Privacy Policy — fendfee

fendfee respects your privacy. Data we collect — Account details such as email, username, hashed password, language and referral relationship; exchange UIDs and attribution data you submit; wallet addresses, withdrawal and cashback ledger records; support communications; security and fraud signals; and technical data such as IP address, trusted country signal, user agent, device or session information, and timestamps. Registration evidence — We keep a versioned record of the legal documents and mandatory confirmations accepted at registration, together with the acceptance time, user ID, trusted country signal, IP address, user agent, the exact serialized evidence, and a SHA-256 integrity hash. This record helps establish eligibility, prevent fraud, resolve disputes, and demonstrate the agreement that was made. Why and legal basis — We process data to provide the service and perform our agreement, secure accounts, verify exchange attribution, calculate and pay eligible rebates, prevent abuse, respond to support, comply with applicable law and valid authority requests, and establish or defend legal claims. Where applicable law requires it, we rely on consent for optional analytics and marketing. Marketing — Marketing consent is optional and is not required to create or use an account. If you opt in at registration, we record that choice and may send product updates, campaigns, and offers. You can unsubscribe at any time; withdrawing marketing consent does not affect earlier lawful processing. Sharing — We disclose data only as reasonably necessary to partner exchanges for attribution or eligibility checks; infrastructure, email, security, analytics, and support providers acting for us; professional advisers; a successor in a lawful business transfer; and competent authorities when legally required or permitted. We do not sell personal data. Providers or partners may process data in other countries under the safeguards required by applicable law. Retention — We retain active account data for as long as needed to provide the service. After closure, profile identifiers are anonymized where feasible. Limited legal-acceptance, financial, fraud-prevention, security, withdrawal, and audit records may be retained for up to five years, or longer only where applicable law, an unresolved dispute, sanctions, fraud prevention, or a valid legal hold requires it. Retention periods can differ by record and jurisdiction. Your choices and rights — Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability, or withdrawal of consent. These rights may be limited where retention is necessary for security, legal claims, financial records, or another lawful ground. Contact [email protected]. We may verify identity before acting on a request. Cookies, analytics, and advertising — Essential storage supports authentication, security, language preference, and consent records. Two optional purposes are kept separate and each requires its own consent: privacy-conscious analytics, and the Meta (Facebook) advertising pixel, which reports a conversion event when a registration completes and may set Meta cookies read across sites for measurement and ad targeting. Meta acts as an independent controller for the data it receives under its own terms. Neither loads before you accept that purpose, and either consent can be withdrawn at any time through Privacy Controls, which removes the related script.