Opinagora ← Back to home

Privacy Policy

LAST UPDATED: 4 JULY 2026

This Privacy Policy takes effect upon registration for new users, and on the date it is published on our site for existing users.

Opinagora is a rewards panel: you earn points by answering surveys and completing missions (downloading games, testing apps or websites, etc.), then redeem those points for gift cards and other rewards. This policy describes the data we collect in this context, what we do with it, who we share it with, and the rights available to you.

Data controller and Data Protection Officer

The information collected on this site is recorded in a file by Cre'Online, acting as data controller, represented by Fabrice Payet, manager, for the purposes set out in this policy under "How do we use the information we collect".

You can contact the data controller by email at [email protected].

We have appointed a Data Protection Officer (DPO), responsible for overseeing our compliance with applicable data protection law. For any question about your personal data or to exercise your rights, write to us at [email protected].

The information we collect

Information you provide at registration

When you create your account on the Opinagora panel, we collect the following information through the registration form:

Date of birth and gender are collected at registration because they determine eligibility for many surveys. Providing all of this information is required to open your account and access our services.

If you register or sign in through a third-party provider (Google, Facebook), we receive from that provider your account identifier, your email address (verified by the provider) and your name. We then ask you to complete your country, language, date of birth and gender.

Profile information (optional)

You may provide additional information by answering profiling questionnaires, for example:

This information is helpful but not mandatory. If you do not provide it, you may not have access to certain surveys, or you may be offered surveys that match your profile less closely.

Delivery data (Product Test rewards)

When you take part in a "Product Test" mission that involves shipping a physical item, we collect the information needed for delivery: recipient name, postal address and phone number. This information is collected only if you apply for that type of mission, and it is encrypted at rest in our database.

Information collected automatically

Other information is collected when you use our site, whether or not you are signed in to your member account:

If you contact us through our support form or by email, we keep a record of that correspondence in order to handle your request.

Legal bases for processing

In accordance with the GDPR, each processing activity relies on a specific legal basis:

How do we use the information we collect?

All the data we collect serves to build and operate a panel of members likely to take part in market research matching their profile, and to pay them the associated rewards. Cre'Online processes your data for the following purposes:

In carrying out this processing, we do not conduct direct marketing on behalf of third parties and we do not sell your data to telemarketers or advertising agencies.

The information we share

Research partners and their clients

The surveys offered to you come from our partner research institutes (research institutes and survey platforms) and from their own clients. When you access a survey, certain data about you is transmitted to the institute concerned, namely a pseudonymous panelist identifier (which does not allow you to be identified directly), a hashed version of your email address, your profile answers relevant to the survey (for example your age range, gender, date of birth, language and country), as well as your IP address and device type at the time of the request, for the sole purposes of:

Some of these institutes are established outside the European Union, in particular in the United States (see "Transfers of your data"). When an institute redirects you to one of its surveys, the processing of the answers you provide there is governed by its own privacy policy, presented to you at the time of participation (see also "Survey responses").

Service providers and processors

To operate the service, we use processors that access your data only on our behalf and according to our instructions:

Other cases of sharing

We may also share data in order to:

We work with our partners and processors to ensure they uphold high standards of privacy and security, which we review regularly.

Transfers of your data

Cre'Online is established in the European Union and hosts its infrastructure there. Depending on your country of residence, your data may therefore be processed outside that country, in particular within the European Union and, for certain providers, in the United States. The data concerned may include your panelist identifier, your profile criteria and the information needed to deliver your rewards.

We frame these transfers using the appropriate safeguards provided by the GDPR:

You can obtain a copy of the applicable safeguards by writing to us at [email protected].

Sensitive data

Cre'Online refrains from collecting, using or storing data revealing racial or ethnic origin, political, philosophical or religious opinions, trade union membership, sex life or sexual orientation, or health data of panel members.

Protection of minors

Our services are not intended for, and may not be used by, persons under the age of 16. Cre'Online does not knowingly collect personal data from minors under 16 and does not allow them to open an account. If we learn that a minor's personal information has been collected, we may delete it without notice. If you believe this has happened, please contact us.

Use of cookies

When you browse our site, information may be stored in "cookie" files placed on your device (computer, tablet, phone). A cookie is a small file that allows its issuer to recognise your device on later visits. We use the following categories:

You can manage or withdraw your consent to non-essential cookies at any time through your browser settings or the management tools offered on the site.

Push notifications

If you install our app (PWA) or allow it in your browser, we may send you push notifications, for example to let you know that a new survey is available, that your points have been credited, or how you are progressing towards the withdrawal threshold. These notifications are optional: they are only enabled after your explicit consent, given through the prompt shown by your browser or device.

To provide this service, we use a push notification provider established in the United States, which stores the technical subscription identifier generated by your browser (the address of the notification service) as well as your browser and device type. This identifier does not allow you to be directly identified. If you have enabled notifications, we also send this provider an internal pseudonymous identifier tied to your account, so that we can send you relevant notifications (for example a reminder about pending surveys); this identifier does not reveal your name or email address to this provider. This processing relies on your consent (Article 6(1)(a) of the GDPR).

