US State-Specific Privacy Policy
Last Revised: January 20, 2026
This US State-Specific Privacy Policy ("Policy") for CreationsRewards.Net LLC ("Company") applies to "Consumers" as defined under the California Consumer Privacy Act of 2020, as amended by the California Privacy Rights Act (collectively, the "CCPA"), Colorado Privacy Act, Connecticut Act Concerning Personal Data Privacy and Online Monitoring, Delaware Personal Data Privacy Act, Florida Digital Bill of Rights, Indiana Consumer Protection Act, Iowa Act Relating to Consumer Data Protection, Kentucky Consumer Data Protection Act, Maryland Online Data Privacy Act, Minnesota Consumer Data Privacy Act, Montana Consumer Data Privacy Act, Nebraska Data Privacy Act, Nevada Privacy of Information Collected on the Internet from Consumers Act, New Hampshire Act Relative to the Expectation of Privacy, New Jersey Act Concerning Online Services, Oregon Consumer Privacy Act, Rhode Island Data Transparency and Privacy Protection Act, Tennessee Information Protection Act, Texas Data Privacy and Security Act, Utah Consumer Privacy Act, Virginia Consumer Data Protection Law, and all laws implementing, supplementing, or amending the foregoing, including regulations announced thereunder, as well as any additional US state privacy laws now or hereafter applicable to the Company.
This US State-Specific Privacy Policy, along with our Privacy Policy and Terms of Service should be treated as a single document.
1. Notice of Data Practices
The description of our data practices in this Policy will be updated at least annually. If there are materially different changes to this Policy, we will provide supplemental pre-collection notice of the current practices, which may include references to other privacy policies, notices, or statements. Otherwise, this Policy serves as our notice at collection.
We collect PI (Personal Information) from you or from your Devices.
We process your PI to provide you our Services, and as otherwise related to the operation of our business, including for one or more of the following Business Purposes:
- Debugging;
- Managing Interactions and Transactions;
- Performing Services;
- Processing Interactions and Transactions;
- Providing Advertising & Marketing Services;
- Quality Assurance;
- Research and Development.
- Security;
We may also use your personal information for other Business Purposes in a context that is not a Sale or Share under applicable US State Privacy Laws, such as disclosing it to our Service Providers, Contractors, or Processors that perform services for us ("Vendors"), to you, or to other parties at your direction or through your action (example: If you participate in a Third Party Opportunity that requires prequalification, you direct us to process and disclose your profile information to the Advertiser to determine if you qualify for the Third Party Opportunity. And any third party service that you interact with in response will receive both your profile and other activity data); for the additional purposes explained at the time of collection; as required or permitted by applicable law; to the government or private parties to comply with law or legal process; and in Business Transactions (collectively, "Additional Business Purposes"). Subject to restrictions and obligations under US State Privacy Laws, our Vendors may also use your personal information for Business Purposes and Additional Business Purposes, and may engage their own vendors to enable them to perform services for us.
We may also use and disclose your personal information under this Policy for Commercial Purposes, which may be considered a "Sale" or "Share" under applicable US State Privacy Laws, such as when Trusted Third Parties collect your personal information via third-party cookies, and when we process personal information for certain advertising purposes.
As permitted by applicable law, we do not treat de-identified data or aggregate consumer information as personal information, and we reserve the right to convert your personal information into de-identified or aggregate consumer information. We have no obligation to re-identify information or keep it longer than we need it to respond to your requests. Data exempt from US State Privacy Laws are not included in this Policy.
