Privacy Policy
Last updated: October 30, 2026
BestPayingApps.com (“we”, “us”) is an independent website run from Montreal, Quebec, Canada. This policy explains what personal information we collect, why we collect it, who can see it, how long we keep it, and what rights you have, wherever you live. We try to collect as little as possible.
The short version
- We have no user accounts. We never ask for your name, email address, password or payment details, except when you write to us.
- If you join the Referral Club, your chosen nickname and your referral link and/or code are shown publicly. Your proof screenshot is reviewed privately and then deleted. Entries with no check-in for 90 days are deleted automatically, and you can delete yours at any time.
- Analytics and similar cookies only run if you accept them in the cookie banner.
- We do not sell your personal information, and we do not share it for advertising.
- Club members can see, correct or delete their entry themselves, at any time, on the My Data page with their VIP code. For anything else, email [email protected].
1. Who is responsible
The website BestPayingApps.com is operated from Montreal, Quebec, Canada. We are the “controller” of the information described in this policy.
Person responsible for the protection of personal information (Quebec Law 25): Privacy Officer (the site owner), BestPayingApps.com, [email protected]
2. What we collect, why, and on what legal basis
| What | Why we use it | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Club application: nickname, target app, referral link and/or code, proof screenshot | To check you qualify, to show your nickname and link/code publicly, and to rotate it with other members | Your consent (the box you tick when you apply) |
| VIP code and check-ins: a random code we generate, and the dates you check in | So you can manage or delete your entry, and so we can tell which entries are still active | Your consent |
| Counters on your entry: how many times it was displayed and clicked (counts only, not linked to visitors) | To show you how your entry performs | Your consent; our legitimate interest in running the Club |
| Messages you send us: your name, email address and message | To answer you | Our legitimate interest in replying; your request |
| Technical logs: IP address, browser type, pages requested, time (kept by our host and Cloudflare) | Security, blocking attacks and bots, keeping the site running | Our legitimate interests |
| Short-lived anonymous hashes: a scrambled (salted hash) value built from IP address and browser, kept for at most 1 hour | To avoid counting the same visit many times and to limit form spam. We do not store your actual IP address for this | Our legitimate interests |
| Anonymous counters: clicks on our own referral links, and clicks on the share buttons (which button, which page, which day) | To see which content is useful. No cookie, no IP address and no personal data is stored | Our legitimate interests |
| Analytics (Google Analytics), only if you accept: pages viewed, device and browser, approximate location, cookie identifiers | To understand how the site is used and improve it | Your consent |
| Link statistics (Pretty Links), only if you accept: a random cookie ID and a shortened IP address when you click a referral link | To count unique clicks | Your consent |
| Your cookie choices | To remember what you accepted or refused | Legal obligation / necessary for the site to respect your choice |
We do not use your information to make automated decisions about you, and we do not build advertising profiles.
3. What you should never send us
Never enter or show passwords, 2FA codes, bank or card details, government ID numbers, your real name or your email address in the Club form, in a nickname, or in a screenshot. Crop or cover anything personal before you upload.
If we see sensitive information in a screenshot, we delete the file and do not use it.
Public display. Your nickname and your referral link and/or code are shown publicly on this site. A referral link or code can be tied to your account on the other company’s app, so treat it as public. Anyone can copy it, and search engines or web archives may keep a copy even after we delete it from our site. If you want us to stop showing it, delete your entry with your VIP code or write to us, and we will also ask search engines to remove it where we can.
4. Who we share information with
We do not sell personal information. We do not share it with advertisers. We use the service providers below, who process information for us:
| Provider | What it does for us | Information involved |
|---|---|---|
| Asura Hosting | Hosts the website and keeps backups | Everything stored on the site, including Club entries, private proof screenshots and server logs |
| Cloudflare | Security, bot protection and faster delivery | IP address, browser details and the pages requested |
| Google (Google Analytics) | Visitor statistics, only if you accept analytics cookies | Cookie identifiers, pages viewed, device and browser, approximate location |
| QUIC.cloud / LiteSpeed | Speeds up the site (image and style optimization) | Our own images and page content, not visitor information |
| Cookie banner plugin (Moove Agency) | Shows the cookie banner on our site | Your choice, saved in a cookie in your browser |
| Google (Gmail and Google Drive) | Receives our contact messages; stores private site backups | Messages you send us; a copy of the site’s data, including Club entries |
We may also disclose information if the law requires it, or to protect our rights, our visitors or the site from fraud or abuse.
Email and backups. When you write to us by email, the message is forwarded by Cloudflare’s email routing service to a Google (Gmail) mailbox. The site has no contact form and does not store messages. Backups of the site are kept on our host and in a private Google Drive folder.
When you leave our site. Referral links, app store links and share buttons take you to other companies’ websites or apps (for example a mobile app, Facebook, X, Reddit, WhatsApp or Telegram). They have their own privacy practices, which we do not control. Please read their policies.
5. Where your information is processed
We are based in Quebec, but our providers (for example Cloudflare, Google and our host) may store or process information in other countries, including the United States. Before using a service that processes personal information outside Quebec, we consider whether it will be adequately protected. When information leaves the European Economic Area, the United Kingdom or Switzerland, we rely on safeguards such as adequacy decisions, the EU-US Data Privacy Framework or standard contractual clauses.
