Last updated 2026-11-10. See also the Terms of Service.

1. Who is responsible

triplefaucet.com is run by hexaclus Single Member Private Company, 66100 Drama, Greece. For anything about your data, write to service@triplefaucet.com.

2. What we store

• Your account: username, email address, password (only as a secure hash), the secret of your authenticator app if you turn on two-factor authentication, your sign-up date and IP address, and the account that referred you.
• Sign-ins: for each signed-in device, the IP address, the browser's user agent and when it was last used (Settings → Active sessions shows them). A log of sign-ins and failed sign-in attempts with their IP address, which also protects against password guessing.
• What you do on the site: faucet claims, daily bonuses, shortlink visits (with the IP address), tasks you create or complete, and every change to your balance. The country you choose in Settings (it also decides which tasks and jobs you see, when a poster limits one to some countries; a poster sees only how many of their visits or completions came from each country, not the country next to a member's name), and the moods you pick on the Mood Faucet together with that country: the mood map shows them only as totals per country, for countries with at least 10 members taking part, never per member. The leaderboard shows the most active members of the week and month with the first two letters of their username and what they earned there.
• Notifications: the messages under the bell (payouts, referral earnings, task reviews) and whether you read them.
• Withdrawals and exchanges: the WAX account and memo, or the FaucetPay address, amounts, and your IP address at the time of the request. Paid ones appear on the landing page and on Payment proofs with the first two letters of your username, the amount, the time and, for WAX, the blockchain transaction; never with your WAX account or FaucetPay address.
• Visits: for each visiting IP address, the site that sent it, and the number and time of visits; for referral links, the IP address and referring site of each click. This is how referrals are credited. A member’s promo page (triplefaucet.com/join/U_code) only adds one to that member’s daily count of views, or of clicks on its sign-up button, and notes the name of the site that showed it (e.g. the PTC site); no IP address, cookie or browser details are stored for it, and the member sees only these totals. A campaign tag in such a link (?c=, also on the landing page for our own ads) is counted the same way, per tag. When you sign up, your account keeps the name of the site that sent you (from the link you used, else from your first visit) and the tag of that link, if any, so we can see which promotion brings members who stay: your sponsor sees only totals per tag (how many signed up, earned something and came back), never who.
• Telegram tips: if you link your Telegram account (Settings → Telegram), its Telegram user id and the name it shows (@username or first name), and for each tip or rain share the sender, the recipient, the amount and the chat it was sent in. When someone tips a Telegram user who hasn’t linked an account, that user’s Telegram id and name are kept with the tip until it is credited or returned. Tips you receive show under the bell.
• Linked-account signals: to enforce one account per person, we note which device, network and mailbox each account is used with. The device is a random ID in a cookie, and both it and your email address are stored only as keyed hashes. Networks are stored as the IP address (IPv4) or its /64 range (IPv6). Admins see accounts that share these signals and decide by hand.
• Waves TRIPLE swaps: for each transfer to our Waves address: the Waves address it came from, the amount, the attachment and the transaction (all public on the Waves blockchain), and your personal swap code. We only read our address's incoming transfers from a public Waves node; nothing about you is sent to it.
• Old H2OX.io data: if you had an H2OX.io account, your account and old token balances came with it, and your claims on them are recorded.
• Our links to other sites: when you open one of our short addresses that lead to another faucet (triplefaucet.com/name, as on Other faucets), we only add one to that link’s count for the day. No IP address, cookie or browser details are stored, and the other site isn’t told which page you came from.
• Ad-block check: only daily totals of how often each check passed or failed, without anything that identifies you.

3. Cookies

We only use cookies that the site needs to work and to prevent abuse. There are no analytics or tracking cookies of our own.

The ads on the faucet pages are shown by an ad network (see below), which may set its own cookies under its own policy.