We provide more detail on our data practices in the charts below.
a. PI Collection, Disclosure, and Retention - By Category of PI
We collect, disclose, and retain PI as follows:
| Category of Personal Information | Examples of PI Collected and Retained | Categories of Recipients |
| Identifiers | This may include, but is not limited to: a real name, alias, postal address, unique personal identifier, online identifier, Internet Protocol address, email address, account name, or other similar identifiers. | Business Purpose Disclosure:
Sale / Share:
|
| Personal Records | This may include, but is not limited to: physical characteristics or description, signature, telephone number, education, employment, employment history, bank account number, credit card number, debit card number, or any other financial information. | |
| Personal Characteristics or Traits | This may include, but is not limited to: age, gender, nationality, race, or information related to medical conditions. | |
| Customer Account Details/ Commercial Information | This may include but is not limited to: records and receipts of personal property, products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies. | |
| Internet Usage Information | This may include, but is not limited to: browsing history, search history, and information regarding your interaction with an Internet Web site, application, or advertisement | |
| Geo-location Data | This may include, but is not limited to: coarse and/or precise physical location | |
| Professional or Employment Information | This may include, but is not limited to: professional, educational, or employment-related information | |
| Inferences from PI Collected | This may include, but is not limited to: creating a profile about a Consumer reflecting the Consumer's preferences, characteristics, psychological trends, predispositions, behavior, attitudes, intelligence, abilities, and aptitudes. | |
| Sensitive PI |
|
Business Purpose Disclosure:
Sale/Share:
|
As required by Florida Law and Texas Law, we provide you with the following notice:
NOTICE: We do not sell your sensitive personal data.
We retain your PI based on how long we believe we have a legitimate purpose for the retention. In general, we retain all categories of PI listed in the chart above for as long as a customer account is open and for an additional 2 years after the account is closed; however, some data may be retained for a shorter or longer period.
When deciding how long to keep your PI, we consider (among other things) whether we have an active relationship with you, whether we need to retain the PI to provide you our Services, whether we are subject to any legal obligations (e.g., any contracts or laws that require us to maintain certain data for a certain period of time), our Data Purposes, our Business Purposes and Additional Business Purposes.
Rather than delete your PI, we might deidentify it by removing identifying details so it is no longer considered PI, in which event we will not attempt to re-identify that data.
There may be additional information we collect that meets the definition of PI under applicable US State Privacy Laws but is not reflected by a category above, in which case we will treat it as PI as required but will not include it when we describe our practices by PI category.
2. PI Use and Disclosure - By Processing Purpose
We use and disclose PI for the processing purposes described below. For the categories of recipients for each purpose, please refer to the chart above at Section A(i) (PI Collection, Disclosure, and Retention – By Category of PI), as indicated by relevant category of PI below:
| Processing Purpose(s) | Example(s) of Processing Purpose | Categories of PI Implicated |
| Performing Services |
|
|
| Managing Interactions and Transactions |
|
|
| Security |
|
|
| Debugging |
|
|
| Providing Advertising and Marketing Services |
|
|
| Quality Assurance |
|
|
| Processing Interactions and Transactions |
|
|
| Research and Development |
|
|
| Additional Business Purposes |
|
|
| Commercial Purposes |
|
|
3. Your Consumer Rights and How to Exercise Them
We provide Consumers the privacy rights described in this section pursuant to the requirements of their applicable US State Privacy Law as of the effective date of each such law, provided any such request meets the requirements for a Verifiable Consumer Request (defined below). For residents of states without applicable US State Privacy Laws, we may consider requests under this section but will apply our discretion in whether and how we process them. We may also apply state law rights in states with US State Privacy Laws prior to the effective date of such laws in our discretion. At this time, in an exercise of our discretion, we will accept and process Right to Delete requests (as defined below) from all consumers.
