Loading...
Please wait a moment
How we collect, use, and protect your personal data.
Last updated: February 5, 2026
Effective Date: March 2026
BY CONTINUING TO USE NAUGHTYBOUNTY, YOU ACKNOWLEDGE THIS PRIVACY POLICY AND HOW WE PROCESS PERSONAL DATA AS DESCRIBED HEREIN.
NB Core LLC, a Wyoming limited liability company doing business as NaughtyBounty ("we," "us," "our"), respects your privacy and is committed to protecting your personal data. NB Core LLC owns and operates www.naughtybounty.com ("NaughtyBounty" or the "Platform").
NaughtyBounty is an online platform that hosts user-generated content and facilitates interactions and payments between two user groups: Challengers and Creators. Challengers post Challenges (tasks with specified requirements and a set reward). Creators apply, and if selected, submit photos, videos, or other content ("Submissions") to complete the Challenge. We do not own, control, or create Submissions and have no general obligation to monitor user content.
This Privacy Policy ("Policy") explains how we collect, use, store, share, and protect personal data in connection with the Platform and related services ("Services"). We act as a data controller for personal data we collect and process through the Services. For questions, see Section 25 (Contact Information).
"Personal Data" means any information that identifies or can reasonably identify an individual, directly or indirectly. We also process non-identifiable, aggregated, or anonymized information, which is not Personal Data.
Our Services are strictly intended for individuals aged 18 or older. By using NaughtyBounty, you confirm that you are at least 18. We do not knowingly collect data from minors.
You are responsible for keeping your account information accurate and up to date. You may update your details in your account settings.
Our Platform may include links to third-party websites or services. Their privacy practices are not governed by this Policy. Please review their policies separately.
Some Personal Data is necessary to access features (e.g., identity verification or payouts) or to comply with legal obligations. If you do not provide required information, certain Services may be unavailable.
We may update this Policy from time to time. Changes take effect upon posting on NaughtyBounty. For material changes, we will provide reasonable notice (e.g., in-app notice or email).
NaughtyBounty facilitates interactions and payments between users but does not become a party to Challenges as Challenger or Creator. We do not have a general obligation to monitor content. We act upon specific notices or where we obtain actual knowledge of illegal content, and we comply with lawful orders. Users remain responsible for their content and compliance with applicable laws and our Terms and Content Policy.
All deposits, frozen challenge rewards, and payouts are processed exclusively through licensed third-party payment service providers. NaughtyBounty does not hold, safeguard, or manage client funds, nor does it provide payment, remittance, or e-money services.
When a Challenger creates a Challenge, the specified reward amount is designated as a non-redeemable challenge commitment and is frozen for the sole purpose of rewarding the successful completion of the Challenge. Deposits do not constitute stored value, account balances, or refundable funds.
Upon submission of the required content by the Creator, the Challenger has 7 daysto raise a dispute. If no dispute is submitted within this period, the frozen reward is released to the Creator's account balance automatically, subject to applicable compliance and risk checks.
NaughtyBounty reserves the right to conduct manual reviews, delay releases, suspend accounts, freeze rewards, or withhold payouts in cases of suspected fraud, money laundering, collusion, abuse of the platform, or violations of these Terms. Automated releases do not limit NaughtyBounty's right to intervene where required for legal, regulatory, or risk-management purposes.
Creators may request withdrawals once their account balance reaches a minimum of USD 50. All withdrawals are subject to identity verification (KYC), anti-money laundering (AML) screening, transaction monitoring, applicable fees, and any limits imposed by payment service providers or law.
Challenge deposits made by Challengers are irrevocable and may only be used to fund Challenges. Challengers are not entitled to withdraw deposited amounts, as such deposits are not held as customer funds but serve solely as consideration for challenge-based content creation.
All transactions are subject to transaction limits, velocity checks, geographic restrictions, and other risk-based controls implemented by NaughtyBounty and its payment service providers to ensure compliance with applicable laws and regulations.
We process Personal Data for the following purposes:
For users located in the EU/EEA, our lawful bases under the General Data Protection Regulation (GDPR) include performance of a contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), legitimate interests (Art. 6(1)(f)), and consent (Art. 6(1)(a)) as applicable.
We collect Personal Data:
We share Personal Data only as necessary and under appropriate safeguards:
All service providers are bound by contractual obligations to protect Personal Data and act only on our instructions where they are processors.
Card payments and related billing operations are handled by Stripe. For users in the European Economic Area, Switzerland, and the United Kingdom the controller is Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. For users elsewhere the controller is Stripe, Inc., 354 Oxford Street, San Francisco, CA 94103, United States.
