What we know about you

nanodrops.org ("the service", "we") runs the faucets that pay nano to people watching live streams. The service is operated by Nagora Ltd, which decides what data it collects and why, and is the data controller for everything on this page. Reach us in our Discord, or by post at Nagora Ltd, 195 Wood Street, London, E17 3NU.

Every item here earns its place. If it stopped being necessary we would stop collecting it.

• Your platform identity. When you sign in with Twitch or Kick we store the account id, login, and display name they hand us. That is your Nanodrops account. We do not ask for your email address and we store none.
• Your payout wallet. The nano address you register. Without it there is nowhere to send your drops.
• Your earnings. What you earned, from which faucet, and when.
• Your IP address. Stamped when you start watching and when you pass a human check. It enforces the cap on how many people can earn from one address, and it is what we check for VPN and datacenter use.
• A device fingerprint. A hash of coarse browser signals: canvas and WebGL rendering, screen size, timezone. It clusters accounts farming from rotating addresses. It is a signal that can raise the difficulty of your proof-of-work check, never a hard block on its own.
• What you are watching, while you earn. Which stream, and whether the player is actually running, audible, and on screen. This is the evidence that a viewer is a person rather than a script, and it is the basis on which you get paid.
• A Kick sign-in token, only if you grant chat access. Held so the site can send chat as you when you ask it to. Twitch tokens are not kept at all.

Two reasons. First, to do the thing you asked for: run your account and pay you. Second, to protect the faucets from abuse, because a faucet that gets farmed is worth nothing to the people watching honestly. In the language of UK and EU data law those are performance of our contract with you, and our legitimate interest in preventing fraud. We do not process your data for advertising, because we have no advertising business.

• Cloudflare sits in front of the site and runs the "confirm you are watching" check. It sees your IP address and your requests.
• proxycheck.io receives your IP address, and nothing else, so it can tell us whether that address is a VPN or a datacenter.
• Twitch and Kick know you signed in through them, because you did.
• Amazon Web Services hosts the database all of the above lives in.
• Discord. Our private operations channel receives abuse alerts. When an account trips the farm detector, that alert can carry the wallet address, IP address, or fingerprint involved. It is a closed channel that only we read.
• The nano network. See the next section, because this one is permanent.

We do not sell your data. We do not share it with advertisers, because there are none. We do not hand the streaming platforms a list of who earns on their channels.

Payouts are real sends on the nano ledger. The moment one settles, your wallet address, the amount, and the timestamp are public, permanent, and beyond anyone's reach, including ours. Anyone can read them, and we publish a transparency feed of drops on top of that. This is how a public ledger works and it is not a decision we make on your behalf, but it is worth knowing before you register an address: if you would rather your earnings were not tied to a wallet you use elsewhere, register one you keep for this and nothing else.

Your account and the data attached to it stay for as long as the account does. Records of admin actions against abuse are kept for a year. The short-lived bookkeeping behind payouts clears within days. Ask us to delete your account and we will, keeping only the minimum we need to enforce a ban we already issued, because otherwise a ban would last exactly as long as it takes to sign up again. Anything already written to the nano ledger stays there; nobody can delete that, us included.

You can ask for a copy of what we hold on you, ask us to fix it if it is wrong, ask us to delete it, or object to the abuse-prevention side of it. Reach us in our Discord for anything quick, or write to us by post at Nagora Ltd, 195 Wood Street, London, E17 3NU to make it formal, and we will answer within a month. If you are in the UK or the EU and you think we have handled your data badly, you are entitled to complain to your data protection regulator, which in the UK is the Information Commissioner's Office.

• No advertising, ad networks, or tracking pixels.
• No analytics profile of you, and no selling, at any price.
• No reading your browsing history. The site and the extension look at the stream pages you earn on and nowhere else, and the extension reads the player's state rather than the page's content.
• No marketing email. We do not hold your email address to send any.

The service is for people aged 13 and up, or older where your country sets the bar higher. See the terms. We do not knowingly hold data on anyone younger, and we delete it if we find it.

When this changes, the date at the top changes with it. If a change is material we will say so on the site rather than quietly editing the page. Continuing to use the service after a change means you accept the current version.