Privacy Policy
Last updated: April 21, 2026 · Effective immediately upon registration
1. Introduction
This Privacy Policy explains how Nexurf ("we", "us", "the Platform"), operated at nexurf.net, collects, uses, and protects the personal information you provide when using our service.
By registering an account or using the Platform, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and handling your data with transparency and care.
2. Data We Collect
We collect the following categories of information:
- Account data — username, email address, encrypted password, account type, and registration date
- Site data — URLs, titles, visit durations, and credit allocations for sites you add to the Platform
- Activity data — surf history, credits earned and spent, bonus claims, visit logs, and leaderboard participation
- Payment data — subscription plan and billing status. Payment card details are handled exclusively by PayPal and are never stored on our servers
- Technical data — IP address, browser type, session tokens, and timestamps associated with your activity on the Platform
- Communications — messages you send to the Nexurf team through the internal messaging system
- Referral data — referral codes, referred user relationships, and referral earning history
- Profile data — avatar selection and optional bio text you choose to display on your public profile
We do not collect sensitive personal data such as government ID numbers, health information, or financial account details beyond what PayPal processes on our behalf.
3. How We Use Your Data
We use the data we collect exclusively to operate and improve the Platform:
- To create and manage your account
- To operate the traffic exchange — recording visits, calculating and awarding credits, and managing site rotations
- To process payments and manage subscription plans via PayPal
- To send transactional emails — account confirmations, password resets, site approval/removal notices, credit alerts, and inactivity warnings
- To enforce our Terms of Service and anti-cheat policies
- To provide customer support through the internal messaging system
- To generate anonymous, aggregated statistics about Platform usage
We do not use your data for advertising profiling, and we do not sell, rent, or share your personal information with third parties for marketing purposes.
4. Data Sharing
We share your data only in the following limited circumstances:
- PayPal — to process subscription payments. PayPal's own privacy policy governs how they handle your payment data
- Hosting provider — your data is stored on servers operated by our hosting provider (InterServer). They have no access to your data beyond infrastructure-level operations
- Legal obligations — if required by law, court order, or governmental authority, we may disclose your data to the extent legally required
No other third-party sharing occurs. We do not integrate advertising networks, data brokers, or social media tracking pixels.
5. Public Information
The following information may be visible to other registered users of the Platform:
- Your username, account type, avatar, and bio (if set) — visible on the Members page and your public profile
- Your total surfs and badge count — visible on your public profile only if you enable this in Settings
- Your surf count for the current week — displayed on the leaderboard
You can control your profile visibility from Settings → Profile Privacy. Your email address, credit balance, site URLs, referral earnings, and all financial data are never visible to other users.
6. Cookies & Sessions
Nexurf uses cookies and server-side sessions solely to operate the Platform:
- Session cookie — keeps you logged in during your visit. Expires when you close your browser or log out
- CSRF token — a security token included in forms to prevent cross-site request forgery attacks
We do not use tracking cookies, analytics cookies, or any third-party cookies. No cookie consent banner is required because we only use strictly necessary cookies.
7. Data Security
We take reasonable technical and organisational measures to protect your data:
- Passwords are stored using strong one-way hashing — we cannot retrieve your password in plain text
- All connections to the Platform are encrypted via HTTPS / TLS
- CSRF protection is applied to all forms and state-changing actions
- Access to the database and admin panel is restricted to authorised personnel only
While we take security seriously, no system is completely immune to breaches. In the event of a data breach that affects your personal data, we will notify you promptly via email.
8. Data Retention
We retain your data for as long as your account is active. Specific retention periods:
- Account data — retained until you delete your account or we terminate it
- Activity logs (surf history, credit transactions) — retained for the lifetime of the account for integrity and dispute resolution purposes
- Deleted accounts — personal data is permanently deleted within 30 days of account deletion. Anonymised statistical data may be retained indefinitely
- Inactive accounts — subject to our inactivity policy as described in the Terms of Service
9. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Rectification — request correction of inaccurate data (you can update most data directly from the Settings page)
- Erasure — request deletion of your account and personal data
- Portability — request your data in a structured, machine-readable format
- Objection — object to specific processing of your data where applicable
To exercise any of these rights, contact us through the Messages section or at admin@nexurf.net. We will respond within 30 days.
You can delete your account at any time from the Settings page. This action is irreversible and will permanently remove all your data, credits, and site listings.
10. Children's Privacy
Nexurf is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered an account, please contact us immediately and we will delete the account and all associated data.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify registered users by email.
Continued use of the Platform after any changes constitutes your acceptance of the updated policy.
12. Contact
For any privacy-related questions, requests, or concerns, please contact us through the Messages section of your account, or by emailing admin@nexurf.net.