You can withdraw your consent at any time, with no impact on your use of the service, by disabling notifications in your browser or device settings, or by uninstalling the app. Withdrawing consent ends future sends.

Measuring the engagement of our emails

When we send you informational emails (survey invitations, news, motivation messages), we measure their engagement: we may know whether an email has been opened and whether the links it contains have been clicked. This measurement relies on a tracking pixel and on identifiers added to the email's links. We use it solely to assess the relevance and frequency of our communications and to improve their quality.

Emails strictly related to the service (address verification, password reset, order and reward confirmations) are not subject to this measurement.

This processing relies on our legitimate interest in assessing and improving our communications. You have a right to object under Article 21 of the GDPR (see "Managing and accessing your data"), and you can unsubscribe from these emails at any time via the unsubscribe link included in each of them.

This engagement data is retained together with the email send logs and purged or anonymised within the same periods (see "Data retention").

"Lucky Wheel" game and publication of winners

We offer a free game, with no purchase necessary, called the "Lucky Wheel", which lets you win points or tickets for a monthly lottery. In this context, we process the account data needed for the game as well as the history of your spins, tickets and draws (the date and outcome of each spin). This processing is based on the performance of the contract and on our legitimate interest in the proper running of the game, fraud prevention and the production of statistics.

If you win the grand prize of the monthly draw, your first name, the initial of your surname and your country may be published on the page dedicated to the Lucky Wheel, within your member area, for information and transparency purposes. This publication is limited to that information alone, to the exclusion of any contact details. It is based on our legitimate interest in ensuring the transparency of the game; you are informed of it and may object to it, or request its removal, at any time by writing to [email protected]. The full game rules are available from the dedicated page.

Protecting your data

We guarantee respect for your privacy and the security of the data collected, stored in a secure database.

Your password is stored in encrypted (hashed) form: we never have access to it in plain text. If you forget it, you must use the "Forgot password" function to set a new one. The delivery data for product tests (name, address, phone) is encrypted at rest.

We recommend that you choose a strong password, never share it with anyone, sign out after use (especially on a shared device) and keep your devices secure (firewall, antivirus).

We take appropriate technical and organisational measures to protect your data against loss, alteration, disclosure or unauthorised access. However, no method of transmission or storage is entirely infallible. In the event of a data breach likely to result in a risk to your rights and freedoms, we undertake to notify the competent supervisory authority within 72 hours and, where applicable, to inform you.

Automated decision-making

Some of our processing relies on automated evaluation, without systematic human intervention. This is the case in particular for the prevention of fraud and multiple accounts (analysis of technical signals during registration and use of the service) and for determining the surveys for which you are eligible.

Such processing may lead, for example, to refusing a registration deemed fraudulent or to not offering you certain surveys. You may write to us at [email protected] to obtain information about the main factors that led to such a decision concerning you, to submit your observations and to request a review by a person.

Managing and accessing your data

In accordance with the GDPR, you have the following rights over your personal data, subject to the exceptions and limitations provided by law:

Modifying your data

You can view and edit most of your data directly from your personal account.

Deleting and anonymising your account

You can delete your account at any time from your member area (profile page, "Delete my account" option). Deletion triggers irreversible anonymisation: we erase all data that identifies you (name, email, password, date of birth, gender, IP address, device identifier, delivery address, profiling answers, support content, etc.). To comply with our legal obligations and the integrity of our records, certain non-identifying data (in particular the financial history of points in pseudonymised form) is retained without being attributable to you.

If you have never taken part in our surveys, or if you do not meet the conditions of our registration process, we may delete your account.

Exercising your other rights

To exercise your other rights, write to us at [email protected]. We strive to respond within one month of receiving your request. This period may be extended by two further months given the complexity and number of requests; we would inform you accordingly.

Survey responses

When you take part in a survey, you are redirected to the survey of our partner or its client. Cre'Online is not the controller for the responses you provide within those surveys. We are therefore unable to directly handle your requests relating to those responses (access, rectification, deletion), but we will assist you by relaying your request to the relevant partner. When you contact us about this, please provide the link or invitation you used, the survey reference, and your name and email address.

Data retention

We retain your data for as long as your account is active. You can delete your account at any time, which triggers its irreversible anonymisation (see "Deleting and anonymising your account").

Independently, we apply a data minimisation policy: certain data is automatically deleted or anonymised at the end of rolling retention periods. For example, IP addresses, device identifiers, email send logs and technical fraud-analysis data are purged or anonymised after a few months. Certain data is retained longer where required by law (accounting and tax obligations) or for the establishment and defence of our rights, then deleted or anonymised.

Lodging a complaint with a supervisory authority

Without prejudice to any other remedy, you have the right to lodge a complaint with the competent supervisory authority in your country of residence if you consider that the processing of your data does not comply with applicable law.

Changes to this Policy

We reserve the right to modify or update this Policy at any time. Any change will be published on this page, which we encourage you to consult regularly. In the event of a significant change in the way we collect or use your data, we will inform account holders by electronic means.

Last updated: August 13, 2026