consent records may be retained to demonstrate the permission that applied. Access is limited to authorised operations staff and service providers.
Your choices
You can update marketing preferences, withdraw sponsor permissions, request a copy of your Rewards data or request account deletion from the Rewards Privacy Center. Some ledger or compliance records may need to be retained or anonymised.
Contact
Privacy questions can be sent to media@optimisus.com.