Data transferred to Stripe includes your name, billing address, email address, IP address, payment method details (card data is processed exclusively by Stripe and never stored on our servers), transaction amounts, currency, and tax identifiers if you provide them. Stripe processes this data to charge your card, create invoices, calculate applicable taxes, prevent fraud, and comply with statutory record-keeping obligations.
The legal bases are Article 6(1)(b) GDPR (performance of the contract for top-ups and platform fees) and Article 6(1)(c) GDPR (compliance with tax and bookkeeping obligations under the German Fiscal Code and Commercial Code or equivalent local laws). For users in the United States we rely on the legitimate business interest of processing payments you have requested.
Where data is transferred from the EEA, Switzerland, or the United Kingdom to Stripe, Inc. in the United States we rely on the EU-U.S. Data Privacy Framework certification held by Stripe, the UK Extension to that framework, and the Standard Contractual Clauses adopted by the European Commission, together with supplementary technical and organisational measures.
Stripe retains transaction records for the periods required by applicable financial regulation and tax law, typically up to ten years. Their full privacy notice is available at stripe.com/privacy.
NaughtyBounty is operated from the United States. If you are located outside the U.S. (including in the EU/EEA or UK), your Personal Data will be transferred to and processed in the United States and potentially other countries. By using the Platform, you consent to this transfer.
For transfers of Personal Data from the EU/EEA or UK to the United States, we rely on appropriate safeguards including Standard Contractual Clauses approved by the European Commission, the EU-U.S. Data Privacy Framework (where applicable), and supplementary measures as needed. Details are available on request.
We use cookies and similar technologies for essential functionality, authentication, security, and (where applicable) analytics. You can manage preferences via your browser and, where required, through our cookie banner. For more information, see our Cookie Policy.
We retain Personal Data only as long as necessary for the purposes described or to meet legal obligations:
We implement technical and organizational measures to protect Personal Data, including encryption in transit, access controls, least-privilege principles, and vendor due diligence. No security measure is absolute; users also play a role by safeguarding credentials and using unique, strong passwords.
Depending on your jurisdiction, you may have certain rights regarding your Personal Data:
Depending on your state of residence (e.g., California, Virginia, Colorado, Connecticut, Texas, and other states with applicable privacy laws), you may have the right to:
Under the GDPR and UK GDPR, you may have the right to:
You can exercise rights via your account settings or by contacting us (see Section 25).
To the extent applicable under U.S. state privacy laws (including, without limitation, California, Virginia, Colorado, Connecticut, and Nevada), residents of such states may have certain rights regarding their Personal Data.
NaughtyBounty does not sell Personal Data, does not share Personal Data for cross-context behavioral advertising or targeted advertising, and does not process Personal Data for profiling that produces legal or similarly significant effects.
Sensitive Personal Data, including government identifiers, payment information, and identity verification data, is processed solely as necessary to provide the Services, comply with legal obligations, prevent fraud, and ensure platform security.
Where required by applicable U.S. state law, eligible users may exercise their privacy rights by contacting us using the details provided in this Privacy Policy. We will respond to verifiable requests without undue delay and in accordance with applicable legal requirements.
Although NaughtyBounty is operated by NB Core LLC from the United States, we comply with the EU Digital Services Act (Regulation (EU) 2022/2065) to the extent it applies to our services for EU/EEA users.
Challengers may dispute a Submission within 7 daysof delivery. Disputes are reviewed by NaughtyBounty's internal staff only; we do not involve third-party arbitrators. We may request additional information from both parties and issue a reasoned decision. Repeated abuse of disputes may result in measures under our Terms.
Our Services are intended exclusively for adults aged 18 and over. We do not knowingly collect or process Personal Data from individuals under the age of 18.
If we become aware that Personal Data has been collected from a minor, we will take reasonable steps to delete such data and deactivate or remove the associated account without undue delay, in accordance with applicable law.
Our Services do not respond to "Do Not Track" signals. We do not make decisions based solely on automated processing, including profiling, that produce legal or similarly significant effects without your explicit consent or where otherwise permitted by law.
NB Core LLC (Data Controller for purposes of GDPR):
Principal office (official business address):
30 N Gould St Ste N, Sheridan, WY 82801, United States
Mailing address (P.O. Box):
5900 Balcones Drive # 25457, Austin, TX 78731, United States
Data Protection Contact:
[email protected]
Authorities/Legal Contact:
[email protected]