Fun Run 4

Fun Run 4 Creator Program — Privacy Policy

Last updated: 2026-08-07 Applies to: the Fun Run 4 Creator Program portal at creators.funrun4.com (the "Creator Program" / "Program").

1. Who we are

The Creator Program is operated by Dirtybit AS ("we", "us", "Dirtybit"), org. no. 912 002 942, registered at Starvhusgaten 4, 5014 Bergen, Norway. We are the data controller for personal data processed through the Creator Program.

Privacy questions and requests: privacy@dirtybit.com.

2. What this policy covers (and what it doesn't)

This policy covers personal data we process when you apply to, and participate in, the Creator Program through creators.funrun4.com — including connecting your social media accounts and linking your Fun Run 4 game account.

It does not cover your use of the Fun Run 4 game itself. Data processed by the game is governed by the separate Fun Run 4 Privacy Policy (https://www.dirtybit.com/privacy). The Creator Program is a distinct, optional service; the only data that crosses between the two is described in §6.

3. The data we process, and why

3.1 Identity & account

Your name and email address, from your Google sign-in — to identify your application and account, show who you are in the portal and to our review staff, and contact you about the Program.

At sign-up we also collect a short applicant profile: your country and primary language, which social platforms you create on, and (optionally) your Discord username — to assess eligibility, operate the Program, and contact you.

3.2 Fun Run 4 game account

Your Fun Run 4 account link, which you establish with a one-time code generated in the game so that rewards can be granted to the right account. We verify the code with the game backend to confirm you own the account; we do not receive your game password or game profile contents.

3.3 Connected social accounts

When you connect a social account (currently TikTok and YouTube; more platforms may be added), we use that platform's official login and request read-only access to recognize your own posts about Fun Run 4. We only ever access the data of the account you authorize — never anyone else's. For each connected account we access:

  • your public profile basics (such as your handle and profile picture), so you can confirm the right account is connected and we can show your handle in the portal and to review staff;
  • your own public posts and their public details, to identify which ones use the Program hashtag and count qualifying posts toward your reward tier;
  • a connection token that keeps the account linked so we can check for new posts without signing you in each time.

We do not post, edit, or delete anything on your account, and we do not access private content, drafts, direct messages, or anyone else's data.

YouTube This application uses YouTube API Services; we access your channel through Google's official OAuth login using read-only access.

By connecting YouTube you also agree to the YouTube Terms of Service (https://www.youtube.com/t/terms); Google's handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).

Limited use. Our use of information received from YouTube API Services adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use this data only to operate the Creator Program features described in this policy; we do not transfer or sell it, do not use it for advertising, and do not let humans read it except as needed for security, to comply with law, or with your consent.

You can disconnect your channel at any time (see §10) or revoke our access directly in your Google account at https://myaccount.google.com/permissions.

3.4 Program activity & operations

  • Records of the posts we've seen and whether each uses the Program hashtag, and the resulting activity evaluations — to calculate whether you meet your tier's threshold and to let you and our staff see why your status changed.
  • An audit log of status changes and staff actions, and a record of the emails we've sent you — for security, accountability, and dispute resolution.

4. Legal bases (GDPR)

We process your personal data under the following bases:

  • Consent — for connecting each social media account and reading your content from it. You can withdraw consent at any time by disconnecting the account (§10); withdrawal does not affect prior processing.
  • Performance of a contract / taking steps at your request — to run the Program you applied to: evaluating your activity and enabling rewards.
  • Legitimate interests — to keep the Program secure, prevent fraud and reward-farming, maintain audit records, operate and improve the service, and stay in touch with creators about the Program. We balance these against your rights, and you can opt out of non-essential emails at any time (§10).

5. How we use the data

  • Recognize the posts you choose to tag with the Program hashtag and count qualifying posts.
  • Evaluate your activity against your tier's requirements and update your status (active, paused, removed, reinstated).
  • Enable in-game rewards (see §6 for exactly what is shared with the game).
  • Show you your status and qualifying posts in the portal; let staff review applications and manage the roster.
  • Email you about your application and your membership.
  • Keep the Program secure and prevent abuse; keep audit records.

We do not use your data for advertising and we do not sell personal data.

6. Who we share data with

  • The Fun Run 4 game backend. To grant rewards, the game periodically reads a list of active creators and their tier (your FR4 account ID + tier). We never send the game your social media tokens, your content, your email, or your engagement metrics. The game decides what a tier is worth and is the final authority on your game account's standing.
  • Service providers (sub-processors) acting on our behalf — the cloud infrastructure, sign-in, and email delivery providers that operate the Program. They process data only on our instructions.
  • Legal / safety — where required by law, or to protect our rights, users, or the public.

We do not sell your personal data or share it for third-party advertising.

7. International transfers

As part of operating the Program, we may transfer your personal data to countries outside your home country, including countries outside the EEA. We ensure appropriate safeguards are in place for such transfers, such as the EU Standard Contractual Clauses.

8. How we protect your data

We take appropriate technical and organizational measures to protect your personal data: access is restricted to authorized staff, staff actions are audit-logged, connection tokens are stored securely, and the Program holds no write access to your game account.

9. How long we keep data

  • Social media tokens: deleted when you disconnect the account or when the connection can no longer be refreshed.
  • Content/activity records: retained while you participate, then for 24 months after you leave the Program, for reward integrity and dispute handling.
  • Audit logs: retained for 24 months.
  • Application data (if rejected): retained for 3 months.
  • Applications you start but never complete: retained for 3 months from the date you applied, then deleted along with any connected-account data. We stop reading your social accounts as soon as the application is deleted.

After these periods we delete or anonymize the data, unless a longer period is required by law.

10. Your choices and rights

Disconnecting an account / leaving the Program

You can disconnect any social account from the portal at any time; we delete the stored tokens for that account and stop reading new content from it. You can also revoke our access directly on the platform:

  • TikTok: TikTok app/website → Settings → Security & permissions → Manage app permissions.
  • YouTube/Google: https://myaccount.google.com/permissions.

Deleting your data

You can permanently delete all your Program data yourself at any time — open My status in the portal and choose "Leave the program & delete my data." This takes effect immediately and cannot be undone: it removes your application, any connected social accounts and their stored tokens, and all tracked content and activity. This self-service erasure applies ahead of the standard retention periods in §9; audit-log entries are retained as described there.

Email preferences

We email you about your application and your membership; these are part of running the Program. Any non-essential email includes an unsubscribe link.

Your GDPR rights

You have the right to access, rectify, erase, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. To exercise these, contact privacy@dirtybit.com. You also have the right to lodge a complaint with your data protection authority — in Norway, Datatilsynet (https://www.datatilsynet.no).

11. Children

The Creator Program is for participants who are 18 or older. Do not apply or connect accounts if you are under 18.

12. Changes to this policy

We may update this policy as the Program evolves (for example, when we add a new social platform). We will update the "Last updated" date and, for material changes, notify participating creators.

13. Contact

Dirtybit AS, org. no. 912 002 942 — privacy@dirtybit.com — Starvhusgaten 4, 5014 Bergen, Norway.