4. Services we use

• Brevo sends our emails (account confirmation, password reset, and any notices you opt in to). It receives your email address and the message.
• Cloudflare Turnstile checks that you are human on sign-up, faucet claims and task visits. Cloudflare receives your IP address and information about your browser.
• Shortlink providers: when you open a shortlink you visit the shortener's own site, which shows its ads and receives your IP address and browser information under its own policy. We send it only a one-time return address, nothing about you.
• A-Ads shows ads on the faucet pages. Your browser loads the ads from it, so it receives your IP address and browser information.
• Ad-block check: on the faucet pages (and on the dashboard while the daily bonus can be collected) your browser also sends a request to ad.a-ads.com to see if ads are blocked. It goes without cookies or the address of the page you're on.
• Offerwalls (CPX Research, BitLabs, Torox, Monlix, AdGem) show surveys and offers on the Offers page. They receive your member number and your IP address, and whatever you give them when you take part, under their own policies. With each completion they tell us your member number, the offer, what it pays and the IP address it was done from (to fight fraud).
• Telegram and the triple.quest bot: tips in Telegram go through Telegram and the bot of triple.quest (which we also run), which passes the command, your Telegram id and name and, for a rain, the Telegram ids of the chat’s recent writers to us and posts our answer in the chat. Telegram’s own privacy policy applies to what you write there.
• Reloadly supplies the gift cards you exchange TRIPLE for. It receives the order (card and value) from us, not your details; we email you the code ourselves.
• FaucetPay receives the address you give, the amount, and your IP address when we pay an exchange to it (FaucetPay asks for the IP to fight fraud).
• Other faucets: the sites our referral links lead to are run by others. Once you are there, their own privacy policy applies to what you do and give them.
• WAX blockchain: withdrawals are public blockchain transfers. The WAX account, amount and memo can be seen by anyone, forever.
• Everything else the pages load (scripts, styles, fonts and icons) comes from triplefaucet.com itself, apart from the captcha and the ad network above (and the ad-block check): no other company sees your visits.

We don't sell your data and don't share it with anyone else, unless the law requires it.

5. Why we use it

To run your account and pay what you earn (our agreement with you); to keep the site secure and the rewards fair: stopping bots, password guessing and multiple accounts (our legitimate interest); to show the ads that pay for the faucets (our legitimate interest); and to keep records of payments.

6. How long we keep it

• Linked-account signals for devices and networks: deleted after 180 days without use.
• Sign-in log (sign-ins and failed attempts, with IP address): deleted after 180 days.
• Visit records (IP address, referring site, number of visits): deleted 90 days after the last visit.
• Referral link clicks (IP address, referring site): deleted after 90 days.
• Signed-in devices (IP address, browser): deleted 7 days after they expire or are signed out.
• Email confirmation and password reset codes (stored only as a hash, with the IP address that asked for them): deleted after 30 days.
• IP addresses of faucet claims, daily bonus claims, completed shortlink visits and offerwall completions: removed after 30 days (the claims stay in your history).
• Your picks on the Mood Faucet (mood and country): the link to your account is removed after 90 days (only totals per country are ever shown, and only for countries with enough members).
• Shortlink visits that were not completed: IP address removed after 7 days (kept for the statistics).
• The IP address you signed up from: removed 90 days after sign-up.
• The IP address and operating system of your last sign-in: removed 180 days after it.
• IP addresses of WAX withdrawals, exchanges and H2OX conversion claims: removed 180 days after they are finished.
• The FaucetPay address or email an exchange was paid to: removed 365 days after it is finished (the amount stays in your history).
• IP addresses in the log of team actions on accounts: removed after 365 days.
• Proof you send for a job (your text, screenshot and dispute text): removed 30 days after the decision (the job stays in your history).
• A job poster's log of the confirmations their server sent us (time, your job code and our answer, no IP addresses): deleted after 90 days.
• Telegram, if you link it for tips: your Telegram user id and the name it shows, while it is linked; after you disconnect it, the id is removed after 30 days.
• The Telegram id and name a tip was sent to: removed 30 days after the tip was credited or returned (the tip stays in both histories).
• The bot's requests for your tips (Telegram update number and our answer): deleted after 7 days.
• Gift card codes you exchanged TRIPLE for (stored encrypted): deleted 90 days after delivery.
• Notifications: deleted 90 days after you read them, and unread ones after 180 days.
• Data from the old H2OX.io site: its sign-in log, visit records, referral clicks and email codes were deleted, and its IP addresses removed, when it moved to triplefaucet.com. Balances and history were kept.
• Your account, faucet claims, tasks and balance history: as long as your account exists. Records of payments may be kept longer where the law requires it.
• When we delete your account at your request: everything tied to it is deleted at once, including your data from the old H2OX.io site. We keep the record of payments (balance history entries, withdrawals, exchanges), no longer linked to a username, as long as tax and accounting law requires, and your email address for 90 days, so that no new account can be opened with it straight away; then it is deleted too. A remaining balance is forfeited.
• Blockchain transfers can't be deleted by anyone.

7. Your rights

You can ask us for a copy of your data, to correct it, or to delete your account, and you can object to how we use it. Write to service@triplefaucet.com from the email address of your account. Depending on where you live, you may also complain to your data protection authority.

8. Security

Passwords are stored as secure hashes, sign-in tokens only as hashes, and the site uses HTTPS. Turn on two-factor authentication in Settings for the best protection.

9. Children

The site is not for anyone under 18. If we learn that an account belongs to someone younger, we close it.

10. Changes

When we change this policy, the date at the top changes too; important changes will be announced on the site.