JustPlay

Is JustPlay safe to use?

JustPlay pays, so it is not a scam, but we score it 46/100, in the same low band as Freecash and Mistplay. You earn coins by playing about 30 casual games, all made by JustPlay's sister company Gimica, and cash them out to PayPal or gift cards. To get paid you let it scan your face, and the coins you earn feed an advertising operation that tracks you across other apps.

JustPlay GmbH is registered in Berlin (HRB 222659 B), and the iPhone version is published under Gimica GmbH's name. The two companies are joint controllers of your data under EU law. Google Play shows more than 10 million downloads.

A closed loop of games

Most reward apps send you to other publishers' games. JustPlay keeps you inside Gimica's own catalogue, titles such as Treasure Master, Tile Match Pro and Ball Bounce. The policy says JustPlay tracks your progress in those games and your advertising data through AppLovin, a mobile ad company, and uses identifiers like Google's advertising ID or Apple's IDFA to link it to you.

That means the games make money from the ads you watch while earning, and JustPlay alone decides how many coins each game pays. Its terms say those rates and any limits "may be changed at any time without prior notice", and that users have no legal entitlement to any specific earnings.

The face scan

Before your first cash-out, the app asks for your camera. FaceTec software builds a map of your face and takes a photo. Under JustPlay's Facial Mapping Notice, the map is compared with those of other users from the past four months to stop people running several accounts, and is stored for four months on Google Cloud servers that JustPlay rents. The terms say the face data is not shared with third parties.

That is more defined than some rivals, which hand the job to an outside verifier. But it is still biometric data, collected as a condition of being paid.

Advertising and identity tracking

Apple's privacy label lists coarse location, user ID, device ID and advertising data as "used to track you" for third-party advertising. Google Play lists precise location as shared for advertising and fraud prevention, and name, email and address as shared for app functions and fraud checks.

The US section of the policy goes further. JustPlay uses UID2 and LiveRamp's RampID, two ad-industry systems that turn an email address or phone number into an identifier advertisers can match across websites and apps. RampID, the policy says, matches JustPlay's data "with online and offline information". It also uses remerge, a Berlin retargeting firm, to show you JustPlay ads in other apps. In California terms, some of this counts as a sale or sharing of data, including geolocation. Opt-out links sit in the app's settings.

Coins, cash-outs and account rules

The terms dated 8 June 2026 contain the rules most users meet later:

• Coins expire six months after they are credited if not redeemed.
• There is usually no minimum cash-out, but JustPlay can set one, and may require three hours of play before any redemption.
• Welcome Coins convert only after enough engagement and a minimum threshold.
• Rewards are tied to your phone's advertising ID; resetting it or using a second account can cost you the balance.
• JustPlay can suspend an account on "reasonable suspicion" of misuse; if confirmed, coins can be forfeited.

Payouts are usually processed immediately, the terms say, and can take up to five business days. PayPal, Tango Card and Tremendous handle the money, and they receive your name and, for some options, your address. The terms are inconsistent on law: one clause says US law governs use of the apps, another names German law and jurisdiction.

How to use JustPlay with less risk

1. Cash out each time you can. Six months is a short shelf life for coins.
2. Turn on the opt-outs for data sales and targeted ads in the app's settings.
3. Do not reset your advertising ID while you hold a balance.
4. Deny precise location in your phone's settings; the app works on your market, not your street.
5. Skip in-game purchases. Spending money to earn coins rarely pays.
6. If you no longer use the app, delete the account inside it, since uninstalling alone keeps your data.

How we scored it

Privacy (30) is the weakest factor because of the face scan, location sharing for ads and identity matching through UID2 and RampID. Transparency and control (42) reflects six-month coin expiry and earning rates JustPlay can change without notice, offset by in-app opt-outs and deletion. Scams and harmful content (52) is middling: no misleading-ad scandal, but a closed loop of ad-heavy games. Regulatory record (85) is the highest because no regulator has acted. For a survey-based app, compare Eureka.