To submit a request to exercise your Consumer privacy rights under US State Privacy Laws, or to submit a request as an authorized agent, please follow the instructions at our Consumer Rights Request page here or mail your request to the following address: CreationsRewards.Net LLC, 118 S 19th Ave, Manville, NJ 08835, Attention: Privacy, and respond to any follow-up inquiries we make. Please be aware that we do not accept or process requests through other means (via phone, fax, chats, social media, etc.). More details on the request and verification process are provided in Section 3 (How We Process Your Consumer Privacy Requests) below. The Consumer rights we accommodate are as follows:
i. Right to Limit Sensitive PI Processing
With regard to PI that qualifies as Sensitive PI under US State Privacy Laws, if you elect to provide us with that Sensitive PI, you will have consented to our collection and processing of it. You may submit a request to limit certain processing of your Sensitive PI here. However, under applicable US State Privacy Laws, your request will not affect the following permitted processing purposes, or any other purposes permitted by law:
- To perform our Services at your request or at your direction;
- To prevent, detect, and investigate security incidents, fraudulent activity, illegal actions, etc.;
- For short term transient use, including, but not limited to, non-personalized advertising as part of your interaction with our Services; and
- To maintain or service accounts, provide customer service, process or fulfill Offers, orders and transactions, verify customer information, process payments, or provide similar services.
- The collection of precise location via some of our mobile applications is subject to you activating location services. You can discontinue those services at any time as explained in subsection iii below.
ii. Right to Know / Access
Consumers have the right under US State Privacy Laws to request access to PI maintained by the Company. This right may be limited in some circumstances by law.
a. Categories
California residents have a right to submit a request for any of the following for the period that is 12-months prior to the request date:
- The categories of PI we have collected about you.
- The categories of sources from which we collected your PI.
- The Business Purposes or Commercial Purposes for our collecting or Selling your PI.
- The categories of third parties to whom we have shared your PI.
- A list of the categories of your PI disclosed for a Business Purpose and, for each, the categories of recipients, or that no disclosure occurred.
- A list of the categories of your PI sold and, for each, the categories of recipients, or that no sale occurred.
- Residents of Delaware, Oregon, Maryland, and Minnesota can request additional information regarding certain third party disclosures of your PI (e.g., excluding disclosures to our service providers and processors).
Consumers of other states subject to US State Privacy Laws have the right to confirm if we are processing your PI, which we will treat as a Categories request.
b. Specific Pieces (Transportable Copies)
You may request to obtain a transportable copy of your PI that we have collected and are maintaining, as required by applicable US State Privacy Laws. If you wish to receive specific pieces of your PI, we will attempt to honor requests for specific pieces of your PI where reasonably possible. We have no obligation to re-identify information or to keep PI longer than we normally retain it or longer than we are required to under applicable law to comply with access requests.
iii. Do Not Sell / Share / Target for Advertising and Limit Location Services
Various US State Privacy Laws have broad and differing concepts of "Selling" PI for which an opt-out is required, with some states including PI transfers for non-monetary consideration and other states only including PI transfers for monetary consideration. California also has an opt-out from "Sharing" for Cross-Context Behavioral Advertising purposes (use of PI from different businesses or services to target advertisements across websites or apps). Other states have an opt-out of "Targeted Advertising" (defined differently, but also addressing tracking, profiling, and targeting of advertisements). We may Sell or Share your PI and/or use your PI for Targeted Advertising, as these terms apply under US State Privacy Laws. However, we provide you with an opt-out of Sale/Sharing/Targeting that is intended to combine all of these various state opt-outs into a single opt-out available regardless of which US State Privacy Law is applicable to your PI.
Ad Networks and other Trusted Third Parties may associate cookies and other Tracking Technologies that collect PI about you on CreationsRewards or in connection with our Services, or otherwise collect and process PI that we make available about you. We understand that making your PI available on CreationsRewards or in connection with our Services, or otherwise, to Trusted Third Parties could be deemed a Sale and/or Share under some US State Privacy Laws and thus we will treat such PI (e.g., cookie ID, IP address, and other online IDs and internet or other digital activity information) collected by Trusted Third Parties that are not limited to acting as our Service Provider (or Contractor or Processor), as a Sale and/or Share and subject to your right to make a Do Not Sell/Share/Target opt-out request. We will not Sell your PI, Share your PI for Cross-Context Behavioral Advertising, or process your PI for Targeted Advertising if you make a Do Not Sell/Share/Target opt-out request as follows:
Opt-out for non-cookie PI: If you want to limit our processing of your non-cookie PI (e.g., your email address or web browsing activity) for Targeted Advertising, or opt-out of the Sale/Sharing of such PI, you may make an opt-out request here.
