PRIVACY POLICY

This Privacy Policy describes how Marks (“Platform”, “we”, “us”, “our”) collects, uses, and shares information about you when you use our services. It applies to all visitors and registered users of the Platform.

By using the Platform you agree to the collection and use of your information as described in this Policy. If you do not agree, do not use the Platform.

We collect the following categories of personal information:

• — Account information: email address, username, and display name provided at registration
• — Location: IP-detected country; user-confirmed city and region
• — Content: posts, comments, and media files you publish on the Platform
• — Engagement data: Marks given and received, post views, Kredit balance and history
• — Financial information: identity information collected by Stripe Connect if you initiate a Kredit redemption (we do not directly store payment card data)

We also collect standard server logs (IP addresses, browser type, pages visited) as part of normal platform operation. These logs are retained for a reasonable period for security and debugging purposes.

We use the information we collect to operate and improve the Platform, including:

• — Providing and personalising your account experience
• — Operating the 24-hour evaluation pool and Kredit earning systems
• — Processing Kredit redemptions and complying with applicable tax reporting requirements
• — Detecting and preventing fraud, abuse, and violations of our Terms of Service
• — Communicating service-related notices (account notifications, policy updates)

We do not use your information for advertising profiling or sell it to data brokers.

We share your information with the following third-party services to operate the Platform:

• — Stripe: we share financial identity information with Stripe, Inc. for payout processing and tax reporting (1099-K compliance) when you initiate a Kredit redemption. Stripe's privacy policy governs their use of that information.
• — Google: if you sign in with Google, Google provides your name and email address to create your account. The Platform stores only the information necessary to operate your account. Tokens are not retained long-term.
• — Apple: if you sign in with Apple, Apple provides your name and email address to create your account. The Platform stores only the information necessary to operate your account. Tokens are not retained long-term.
• — Infrastructure providers: we use third-party hosting and infrastructure providers to operate the Platform. These providers process data on our behalf and are bound by data processing agreements.

We do not sell or share your personal information for cross-context behavioural advertising.

We retain your account data for as long as your account is active and for a reasonable period thereafter to comply with legal obligations and resolve disputes.

Posts and comments are subject to our 24-hour evaluation pool and may be automatically removed. Survived content is retained until you delete your account or the Platform is closed. Kredit ledger history and redemption records are retained for tax reporting compliance even after account deletion.

We use essential session cookies to maintain your login state. These cookies are necessary for the Platform to function and cannot be opted out of while using the Platform.

We do not use third-party advertising cookies, analytics cookies, or any other non-essential tracking technologies. You can disable cookies in your browser settings, but doing so will prevent you from logging in to the Platform.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights under applicable data protection law (GDPR / UK GDPR):

• — Right of access: request a copy of the personal data we hold about you
• — Right to rectification: request correction of inaccurate data
• — Right to erasure: request deletion of your personal data, subject to our legal and tax reporting obligations
• — Right to data portability: receive your data in a structured, machine-readable format
• — Right to object: object to processing based on legitimate interests

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information for cross-context behavioural advertising.

To exercise any of these rights, email privacy@earnmarks.com. We will respond within 30 days of receiving your verified request.

We implement reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, alteration, or disclosure.

No method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page.

We encourage you to review this Policy periodically. Your continued use of the Platform after any changes constitutes your acceptance of the updated Policy.

For privacy-related requests, questions, or to exercise your data rights, email us at privacy@earnmarks.com.

We aim to respond to all privacy enquiries within 30 days.