Privacy Policy

This Privacy Policy explains how Overthink (collectively, “OVERTHINK,” “we,” “us,” or “our”) collects, uses, stores, shares, and protects personal information when people worldwide use overthink.win and related campaign services.

1. Information we collect

Google account information

When you choose Google Sign-In, we request only basic identity scopes. Google provides your Google account identifier, email address, email-verification status, display name, and profile image. We use this information only to authenticate you, create or locate your OVERTHINK account, display your profile, prevent duplicate or fraudulent accounts, and secure the service.

OVERTHINK does not request access to Google Drive, Gmail, Calendar, contacts, or other Google product content. We remove Google access tokens, refresh tokens, and ID tokens before persisting the OAuth account binding because our current sign-in functionality does not require their long-term storage.

Information you provide

We collect information you submit, such as username, profile details, country and language, social handles, wallet address when requested, campaign responses, URLs, uploaded files, review communications, and reward or payment records. Required fields vary by campaign and are shown before submission.

Service and security data

We may process session identifiers, timestamps, campaign activity, browser and device information, IP address, security events, and administrative audit records to operate, troubleshoot, and protect the service.

2. How we use information

• Authenticate users and maintain secure sessions.
• Operate profiles, campaigns, submissions, reviews, and rewards.
• Communicate service, review, revision, and reward status.
• Prevent abuse, enforce our Terms, and investigate security incidents.
• Maintain records required for payments, disputes, and applicable law.
• Improve the reliability and usability of OVERTHINK.

We do not sell personal information or Google user data, and we do not use Google user data for advertising, credit decisions, or surveillance.

3. Legal grounds and regional rights

Depending on where you live, we process information to perform our agreement with you, based on consent, for legitimate interests such as security and service improvement, and to comply with legal obligations. Mandatory rights under applicable local privacy and consumer laws continue to apply.

4. How information is shared

We may disclose limited information only:

• To infrastructure, database, storage, authentication, security, and professional service providers acting for us under appropriate obligations.
• To campaign administrators when needed to review a submission and administer a disclosed reward.
• When required by applicable law, legal process, or to protect users and the service.
• As part of a business reorganization, subject to applicable notice and consent requirements.

We do not permit service providers or campaign administrators to use Google user data for their independent advertising or data-broker purposes.

5. Google API Services

OVERTHINK’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We request the minimum permissions needed for sign-in and will update this Policy and obtain any required consent before using Google user data for a new purpose.

6. Storage, security, and international processing

We use encrypted transport, access controls, secure cookies, validation, audit logging, and provider-isolated credentials. No system is completely secure, but we maintain safeguards appropriate to the nature of the information. Because OVERTHINK is available globally, information may be processed outside your country. Where required, we use lawful transfer safeguards.

7. Retention and deletion

We retain account information while your account is active and retain campaign, audit, security, payment, or dispute records only as reasonably needed for the stated purposes and applicable obligations. You may request account deletion. Some records may be retained where legally required or necessary to protect the service, after which they are deleted or de-identified.

8. Your choices

Subject to applicable law, you may request access, correction, deletion, portability, restriction, or objection, and may withdraw consent. You can also revoke OVERTHINK’s Google access through your Google Account permissions. Revoking Google access may prevent future sign-in but does not automatically delete records already required for legitimate or legal purposes.

9. Children

OVERTHINK is not directed to children and is intended for users aged 18 or older. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to the service.

10. Changes and contact

We may update this Policy as the service or legal requirements change. Material changes will be communicated through the service or another appropriate channel before they apply where required.

For privacy questions or requests, contact Overthink at oushunduo@gmail.com.