Opt-out for cookie PI: If you want to limit our processing of your cookie-related PI for Targeted Advertising, or opt-out of the Sale/Sharing of such PI, you may exercise an opt-out request by following the instructions on our Consumer Rights Request page here, or by clicking the link to update Your Cookie Choices. This cookie management tool enables you to exercise such an opt-out request and enable certain cookie preferences on your Device. Since your browser opt-out is designated by a cookie, if you clear or block cookies on your Device, your preferences may no longer be effective, and you will need to enable them again via our cookie management tool.
Opt-out for precise geo-location PI: If you want to limit our processing of precise geo-location data obtained via your mobile Device, or opt-out of the Sale/Sharing of such PI, you may do so by refusing permission for or turning off the location services for your Device located in your account settings (if available) or in your Device settings.
Opt-out preference signals ("OOPS"), as they are known in California; also known as global privacy control (or GPC): Some of the US Privacy Laws require businesses to process OOPS or GPC signals, which are signals sent by a platform, technology, or mechanism, enabled by individuals on their devices or browsers, that communicate the individual's choice to opt-out of the Sale and Sharing of PI. To use an OOPS/GPC, you can download a compatible internet browser or a plugin for on your current internet browser and follow the settings to enable to OOPS/GPC. We have configured our Services to receive and process OOPS/GPC signals on our website.
We process OOPS/GPC signals with respect to any Sales and Sharing of PI with Trusted Third Parties that may occur via cookies or other Tracking Technologies (other than those that collect precise geo-location data), as discussed above and apply it to the specific browser on which you enable OOPS/GPC. We do not: (1) charge a fee for use of our service if you have enabled OOPS/GPC; (2) change your experience with any product or service if you use OOPS/GPC, although it may affect our ability to accurately track your activities for crediting your account with qualified rewards; or (3) display a notification, pop-up, text, graphic, animation, sound, video, or any interstitial in response to the OOPS/GPC, except for indicating whether we recognize the signal.
We may disclose your PI for the following purposes, which are not a Sale or Share: (i) if you direct us to disclose PI; (ii) to comply with a Consumer rights request you submit to us; (iii) disclosures amongst the entities that constitute Company as defined above, or as part of a Business Transaction; and (iv) as otherwise required or permitted by applicable law.
iv. Right to Delete
Except to the extent we have retention rights under applicable law, you may request that we delete your PI. Our retention rights include, without limitation:
- To complete transactions and services that you have requested;
- For security purposes;
- For legitimate internal Business Purposes (e.g., maintaining business records);
- To comply with law and to cooperate with law enforcement; and
- To exercise or defend legal claims.
Please also be aware that making a deletion request does not ensure complete or comprehensive removal or deletion of PI or content you may have posted.
Under certain US State Privacy Laws, your deletion right may apply only to PI that we collected directly from you.
v. Right to Correct
Consumers in certain states may bring inaccuracies they find in their PI that we maintain to our attention, and we will act upon such a report as required by applicable law.
You can also make changes to your PI in your online account in the My Profile section of the account. That will not, however, necessarily change your PI in other places where we may maintain it.
4. How We Process Your Consumer Privacy Requests
To submit a request to exercise your Consumer privacy rights, or to submit a request as an authorized agent, please follow the instructions at our Consumer Rights Request page here or mail your request to the following address: CreationsRewards.Net LLC, 118 S 19th Ave, Manville, NJ 08835, Attention: Privacy, and respond to any follow-up inquiries we make. In addition, you may email
i. Your Request Must be a Verifiable Consumer Request
As permitted or required by applicable US State Privacy Laws, any request you submit to us must be a Verifiable Consumer Request, meaning that when you make a request, we may ask you to provide verifying information, such as your name, e-mail, telephone number and/or account information. We will review the information provided and may request additional information (e.g., transaction history) to ensure we are interacting with the correct individual. We may not fulfill your Right to Know/Access, Right to Delete, or Right to Correct request unless you have provided sufficient information for us to reasonably verify you are the Consumer about whom we collected PI. We do not verify requests to Opt-out of Sell/Share/Target or Limit Sensitive PI unless we suspect fraud.
