This policy explains what Superhappen collects, why, and what control you have over it.
What we collect
Account data: your name, email address, and a bcrypt hash of your password. If you sign in with Google we also store your Google account ID and avatar URL. We never see or store your Google password.
Activity data: offers you start, coins credited and debited, redemptions, spins, and check-ins. This is what makes your Wallet work.
Free Fire Player ID: only when you redeem a diamond top-up, and only so we can deliver it. It is public information and grants no account access.
Technical data: IP address, user agent, and pages visited, used for fraud prevention, rate limiting, and aggregate analytics.
Profile data, if you choose to give it: your birth year and gender. This is optional, it is used only to match you to surveys you are more likely to qualify for, and you can leave it blank and still use everything.
We do not collect your game password, any one-time passcode, or payment card details.
The Android app
The Superhappen Android app collects everything listed above, plus the following, which are specific to mobile:
Advertising ID: the resettable identifier Android provides. Google AdMob uses it to select and measure the ads shown in the app, including the optional "Watch & Earn" rewarded videos. Meta uses it to measure whether an advert we ran on Facebook or Instagram led to this install — so that we stop paying for adverts that do not work. You can reset it or opt out of personalised ads at any time in Settings → Google → Ads on your device.
App events sent to Meta: when we are running adverts, the app tells Meta that it was opened, and that an account was created, so a campaign can be measured against something real. It carries your advertising ID and the event name. It does not carry your email, your name, your balance, or anything you have earned.
Crash and diagnostic data: when the app crashes, Firebase Crashlytics sends us the stack trace, device model, and Android version so we can fix it. It is not used to identify you and it is not used for advertising.
Notification token: if you allow notifications, Firebase Cloud Messaging issues a device token so we can tell you when a redemption completes or a streak is about to break. Deny the permission and no token is created.
App usage: Firebase Analytics records aggregate in-app events (screens opened, offers started) to show us which parts of the app work.
The app requests only two Android permissions: internet access, and — optionally — notifications. It never asks for your contacts, location, camera, microphone, files, or SMS.
Cookies and third-party advertising
We use cookies to keep you signed in and to remember preferences such as a dismissed announcement. We also work with advertising partners.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
You may opt out of personalised advertising by visiting Google Ads Settings. You may also opt out of a third-party vendor's use of cookies for personalised advertising by visiting aboutads.info/choices.
Analytics
We use Google Analytics 4 on the website and Firebase Analytics in the Android app to understand aggregate traffic and usage patterns. Both set identifiers and collect usage data under Google's Privacy Policy. We do not use either to identify you personally.
How we use your data
To operate your account, balance, and redemptions.
To confirm offer completions with advertisers and to credit your coins.
To detect fraud, self-dealing, and abuse of the reward system.
To send you notifications about your redemptions, if you opt in.
To measure aggregate traffic and improve the product.
We do not sell your personal data.
Sharing
We share the minimum necessary, and we name every partner that receives anything:
Advertisers receive an anonymous click identifier to confirm your completion — never your email or name.
CPX Research, our survey partner, receives a pseudonymous user ID and, if you provided it, your birth year and gender, so it can match you to surveys you qualify for. Your email, name and balance are never sent. Survey answers themselves are held by CPX and the research company running that survey, under their own policies.
Google receives the advertising ID and ad-request data through AdMob, and crash and usage data through Firebase, as described above.
Meta (Facebook and Instagram) receives your advertising ID and the fact that the app was opened or an account was created, and only while we are running adverts there. This is how an advert is measured. Your email, name, balance and activity are never sent, and Meta receives nothing at all from the website.
Reward fulfilment partners receive only what is needed to deliver your reward — for a diamond top-up, your public Player ID and nothing else.
We do not sell your personal data, and we disclose it to authorities only where legally compelled.
One thing is visible to other players: if you post a high score in a game, your display name and score appear on that game's public weekly leaderboard. Nothing else — not your email, not your balance, not your activity — is ever shown to another user.
Retention
We keep account and ledger data for as long as your account exists, and for up to seven years afterwards where required for financial and fraud records. Raw analytics events are retained for 14 months.
Your rights, and how to delete your account
You can delete your account and all the personal data attached to it in three ways, and none of them requires you to ask us first:
Deletion removes your account, profile, coin balance, activity history and any pending redemptions. It is immediate and cannot be undone, and it forfeits any unredeemed coins. We retain only the minimum ledger records we are legally required to keep for financial and fraud purposes, with your identifying details removed.
You may also request access to, or correction of, your personal data by emailing hello@superhappen.com. We action requests within 30 days.
Minors
Superhappen is an 18+ service. It is not directed at children or teenagers, it is distributed on Google Play with an adult content rating, and we do not knowingly collect data from anyone under 18. If you believe a minor has created an account, contact us at hello@superhappen.com and we will close it and delete the data.
Changes
We will post any change to this policy on this page and update the date above. Material changes will also be announced in-product.