Last updated: August 3, 2026
1. Who we are
The Viral Plug (“we”, “us”) operates a marketing platform where sponsors run campaigns and participants submit entries and vote. This policy explains what personal data we process and why.
2. Data we collect
Account data (email, username, display name, country, date of birth), profile content (avatar, bio), entries and votes you create, wallet and payout records, identity verification documents you upload for KYC, device and usage data needed to keep the service secure, and language, currency and theme preferences.
3. Why we process it
To provide the service (contract), to prevent fraud, vote manipulation and abuse (legitimate interest), to meet legal duties such as sanctions screening, tax and anti-money-laundering rules (legal obligation), and to send optional marketing where you have opted in (consent).
4. Cookies and analytics
Essential cookies keep you signed in and remember your language, currency and theme. Non-essential analytics run only after you accept them in the consent banner. You can change your choice at any time in Settings.
5. Sharing
We share data with payment and payout providers, identity-verification providers, hosting and database infrastructure providers, and sponsors — but sponsors only receive the entry content and aggregate performance data of their own campaigns, never your contact details or wallet balances unless you are a declared prize winner.
6. Retention
Account and content data is kept while your account is active. Financial and KYC records are retained for as long as regulation requires after closure, then deleted or anonymised.
7. Your rights
You can access, correct, export or delete your data, object to processing, and withdraw marketing consent. Export and account deletion are available in Settings; deletion removes your profile and content and anonymises records we must legally retain.
8. International transfers and restricted regions
Data may be processed outside your country under appropriate safeguards. The service is not offered in sanctioned jurisdictions, and accounts from those regions cannot be created or funded.
9. Children
The service is not available to anyone under 18. Accounts found to belong to minors are closed and associated data deleted.
10. Security
Access to sensitive fields such as balances and dates of birth is restricted at the database level, uploads are served through short-lived signed links, and privileged actions are audit-logged.
11. Contact
For privacy questions or to exercise your rights, contact support through the in-app help centre.