You are not required to create a password-protected account with us to make a Verifiable Consumer Request, but you may use your password-protected account to do so. If we suspect fraudulent or malicious activity on or from the password-protected account, we may decline a request or request that you provide further verifying information.
We verify each request as follows:
- Right to Know/Access (Categories): If you do not have a password-protected account, we verify your Request to Know/Access Categories of PI to a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you. If we cannot do so, we will refer you to this Notice for a general description of our data practices.
- Right to Know/Access (Specific Pieces): If you do not have a password-protected account, we verify your Request To Know/Access Specific Pieces of PI to a reasonably high degree of certainty, which may include matching at least three data points provided by you with data points maintained by us, which we have determined to be reliable for the purpose of verifying you together with a signed declaration under penalty of perjury that you are the Consumer whose PI is the subject of the request. If you fail to provide requested information, we will be unable to verify you sufficiently to honor your request, but we will then treat it as a Right to Know Categories Request if you are a California resident.
- Do Not Sell/Share/Target & Limit Sensitive PI: No specific verification required unless we suspect fraud.
- Right to Delete: If you do not have a password-protected account, we may verify your Request to Delete to either (i) a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, or (ii) a reasonably high degree of certainty, which may include matching at least three data points provided by you with data points maintained by us, depending on the sensitivity of the PI and the risk of harm to the Consumer posed by unauthorized deletion. If we cannot verify you sufficiently to honor a deletion request, you can still make a Do Not Sell/Share/Target and/or Limit Sensitive PI request.
- Right to Correct: If you do not have a password-protected account, we verify your Request to Correct to either (i) a reasonable degree of certainty, which may include matching at least two data points provided by you with data points maintained by us, or (ii) a reasonably high degree of certainty, which may include matching at least three data points provided by you with data points maintained by us, depending on the sensitivity of the PI and the risk of harm to the Consumer posed by unauthorized correction.
To protect Consumers, if we are unable to verify you sufficiently, we will be unable to honor your request. We will use PI provided in a Verifiable Consumer Request only to verify your identity or authority to make the request and to track and document request responses, unless you also gave it to us for another purpose.
ii. Agent Requests
Authorized agents may exercise rights on behalf of Consumers, depending on the Consumer's state of residency, but we reserve the right to also verify the Consumer's identity directly as described above. Authorized agents must contact us by submitting a request through our Consumer Rights Request page here and indicating in the message text field that they are submitting the request as an agent. We will require the agent to demonstrate authority to act on behalf of the Consumer by providing evidence sufficient to verify the agent's identity and authority to act on behalf of the Consumer. For example, if you are California Consumer, we may require evidence of the agent's identity, proof of registration with the California Secretary of State (if the agent is a business), and at least one of the following evidencing proof of the agent's legal authority to act on behalf of the individual Consumer: (i) a Power of Attorney granted under the Probate Code that we can reasonably verify; or (ii) signed, written permission by the Consumer. We apply similar verification standards for agent requests received on behalf of Consumers in other states where agent requests are permissible.
We may also require the Consumer to verify their own identity directly with us and to directly confirm with us that they provided the authorized agent permission to submit the request.
In addition, residents of certain states may use an agent to make an opt-out request subject to reasonable verification of agent authority and consumer identity.
In the absence of any of the general conditions detailed above, we are entitled to reject any request submitted through an agent. In addition, the agent is subject to the verification standards applicable to the type of request(s) made.
iii. Appeals
Consumers may appeal our decision regarding a request by contacting us at
iv. Our Responses
Some PI that we maintain is insufficiently specific for us to be able to associate it with a Consumer (e.g., clickstream data tied only to a pseudonymous browser ID). We do not include that PI in response to those requests. If we deny a request, in whole or in part, we will explain the reasons in our response.
