Privacy Policy
Last updated: 24 September 2026
This policy explains what personal data CGA – Crypto GiveAway collects on cryptogaway.com and the advertiser site ads.cryptogaway.com (together "CGA", "we", "us"), why we collect it and what rights you have. CGA is run from Slovakia, European Union, and follows the EU General Data Protection Regulation (GDPR).
1. Who is responsible
The data controller is the operator of CGA – Crypto GiveAway, Slovakia. Contact for all privacy questions: support@cryptogaway.com.
2. What we collect
| Data | When | Why |
|---|---|---|
| FaucetPay email, username or USDT address | When you link it to your account after logging in | To identify your account and send your payouts |
| Google account ID, email, name and profile picture | When you log in with Google (the only way to log in) | To log you in and show your name and picture on your account |
| IP address | When you log in, claim, watch ads, enter raffles or withdraw | To stop fraud and multiple accounts (for example one claim per network per hour) |
| Activity: claims, PTC views, raffle entries, Coins balance, withdrawals, dates and times | When you use the site | To run the faucet, PTC and raffles and to pay you correctly |
| Screenshots you upload | When you complete a raffle task | As proof that the task was done, checked before prizes are paid |
| Ad reports you send | When you report an ad | To remove harmful ads |
| Advertiser data: campaigns, links, logos, balance top-ups and FaucetPay transaction IDs | When you use CGA Ads | To run your campaigns, keep your balance and keep payment records |
We do not collect passwords, card numbers or identity documents, and we do not sell your data.
3. Legal basis (GDPR art. 6)
- Contract (art. 6(1)(b)): running your account, paying rewards and prizes, running advertiser campaigns.
- Legitimate interest (art. 6(1)(f)): preventing fraud, bots and multiple accounts, and keeping the service secure.
- Legal obligation (art. 6(1)(c)): keeping payment records where the law requires it.
4. Cookies
We use only strictly necessary cookies: one login cookie per site (cga / cgaads, valid 30 days) and a short-lived cookie during Google login (10 minutes). We do not use advertising or analytics cookies of our own. Cloudflare Turnstile (our anti-bot check) may set its own necessary cookies.
Ads shown in ad spaces on the PTC pages may come from third-party ad networks, which can use their own cookies under their own privacy policies.
5. Who we share data with
- Cloudflare, Inc.: hosting, database, file storage and the Turnstile anti-bot check.
- FaucetPay: to check your FaucetPay account and send payouts, and to process advertiser top-ups.
- Google: only if you use Google login. We also load the site fonts from Google Fonts, which means Google receives your IP address when a page loads.
- Advertisers on CGA Ads see only totals (views and completed tasks). They never receive your name, email, address or screenshots.
- Authorities, only when the law requires it.
Some of these providers process data outside the EU (for example in the USA). They do so under the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
6. How long we keep data
- Account data: while your account exists, and up to 12 months after your last activity.
- Task screenshots: up to 90 days after the raffle they belong to.
- Claim, view and IP records used against fraud: up to 12 months.
- Payout, withdrawal and advertiser payment records: as long as the law requires (usually up to 10 years for accounting records in Slovakia).
7. Your rights
You can ask us to show you, correct, delete, restrict or export your data, and you can object to processing based on legitimate interest. Write to support@cryptogaway.com from the email linked to your account, or include your FaucetPay address. We answer within 30 days. You can also complain to the Slovak supervisory authority, Úrad na ochranu osobných údajov Slovenskej republiky (dataprotection.gov.sk), or the authority in your own EU country.
8. Age
CGA is only for people aged 18 or older. We do not knowingly collect data from children. If you believe a child has an account, contact us and we will delete it.
9. Security
All traffic uses HTTPS. Login cookies are signed and cannot be read by page scripts. Screenshots are private and only visible to the CGA admin. No system is perfectly secure, so please keep your FaucetPay and Google accounts protected.
10. Changes
If we change this policy, we update the date at the top. Important changes are announced on the site.