Privacy Policy

Q Movement holds the details you give us when you sign up, and a record of the codes and order numbers you submit to earn Q Coins. We do not sell your data, we run no advertising or analytics tracking, and we set a single cookie whose only job is to keep you signed in.

Your orders are placed on a separate store, not here. We never receive your card details, your billing address, or what you bought — only the order number you type into your dashboard.

Your account details, given at sign-up:

• Your name and email address.
• Your phone number, if you choose to give one — it is optional.
• Your password, which we store only as a cryptographic hash. Nobody at Q Movement can read it.
• Whether your email address has been verified, and when.

What you do on the service:

• The order numbers and codes you submit, whether each was recognised, and what we decided about it.
• Your Q Coin balance, together with a running history of every change to it, the reason recorded for the change, and whether it came from a code, a reviewed order number, or a manual adjustment.
• The notifications shown in your dashboard.
• Which emails we sent you, when, and whether delivery succeeded or failed.

Technical information, collected automatically:

• A session cookie, so that you stay signed in between pages.
• Your IP address and browser identification string, written to our web server logs as part of serving any website.

Your name, email and password exist to run your account and let you sign back into it. We send a code to your email address to confirm it belongs to you, and to let you reset a forgotten password.

The order numbers, codes and coin history exist to credit the right number of Q Coins to the right account, to show you where your balance came from, and to stop the same code being claimed twice.

Your email address is also how we reach you: messages about your account, and occasional announcements about the project. Server logs exist to keep the service running and to investigate abuse.

When you submit an order number we do not recognise, it is held for review and a person at Q Movement reads it and decides how many Q Coins it is worth. That decision is not automated. We record who made it and when, and we email you the outcome either way.

If you think a decision is wrong, write to us at support@qmovment.com and a person will look at it again. A rejected order number can also be corrected and submitted again.

We set one cookie. It holds nothing but a random session identifier, it is what keeps you signed in, it cannot be read by scripts running in your browser, and it expires about thirty days after your last sign-in. Signing out clears it.

We set no analytics cookies, no advertising cookies, and no third-party tracking cookies of any kind. That one cookie is strictly necessary for the service to work, which is why you are not asked to consent to a banner full of choices that would not exist.

Two suppliers, and only what each needs: the provider that delivers our email, which handles your email address and the contents of messages we send you; and the provider that hosts our servers, on which the database and application run.

We do not sell your data, share it with advertising networks, or pass it to anyone else, except where the law requires it of us. One thing worth naming: our emails load a typeface from Google's servers, so opening one contacts Google.

We keep your account and its history for as long as the account is open. The coin history is a running ledger rather than a snapshot, so entries are added and corrected but not removed — that is what lets you and us agree on how a balance was reached.

When you ask us to close your account, we delete the account and everything attached to it: your details, your coin history, your submissions, and your notifications.

Write to support@qmovment.com and we will:

• Send you a copy of the data we hold on you.
• Correct anything that is wrong.
• Close your account and delete your record.
• Stop sending you announcement emails.

We handle these by hand rather than through a setting in the dashboard, so please allow up to thirty days for a reply. Note that we cannot stop sending emails that are part of running the account itself — verifying your address, resetting your password, or telling you the outcome of something you submitted — while the account is open.

Passwords are stored only as hashes and are never written down in readable form. The sign-in cookie is inaccessible to scripts and is sent only over an encrypted connection. Email verification codes expire ten minutes after they are sent and stop working after five wrong attempts.

If we change this policy we will update the date at the top of this page, and we will tell you by email before any change that materially affects you takes effect.

For anything in this policy, including a request about your data, write to support@qmovment.com and a person will answer you.