Privacy Policy

Last updated: 2026-09-14

Data We Collect

We store account email, password hashes, balances, campaign details, hosted publisher identifiers, referral relationships, deposit and withdrawal records, report metadata, security logs, and daily aggregate statistics.

Security Data

IP addresses and user agents may be hashed with the site secret for rate limits, anti-abuse checks, reporting controls, and view validation. Before a new ad session is created, an IP address not already whitelisted or cached may be sent to AdsLab Anti Proxy for proxy, VPN, and hosting/datacenter detection. MoneyRain stores the keyed IP hash, detection flags, limited network-provider metadata, and expiry time for 30 days; it does not store the raw visitor IP in this cache. Raw IP addresses added by an administrator to the permanent security whitelist remain until an administrator removes them. Some payment records include FaucetPay transaction identifiers and provider payloads needed for audit and support.

Starting an ad-watching session requires AdsLab Monetized Captcha. Turnstile or hCaptcha checks remain during PTC and YouTube viewing, but are not shown at session startup. MoneyRain sends AdsLab an opaque, single-use challenge identifier and verifies completion server-side. AdsLab can process the visitor's IP address, browser details, and advertising interaction under its own privacy terms. MoneyRain stores token hashes and short-lived challenge state; terminal challenge details are removed after one day.

Offerwall verification and password-reset emails are sent only after Turnstile or hCaptcha and a separate AdsLab Monetized Captcha complete. Both use link-free six-digit codes. Requests are rate limited by account, keyed email hash, session, and network, and short-lived challenge and code records are removed automatically. Login email two-factor authentication is not used.

Cookies

We use session cookies for login and CSRF protection. We may store captcha provider preference in a cookie so visitors can keep using their preferred provider.

If you arrive through a MoneyRain tracking link, a signed first-party cookie remembers that source for up to 30 days. New accounts may be associated with that source to measure aggregate signups, completed advertising spend, and publisher earnings. These statistics are available only to administrators. We do not record individual link visits. Account deletion removes your source association; anonymous lifetime totals remain.

Payments

FaucetPay processes deposits and withdrawals. Offerwall email verification is required before either action. We send or receive the payment references needed to verify transactions. Do not use MoneyRain if you do not want payment provider transaction data connected to your account.

Rain Pool Activity

Eligible completed advertiser spend and publisher, onsite, or referral earnings may be placed in a transactional local outbox and reported over signed HTTPS to MoneyRain's separate global statistics database. Reports use your normalized FaucetPay email to combine activity across services. Current hourly and daily totals are compacted into one live row per email; one-day delivery hashes prevent duplicate batches without retaining claim details. A pending direct FaucetPay pool reward retains the recipient email until it is paid, rejected three times, or carried to a payable amount.

Retention

Optional hourly rewards use AdsLab verification and the same cached network check before starting. Keyed visitor/IP hashes enforce the one-hour limit. The publisher receives a signed reward callback containing its visitor ID, site key, reward amount and unique reward ID. Completed challenge details are removed one day after callback delivery; undelivered rewards remain queued for safe retry. Expired cooldowns and failed challenges are removed automatically.

Publisher source statistics store compact daily totals per account, site and earning method, not individual view logs. These new breakdowns retain 30 calendar days including today, then expire automatically. Publishers can view only their own account/sites; administrators can view each publisher and combined totals. Lifetime account and campaign totals are preserved.

The app is designed to keep daily aggregate stats and short-lived operational logs. Temporary view/payment logs and expired IP security cache entries are cleaned automatically where safe; reports, unresolved payment records, aggregate stats, users, permanent IP whitelist entries, and admin actions may remain longer for security, compliance, and abuse review.

Contact

Use the contact details configured by the site owner or your account email thread for privacy requests. Some records cannot be removed while needed for fraud prevention, payout review, or legal obligations.