Last updated: September 2026
1. Who We Are
XPcashout is based in Porto, Portugal. We are the data controller for personal data collected through xpcashout.com.
Contact: support@xpcashout.com
2. Data We Collect
Account data: email address, username, password (stored encrypted).
Payment data: your PayPal email address, used only to send cashouts.
Activity data: offers started and completed, earnings, cashout history, referrals.
Technical data: IP address, device type, browser, operating system, approximate location based on IP, and device identifiers.
Verification data: if identity verification is required, the documents or details you submit for that purpose.
Support data: messages you send us.
3. How We Use Your Data
- To create and manage your account
- To track offer completions and credit your balance
- To process cashouts
- To detect and prevent fraud, VPN use, and multiple accounts
- To pay referral bonuses
- To respond to support requests
- To improve the Site through usage analytics
- To comply with legal obligations
4. Legal Basis (GDPR)
- Contract: running your account, crediting rewards, and processing cashouts
- Legitimate interest: fraud prevention, site security, and analytics
- Legal obligation: tax, accounting, and anti-fraud requirements
- Consent: non-essential cookies, where required
5. Sharing Your Data
We do not sell your personal data. We share data only with:
- Offer partners (offerwall providers and advertisers): a user ID, IP address, and device data needed to track offer completion
- PayPal: to send your payouts
- Hosting, email, and analytics providers that run the Site
- Authorities, when required by law
Offer partners and advertisers have their own privacy policies, which apply when you install or use their apps.
6. International Transfers
Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
7. Cookies
We use essential cookies to keep you logged in and secure your account. With your consent, we may use analytics cookies to understand how the Site is used. You can control cookies in your browser settings.
8. Data Retention
- Account data: while your account is active, and up to 12 months after closure
- Earnings and cashout records: up to 10 years, as required by accounting and tax law
- Fraud prevention records: as long as necessary to prevent repeat abuse
- Support messages: up to 2 years
9. Your Rights
Under the GDPR, you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Receive your data in a portable format
- Withdraw consent at any time
To exercise these rights, email support@xpcashout.com. We respond within 30 days.
You can also file a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).
10. Security
We use reasonable technical and organizational measures to protect your data, including encryption and access controls. No online service is completely secure.
11. Age Requirement
The Site is only for users aged 18 or older. We do not knowingly collect data from anyone under 18. If we learn we have, we delete it.
12. Changes
We may update this policy. Significant changes will be announced on the Site or by email.
13. Contact
support@xpcashout.com