We will make commercially reasonable efforts to identify Consumer PI that we process to respond to your Consumer request(s). In some cases, particularly with voluminous and/or typically irrelevant data, we may suggest you receive the most recent or a summary of your PI and give you the opportunity to elect whether you want the rest. We reserve the right to direct you to where you may access and copy responsive PI yourself. We may also refuse to act upon a request that is excessive, repetitive, unfounded, or overly burdensome.
Consistent with applicable US State Privacy Laws and our interest in the security of your PI, we will not deliver to you your Social Security number, driver's license number, or other government-issued ID number, financial account number, an account password, or security questions or answers, in response to a Consumer privacy rights request; however, you may be able to access some of this information yourself through your account if you have an active account with us.
5. Non-Discrimination/Non-Retaliation
We will not discriminate or retaliate against you in a manner prohibited by applicable US State Privacy Laws for your exercise of your Consumer privacy rights. We may charge a different price or rate, or offer a different level or quality of good or service, to the extent that doing so is reasonably related to the value of the applicable data.
6. Notice of Financial Incentive Programs
We may offer rewards or other benefits ("Incentives") from time-to-time to Consumers that provide us with PI, such as name, telephone number, e-mail address, IP address, or geo-location. You may opt-in to Incentives by subscribing to Incentive programs we may offer from time-to-time. If you subsequently wish to withdraw from such programs, the method for doing so will be explained in the program Terms of Use, and you may do so at any time. For more information, including valuation notice, see our Notice of Financial Incentives here.
7. Our Rights and the Rights of Others
Notwithstanding anything to the contrary, we may collect, use and disclose your PI as required or permitted by applicable law and this may limit or affect your rights under US State Privacy Laws. In addition, we are not required to honor your requests to the extent that doing so would infringe upon our or another person’s rights or conflict with applicable law.
8. Additional Notices for Residents of Certain States
This Notice provides additional information on our online practices and the rights of residents of certain states related to CreationsRewards and our Services.
i. California Minors Erasure
The Company does not knowingly collect any Personal Information from persons younger than the age of 18. If you are a California resident under eighteen (18) years of age who has posted content or information on CreationsRewards or our Services, you can request removal by contacting us at the mailing address set forth in the Contact Us section above detailing where the content or information is posted and attesting that you posted it. We will then make reasonably good faith efforts to remove the post from prospective public view or anonymize it so you cannot be individually identified to the extent required by applicable law. This removal process cannot ensure complete or comprehensive removal. For instance, third parties may have republished or archived content by search engines and other means that we do not control.
ii. Shine the Light - California Residents
We also provide California residents with the option to opt-out of the disclosure of "personal information," as defined by California's "Shine the Light" law, to third parties (other than Company affiliates) for such third parties' own direct marketing purposes. California residents may exercise this opt-out, request information about our Shine the Light law compliance, and/or obtain a disclosure of third parties that we have disclosed information to where the opt-out does not apply (i.e., our affiliates) and the categories of information that we disclosed. California residents may make such a request, or inquire further about our compliance with this law, by emailing
iii. Affirmative Opt-In for Sale or Sharing, or use for Targeted Advertising, of PI of "Child" Residents of Certain States
We do not knowingly Collect, Sell, Share, or use for Targeted Advertising, the PI of Consumers who meet the definition of a "child" (or other similar term) under applicable US State Privacy Laws. The Company does not knowingly collect any PI from persons under the age of 18. If you think we may have unknowingly Collected, Sold, Shared, or used PI for Targeted Advertising, of a Consumer under the threshold age (as set by the applicable US State Privacy Law) without the appropriate affirmative opt-in authorization, please report that to us as described in the Contact Us section of our Privacy Policy.