Privacy Policy

1. Overview & Data Controller

Welcome to FastCoins ("we", "us", "our", or "the Platform"), accessible at https://fastcoins.click. FastCoins is an international digital rewards platform, micro-task advertising network, cryptocurrency faucet, and sponsored offers hub.

Your privacy and the security of your personal data are our utmost priorities. This Privacy Policy provides a transparent, detailed disclosure of the types of personal data we collect, how it is processed and protected, and how you can exercise your statutory data rights under the European Union General Data Protection Regulation (EU GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA / CPRA), and the Google API Services User Data Policy.

Data Controller: FastCoins Platform Operations.
Official Domain: https://fastcoins.click
Data Protection & Privacy Contact: [email protected]

2. Information We Collect

To provide our digital earning services, deliver payments, and maintain platform security against fraud and multi-accounting, we collect the following categories of information:

2.1 Information You Provide Directly to Us

Account Registration Details: Username, valid email address, and cryptographically hashed passwords using strong salted hashing algorithms (bcrypt / Argon2). Plaintext passwords are never stored or accessible by any staff member.
Cryptocurrency Wallet Details: FaucetPay and USDT (BEP-20) wallet addresses provided by you to disburse your earned rewards.
Support Communications: Inquiries, tickets, bug reports, and messages sent to our customer assistance channels.

2.2 Information Collected Automatically

Technical and Device Metadata: IP address, browser type and version, operating system, display resolution, preferred language, and referral headers.
Activity and Telemetry Records: Login timestamps, faucet claims, completed PTC ad views, offerwall reward credits, and transaction hashes.
Essential Session Tokens: Secure cryptographic session tokens required to authenticate user sessions and prevent Cross-Site Request Forgery (CSRF).

2.3 Information Obtained via Google OAuth 2.0 (Google Sign-In)

When you choose to register or authenticate on FastCoins using Google Sign-In, we request your explicit authorization via the standard OAuth 2.0 protocol. With your affirmative consent, we access only the essential profile information from your Google Account (scopes: openid, email, and profile):

Google Unique User ID (sub): A unique, persistent numerical identifier assigned by Google to securely link your FastCoins account with your Google identity.
Email Address: Your primary Google email address and its verification status (email_verified), ensuring that only verified email accounts are authorized.
Full Profile Name: Your public name on Google, used solely to initialize your FastCoins username and dashboard display name.
Profile Picture URL: Your public Google profile avatar URL (if provided), used solely to display your avatar icon within your account dashboard.

3. Google API Services User Data Policy & Limited Use Disclosure

Google API Compliance

Official Google Limited Use Requirements Statement

"FastCoins' use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements."

In strict accordance with Google Cloud Trust & Safety brand verification standards, FastCoins explicitly declares, guarantees, and commits to the following protections:

Strictly Limited Purpose: Google user data is used exclusively to create your FastCoins user account, authenticate your identity, and display your basic profile within the platform. It is never processed for any secondary purpose not requested by you.
Zero Data Sale Commitment: FastCoins DOES NOT sell, rent, lease, trade, or transfer Google user data to data brokers, advertising agencies, commercial aggregators, or any third party under any circumstances.
No Targeted Advertising: Google user data is NEVER used, transferred, or analyzed to serve targeted, personalized, interest-based, or retargeted advertisements.
No AI / Machine Learning Model Training: Google user data is NEVER used to train, retrain, fine-tune, or improve generalized or non-personalized Artificial Intelligence (AI) or Machine Learning (ML) models.
Restricted Human Access: No employee, administrator, or contractor of FastCoins is permitted to inspect or view Google user data, except: (a) where you provide explicit affirmative consent to resolve a specific technical support request; (b) where strictly necessary for internal security investigations regarding a security incident; or (c) where required by a binding legal court order.

4. Purposes of Processing & Legal Bases

We process personal data only for lawful, transparent, and legitimate purposes under the following GDPR legal bases:

Processing Purpose	Categories of Data	Legal Basis (GDPR)
Account registration, continuous authentication, and dashboard access	Email, username, cryptographically hashed password, Google User ID	Performance of Contract (Art. 6.1.b)
Crediting earnings, calculating balances, and processing cryptocurrency withdrawals to FaucetPay	FaucetPay wallet address, transaction amounts, payout timestamps	Performance of Contract (Art. 6.1.b)
Fraud prevention, bot mitigation, multi-account detection (Sybil defense), platform integrity	IP address, browser headers, telemetry signals, rate limiting counts	Legitimate Interest & Security (Art. 6.1.f)
Sending critical security notifications, password resets, and transaction alerts	Registered email address	Performance of Contract (Art. 6.1.b)
Statutory accounting, anti-money laundering compliance, and legal records retention	Cryptographic payout transaction IDs, ledger balance histories	Legal Obligation (Art. 6.1.c)

5. Third-Party Service Providers & Data Sharing

We do not sell your personal information. We only share strictly necessary data with trusted infrastructure and technical providers to run our services:

