Read this document to learn how we use data for publishers and content creators. In this policy “we”, “us”, etc. refers to Brave Software Inc.
(To learn how we use data to operate this website and other Brave sites, forums, and communications, see the Website Privacy Policy. To learn how we use data for the Brave Browser, see the Brave Browser Privacy Policy).
Basic Attention Token Contributions
To collect Basic Attention Tokens (BAT) as a creator, you must create a Brave Creators account on this site. This involves providing your name and email address. You will only be eligible to receive contributions from users in your capacity as a Brave creator if you have signed up with Brave Creators and meet all eligibility criteria to count as a “Verified Creator”. Learn more about being a Verified Creator. Brave does not know which users made contributions to which creators.
Registering sites or channels
If you are a creator who has user-generated content platform accounts (including but not limited to YouTube, Twitch, Vimeo, X (formerly Twitter)/X, etc.) or owns a website, Brave has a function that allows you to register your account or website with Brave Creators in order to receive contributions of BAT from Brave itself and/or from your visitors. To do so, it is necessary to demonstrate that you are the owner of the site(s) or channel(s) for which you receive BAT. For websites, this is done by providing information from your web server or DNS provider. For user-generated content platform accounts, we will verify your ownership using services provided by the platform that hosts your channel.
For example, in order to register a YouTube channel with your Brave Creators account, Brave will use YouTube’s Application Programming Interface (API) to authenticate your account and check your ownership of the channel. We do this check once and will save the following information: the channel’s title and description; a thumbnail picture of the channel; the current subscriber count; your YouTube User ID and User Name; your YouTube email address.
Please note that linking your YouTube account with Brave Creators is subject to YouTube’s Terms of Service and Google’s Privacy Policy (http://www.google.com/policies/privacy), which you would have already agreed to when creating a YouTube account. During the process of linking your YouTube channel, you will be guided to sign in to your Google account and provided with notice about what data is shared with Brave. You can also check what API’s have access to your data and revoke any of concern by visiting https://myaccount.google.com/security.
Connecting External Accounts or Addresses to Brave Creators
Custodial Accounts
You have the ability to connect an account from one of our custodial account provider partners (e.g., Uphold, Gemini, bitFlyer, etc.) to your Brave Creators account. If you choose to do so, your selected account provider will tell us whether your account is in good standing, has completed certain requirements (such as ID verification or KYC requirements), the list of currencies you have configured, and the country associated with your account. Note that our custodial account provider partners are third-party services, and in using them, you are bound by their respective Privacy Policies, Terms, and other notices.
Web3 Accounts & Addresses
You have the ability to connect a self-custody Web3 address (e.g., a Solana address, Ethereum address, etc.) to your Brave Creators account and sites/channels in order to receive Brave Creators payouts from Brave, and/or to receive contributions directly from users. Web3 addresses connected to your sites/channels will be exposed to the public so that people can send contributions directly to the Web3 addresses associated with your sites/channels.
You can remove Web3 addresses from your sites/channels or Brave Creators account at any time. If you remove a Web3 address from a site/channel, then we will stop exposing your Web3 address to users in association with your site/channel.
Note that Web3 addresses and their associated data (such as transaction history, activity, etc.) are typically public, immutable, and unencrypted. Brave does not have control over Web3 networks such as Solana, Ethereum, etc.
Security
We record IP addresses when requests are made to identify & prevent fraud and to protect the integrity of the service. We also monitor how the account is used, for anti fraud and to maintain the reliability and performance of the service.
We will also check the email address you provide against https://haveibeenpwned.com/ to determine if it has been compromised to help protect against fraud. We rely on legitimate interests to conduct this check.
If you ask us to keep in touch with you by email, we will use SendGrid or MailChimp based in the United States to help us contact you. The processing of personal data on our behalf is subject to a range of measures to help safeguard your personal data including the use of EU standard contractual clauses. Every email we send this way will also include an unsubscribe link.