6. How long we keep it
| Information | How long |
|---|---|
| Club entry (nickname, link/code, VIP code, check-ins) | Until you delete it, or until 90 days after your last check-in (or your sign-up date if you never checked in), whichever comes first. Then it is deleted automatically |
| Proof screenshot | Deleted when we approve, reject or delete the entry. Copies may remain in our backups until they are overwritten (up to about 10 weeks) |
| Salted hashes used to avoid double counting and spam | At most 1 hour |
| Anonymous counters (clicks, shares, displays) | Kept, because they contain no personal information. Counters attached to a Club entry are deleted with the entry |
| Messages you send us | Only as long as needed to answer you, normally deleted within 12 months |
| Google Analytics data | 2 months |
| Pretty Links click records (only if you accepted cookies) | 12 months; the last part of the IP address is removed before saving |
| Server and security logs (host, Cloudflare) | Short periods set by those providers |
| Cookie consent record | 1 year |
When information is no longer needed, we delete it or make it anonymous.
Backups. We keep weekly backups of the site, about the last 10 (up to roughly 10 weeks), on our host and in a private Google Drive folder. Information you deleted can stay in a backup until it is overwritten. We use backups only to restore the site, and if we restore one we delete again what had already been deleted.
7. How we protect it
- The site uses HTTPS.
- Proof screenshots are kept in a private folder, outside the public media library.
- VIP codes are random and contain no personal information.
- Only the site administrator can see Club entries and screenshots.
- We never ask for passwords or financial credentials.
No system is perfectly secure. If a confidentiality incident presents a risk of serious injury, we will notify the Commission d’accès à l’information du Québec and the people affected, and we keep a register of incidents, as Quebec law requires. Because we hold no email addresses for Club members or visitors, we cannot write to them individually. In that case we will post a clear notice on the Site instead.
8. Your rights
Wherever you live, you can ask us to:
- tell you what information we hold about you, and give you a copy;
- correct information that is wrong;
- delete your information;
- stop showing your nickname and link/code on our site;
- stop using your information, or withdraw a consent you gave (this does not affect what we did before you withdrew it).
Fastest way to delete a Club entry: enter your VIP code on the My Data page and use the delete button. It is removed immediately. You can also correct your details there.
For anything else, email [email protected]. Because we do not keep names or email addresses for Club members, we may ask you to prove the entry is yours (for example with your VIP code or your referral code). We reply within 30 days.
Quebec and the rest of Canada. Under Quebec’s Law 25 and Canada’s PIPEDA you have the rights above, plus the right to receive your computerized information in a structured, commonly used format, and the right to ask us to stop disseminating your information or to de-index it.
European Economic Area, United Kingdom and Switzerland. Under the GDPR and UK GDPR you also have the right to restrict processing, to data portability, and to object to processing based on our legitimate interests. You can complain to your local data protection authority (list of EU authorities; in the UK, the Information Commissioner’s Office). Our legal bases are listed in section 2.
Other countries. If your country gives you privacy rights (for example Brazil, Australia or South Africa), write to us and we will honour them as the law requires.
9. California and other US states
In the last 12 months we collected the following categories of personal information: identifiers (your nickname, a random VIP code, and IP address in server logs; cookie identifiers if you accept analytics), internet activity (pages viewed), approximate location from the IP address, and information you give us (referral link or code, proof screenshot, and messages).
- We do not sell personal information, and we do not share it for cross-context behavioral advertising.
- We do not knowingly collect sensitive personal information on purpose. Please do not send any.
- We do not knowingly collect information from anyone under 18.
If you live in California, Virginia, Colorado, Connecticut, Texas, Utah, Oregon or another US state with a privacy law, you may have the right to know, access, correct, delete and obtain a copy of your personal information, to opt out of sales, targeted advertising and profiling, and to not be treated unfairly for using these rights. We apply these rights to everyone in the United States, even where the law does not strictly require it.
To use them, email [email protected]. You may use an authorized agent. If we refuse a request you can appeal by replying with the subject line “Appeal”, and we will answer within 45 days. If you are still not satisfied, you can contact your state attorney general (in California, the California Attorney General).
Do Not Track and Global Privacy Control. We do not sell or share personal information, so these signals do not change how we treat your data. Analytics cookies only load if you accept them in the cookie banner.
Nevada: we do not sell covered information.
10. Children
This website is for adults (18 and over). We do not knowingly collect information from anyone under 18, and never from anyone under 13 (COPPA) or under 16 in the EU. If you believe a child has sent us information, write to us and we will delete it.
11. Cookies and analytics
The cookies we use, and how to accept, refuse or change your choice, are explained in our Cookie Policy.
We do not send marketing emails, so Canada’s anti-spam law (CASL) does not apply to us in that respect.
12. Complaints
Please write to us first so we can fix the problem. You also have the right to complain to a regulator:
- Quebec: Commission d’accès à l’information du Québec
- Canada: Office of the Privacy Commissioner of Canada
- EU, UK and elsewhere: your local data protection authority (see section 8)
13. Changes to this policy
We will update the date at the top when we change this policy. If a change is important (for example a new use of your information), we will tell you clearly on the site before it applies, and ask for your consent again where the law requires it.
14. Contact
BestPayingApps.com, Montreal, Quebec, Canada
Privacy Officer: [email protected]