Cloudflare, Inc.: Content Delivery Network (CDN), DDoS mitigation, and Web Application Firewall (WAF). Cloudflare processes IP addresses and HTTP traffic headers to prevent malicious traffic and secure connections.
FaucetPay / CCPayment: Micro-payment cryptocurrency payout gateways. They receive only the public wallet address and withdrawal amount requested by you to disburse digital asset payouts.
Third-Party Offerwall Partners (e.g. CPX Research, Lootably): When you voluntarily choose to participate in third-party offers or surveys, you interact directly with independent partner platforms governed by their own privacy policies. FastCoins transmits only an anonymous pseudonymous user ID (sub_id) to attribute your reward upon task completion.
Legal Compliance: We may disclose data if legally required by a valid subpoena, search warrant, or enforceable court order.

6. Data Retention & Storage Duration

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected:

Active User Accounts: Profile data, wallet addresses, and earning balances are retained for the lifetime of your active account to maintain your earnings and referral history.
Account Deletion / Closure: When you request the deletion of your account, all associated personal data and Google user data are permanently purged or irreversibly anonymized within thirty (30) calendar days.
Financial Payout Ledgers: Transaction records and payout hashes may be retained for up to five (5) years strictly to satisfy statutory accounting, taxation, and anti-fraud compliance requirements.
Server Access Logs: System security logs containing IP addresses are automatically purged on a rolling ninety (90) day retention schedule.

7. User Rights & How to Delete Your Data

Under the GDPR, UK Data Protection Act, and CCPA/CPRA, you are entitled to exercise the following privacy rights:

Right of Access: Request a copy of the personal information we hold about you.
Right to Rectification: Request correction of any inaccurate or incomplete personal data.
Right to Erasure ("Right to be Forgotten"): Request the permanent deletion of your account and associated personal data.
Right to Restrict or Object: Restrict or object to specific data processing operations.
Right to Data Portability: Receive your personal data in a structured, machine-readable format.

Step-by-Step Instructions to Request Data Deletion:

1

Send an Email to Support

Send an email from your registered account email address to [email protected] with the subject: "Data Deletion Request".

2

Specify Your Username

Include your registered FastCoins username in the body of the message so that our privacy team can verify account ownership.

3

Verification & Permanent Erasure

Our Data Protection team will verify and permanently erase or anonymize your account records within thirty (30) days, notifying you via email once completed.

8. Revoking Google Account Access at Any Time

If you authenticated using Google Sign-In, you maintain continuous control over your authorization. You can revoke FastCoins' access to your Google Account at any time directly from Google's security dashboard:

1

Open Google Account Permissions

Navigate to Google's official permissions management portal: https://myaccount.google.com/permissions.

2

Locate FastCoins

Find FastCoins under the list of "Third-party apps with account access".

3

Click "Remove Access"

Click "Remove Access" (or "Delete all connections"). Google will immediately revoke the OAuth token, preventing any further data exchange.

9. Security Safeguards & Technical Measures

We deploy robust, multi-layered security measures to protect your personal data against unauthorized access, loss, or alteration:

Encryption in Transit: All web traffic is strictly served over TLS 1.3 / HTTPS with mandatory HTTP Strict Transport Security (HSTS).
Cryptographic Password Hashing: Passwords are protected using salted bcrypt / Argon2 hashing algorithms.
SQL Injection Defense: All database queries utilize parameter-bound prepared statements through PDO.
Cross-Site Request Forgery (CSRF) Tokens: All state-changing forms and API requests require unique, cryptographically random CSRF verification tokens.
Secure Redis Sessions: In-memory session management equipped with HttpOnly, Secure, and SameSite=Lax cookie flags, plus a 12-hour inactivity timeout.

10. Cookies & Tracking Technologies

FastCoins uses strictly necessary technical cookies to operate the service:

PHPSESSID Cookie: Maintains your secure login session across pages.
lang Cookie: Remembers your chosen UI language preference.
CSRF Tokens: Protects your account actions from unauthorized external cross-site requests.
Aggregated Anonymous Analytics: Privacy-preserving aggregated analytics with IP anonymization enabled to monitor server load and page responsiveness.

You can manage or disable cookies in your browser settings; however, please note that essential session cookies are strictly required to log in to FastCoins.

11. Children's Privacy

FastCoins is strictly intended for individuals who are at least eighteen (18) years of age (or the legal age of majority in their jurisdiction). We do not knowingly collect or solicit personal information from minors. If we learn that we have collected personal data from an individual under 18, we will immediately terminate the account and permanently delete all associated data.

12. Contact Us & Policy Updates

We may periodically update this Privacy Policy to reflect operational, regulatory, or legal changes. Any material updates will be announced prominently on the platform prior to taking effect.

If you have questions, feedback, or wish to exercise any of your privacy rights, please contact our Data Protection Team at:

Privacy Email: [email protected]

Zero Data Sale

Google Limited Use

30-Day Data Erasure

Instant Revocation