Campaign privacy notice

Last updated 14 September 2026. This covers Monica: The Money Story specifically. The campaign rules cover everything else.

What we collect, and why

Everything the registration form asks for, plus the three things recorded automatically that you would not otherwise know about.

How pages are used, and a visit counterRecorded automatically
A privacy-friendly measurement script counts page views so we know which parts of the campaign people actually reach. It runs on public pages only: never on your own page, the entry links, the registration result or the console, because those carry your details or your sign-in link. It stores a random identifier in your browser to tell a returning visit from a new one, and no advertising network receives it.
Cookies this site setsRecorded automatically
A sign-in cookie that keeps you on your own page after you open your personal link, a short-lived cookie while you confirm that link, and a referral cookie if you arrived through somebody's code. They are read by this site only, and nothing here is sold or shared for advertising.
Your name
To identify your entries, announce winners, and pay a prize to the right person.
Your email address
To tell you about challenges, the outcome of a review, and anything that affects your entry.
Your phone number
To reach you about a prize payment, which is the point where email alone is not enough.
Your social handles on X, Instagram and TikTok
To confirm a submitted post is yours, since an entry is judged only if it came from an account you registered.
Your Monica tag
Your username on Monica. It is how prize money reaches you if you win, so it is the one detail we use to identify a winner for payment.
Your audience size and where you are, if you give them
Optional. Used only in aggregate, to understand the shape of the campaign.
Your IP addressRecorded automatically
Recorded automatically when you register, to stop automated signups and abuse of the form.
Your browser's user agentRecorded automatically
Recorded automatically for the same reason, and to diagnose a failed registration.
Which version of the rules you accepted, and whenRecorded automatically
Recorded so it is always answerable which wording you agreed to, since the rules can be amended during the campaign.

Who holds this

Blockfest Africa, operated by Tevah Synergy, is the data controller for this campaign. That means Tevah Synergy decides what is collected and what happens to it, and is the entity answerable for it.

Anything about your personal data goes to partnership@blockfestafrica.com, including the requests set out below.

Why we are allowed to hold it

For running the campaign, the basis is the agreement between us. You enter, and we cannot judge an entry, rank a leaderboard or pay a prize without knowing who you are and how to reach you. If you do not want to provide these details, the consequence is simply that you cannot enter.

For hearing about future campaigns, the basis is your consent, given separately at registration. It is optional, it is not ticked by default, and refusing it has no effect at all on your entry, your score or your chance of a prize.

For the IP address and user agent, the basis is our legitimate interest in keeping the form from being abused by automated signups. They are not used to profile you and are not used for marketing.

What becomes public

Your social handles and your entries are already public, because the campaign runs on your own accounts. Submitting a link does not make anything public that was not already.

If you appear on a leaderboard or win, we will show the name and handle you registered with. We will not publish your email address, phone number or location.

If you vote for Community Favourite

Anyone can vote for Community Favourite, not only registered creators, so this section is for voters. Casting a vote collects your email address, which we use to send you a verification code and to enforce one vote per email address per round. A vote counts only once its address is verified.

Alongside the vote we record a hashed form of your IP address and your browser's user agent. These are signals a person reviews when a round's votes look manipulated. They are never used as automatic gates, and no vote is rejected by a machine on the strength of them.

The verification code itself is stored only as a hash, so we cannot read it back, and it is cleared as soon as it is used.

Vote records are kept for the campaign's dispute window, so a contested result can be checked against the votes that produced it. A vote removed in review keeps its record, with the reason for the removal, for the same purpose.

How long it is kept

Campaign records, meaning your registration, entries, scores and any prize paid, are kept for 24 months after the campaign ends on 17 October 2026. That covers a dispute raised late, and the tax and accounting record of a payment. After that they are deleted or anonymised.

If you opted in to hearing about future campaigns, your name and email address are kept for that purpose until you tell us to stop. Every message we send for that reason includes a way to stop it, and you can ask at any time in one line to the address above. We act on it and do not ask why.

IP addresses and user agents collected for abuse prevention are kept for 12 months and then deleted.

What you can ask for

Under the Nigeria Data Protection Act you can ask us for a copy of what we hold about you, ask us to correct anything wrong, ask us to delete it, object to a particular use, or withdraw a consent you gave.

Withdrawing marketing consent is immediate and costs you nothing. Asking for deletion during the campaign will usually mean withdrawing from it, because we cannot judge entries from somebody whose registration no longer exists, and we will say so before acting rather than deleting anything by surprise.

Write to partnership@blockfestafrica.com and we will respond within 30 days. If you are not satisfied with how we handled it, you can complain to the Nigeria Data Protection Commission.

How it is protected

Data is held in an access-controlled database, reached only over encrypted connections, and only people working on the campaign can see it.

We ask for as little as we can. That is why the form has only two optional fields, and why we do not ask for a date of birth, an address or a bank detail at registration. Payment details are collected only from winners, at the point a prize is actually being paid.

Requests and questions go to partnership@blockfestafrica.com.