Publishers and content creators
| Purpose of processing | Categories of personal data processed | Legal basis of processing | Duration of storage |
| To communicate with publishers and creators that have signed up as Brave business partners. | Name, e-mail address, frequency of access to these emails, links clicked, and phone number (if provided). | Necessary for the performance of the contract agreed between both the creator and Brave (and necessary for us to provide the requested service). | The duration of the creator’s account with Brave. |
| To maintain accounts, statistics, and billing with publishers and creators that have signed up as Brave business partners. | Name, e-mail address, Uphold wallet ID, phone number, names and URIs1 of websites, Youtube, Twitch etc., including their favicons or avatars, an internal publisher ID, and transaction details. | Necessary for the performance of the contract agreed between both the creator and Brave (and necessary for us to provide the requested service). | The duration of the creator’s account with Brave. |
| To enable all publishers and creators to accumulate contributions of BAT from Brave, and from Brave users. | Names and URIs1 of websites, Youtube, Twitch etc., and publicly available contacts, and transaction details. | Our interest in providing publishers and content creators with BAT as soon as they start to work with Brave. The data are used in a way that does not negatively affect your rights or interests. | Indefinite. |
| To comply with tax obligations. | Uphold wallet ID (plus Brave revenue from transactions, which are not personal data), and transaction details. | Necessary for compliance with a legal obligation. | 4 years after end of creator’s account. |
| Internal communications. | Name, e-mail address, and internal publisher ID at the time of communication. | Necessary for the performance of the contract agreed between both the creator and Brave (and necessary for us to provide the requested service). | Indefinite. |
| To detect fraudulent claims of “referral rewards”, ads and “user growth pool” BAT grants. | Name, e-mail, phone number, IP address, names and addresses of channels (websites, Youtube, Twitch URI1 etc.) including their favicons or avatars, an internal publisher ID, internal identifiers. Where PayPal is used, the PayPal user’s country, verification status, and PayPal account ID. | Necessary for the performance of the contract agreed between both the creator and Brave (and necessary for us to provide the requested service). | Necessary for the performance of the contract agreed between both the creator and Brave (and necessary for us to provide the requested service). The duration of the creator’s account with Brave. (Data may be stored indefinitely in the case of detected fraudsters). |
Contacting Brave about your personal data and privacy rights
To contact our data protection officer and privacy team with privacy related enquiries, or to exercise your data protection and privacy rights, email privacy@brave.com.
It’s Brave’s policy to not collect personal data2 unless it’s necessary to provide services to our users, or to meet certain legal obligations. We do not buy or sell personal data about consumers.
Where we process personal data about you (subject to laws such as the EU General Data Protection Regulation (GDPR), or California privacy laws such as the CCPA or CPRA), you have the following rights:
- Right to be informed: You have the right to know what personal data we process about you and why, together with information about your rights. We explain this via our product privacy policies and/or contextual privacy notices.
- Right of access: Where we process personal data about you, you have the right to request a copy of it.
- Right to delete: When certain grounds apply, you can ask us to delete personal data we are processing about you. Please note, we have a separate global policy for Brave Search results and the right to be forgotten.
- Right to rectification: You can ask us to correct inaccurate personal data and/or to update incomplete data.
- Right to restriction: In certain circumstances, you can request that we refrain from processing your personal data.
- Right to object: In certain circumstances, you can object to the processing of your personal data (for example to object to the use of your data for profiling and/or purely automated decision making). Please note that we do not buy or sell personal data about consumers.
- Right to data portability: In certain circumstances you have the right to request and receive personal data in a structured, commonly used, machine readable format that makes it possible to reuse the data. Please note, anonymous data is not subject to this right.
- Right to lodge a complaint with a regulatory authority: Brave is based in the USA. The authority to lodge a complaint about Brave will depend on where you live. If you’re in the EU you can contact our nominated representative under the General Data Protection Regulation (GDPR), or you can complain to the Irish Data Protection Commissioner. If you’re in the UK you can complain to the Information Commissioner’s Office. If you’re in California you can complain to the California Privacy Protection Agency.
For EU residents, we have appointed a nominated representative under the GDPR to act on our behalf regarding GDPR compliance. You may contact our nominated representative if you wish; however, the representative will refer enquiries to Brave’s data protection officer for consideration.
Our EU nominated representative is:
Brave EU Nominated Representative
Care of Castlebridge
New Work Junction
Clonard, Wexford
Ireland
We’ll update this policy whenever we make material changes to our practices, and we’ll announce it to let you know.
-
For an explanation of what a URI is see https://en.wikipedia.org/wiki/Uniform_Resource_Identifier. If some of the names of these websites and channels that Brave has recorded to facilitate BAT gifts from Brave and donations from users happen to contain people’s names, then we treat these URLs as personal data. ↩︎
-
Personal data means any information that relates to an identified or identifiable living individual. In the USA, this is often referred to as Personal Information (PI) or Personally Identifiable Information (PII). These terms are equivalent but not identical.
This can include information that can directly identify an individual—such as name or email address—and any other information that may make a person indirectly identifiable—such as online identifiers that could be combined with other data to identify an individual, or used on their own to single out individuals and distinguish one person from another with an intent to learn something about them or to take an action towards them. ↩︎
