Privacy policy
Plainly: what we collect, why, and how to have it removed.
What we collect
On sign-up — an e-mail address and a password (stored only as a hash, we never see the password itself).
A payout wallet address — only if you enter one yourself for withdrawals.
A login fingerprint and IP address — to guard the service against fake accounts and abuse. The fingerprint is stored as a hash, not the raw value.
Your participation and balance data — licenses, operations: the service does not work without them.
What we do NOT collect
No card numbers, bank details or payment credentials.
No documents or identity data.
No tracking of you across other sites; no advertising trackers.
Where data goes
Nowhere for sale or advertising. We do not sell or share your data.
The site itself contacts a few technical services to work: Telegram (the bot and login), Cloudflare (protection), the BSC blockchain nodes (to see your crypto top-up), the YouTube connection services bundle.social and Pipedream (to connect your channels and publish videos to them, if you use that) and Google (Search Console — only if you connect it in the WordPress plugin). They receive only what a request needs, never your password.
Google Search Console (WordPress plugin)
If you connect Google Search Console in the Business Traffic WordPress plugin, you sign in with Google and allow read-only access to your Search Console data (permission webmasters.readonly). We use it only to show you, in the plugin, how your site appears in Google search: queries, pages, clicks, impressions, CTR and position.
We store only the Google sign-in key (encrypted) and the name of the Search Console property of your site. Report figures are requested from Google each time you open a report and are not stored. We work only with the property of the site you connected: if your Google account has no property for that site, we withdraw the access at once and keep nothing.
We do not use these data for advertising, do not sell them and do not pass them on; our staff do not read them unless you ask us to look into a problem. Business Traffic’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
“Disconnect Google” in the plugin — or disconnecting the site from Business Traffic — deletes the key and withdraws our access at Google. You can also withdraw it yourself: Google account → Security → Third-party apps and services.
How long we keep it
Account data — while the account exists. Activity logs are pruned on a schedule and do not pile up forever.
To have your account and data removed, write to us — see below.
How to reach us
Any question about your data — support@2millions.online. We read it and answer.