Mistplay

Is Mistplay safe to use?

Mistplay is a working loyalty programme, not a scam: it pays out gift cards and has done so for years. As an app, though, it scores 45/100, a little above Freecash and well below mainstream apps. The trade is data. Mistplay records which games you play and for how long, collects the in-game purchases and ad views that game makers report back, and passes ad identifiers and purchase events to ad networks. Before your first reward you also hand over a government ID and a selfie.

Mistplay Inc. is based in Montreal and says it was founded in 2015. Its Android app has more than 50 million downloads on Google Play; an iPhone version followed in January 2025. In 2026 it bought two rewarded-advertising businesses, Connected Rewards and MyChips, and in May launched the Mistplay Audience Network, which sells rewarded ads across partner apps.

How Mistplay makes its money

Game publishers pay Mistplay for players who install their games and keep playing. You earn "units" for time in those games and for reaching milestones, and you swap the units for gift cards from Amazon, PayPal, DoorDash and others. In some "Loyalty Games" you also earn "Gems" when you make in-game purchases.

That last point matters. The more you spend inside a game, the more Mistplay can bill the publisher, and the app rewards you for doing it. The gift card you earn will rarely match what a few purchases cost.

What Mistplay collects

The privacy notice, last updated on 1 October 2026, is unusually frank. It lists:

• the apps installed on your phone;
• your playtime in each game, which on Android needs a usage-access setting;
• "Gameplay Data" from game makers, including installs, in-game purchases, ad views and achievements;
• approximate location, plus precise location for fraud checks;
• device and advertising identifiers, and a fraud score built from your account, social logins, device and play data.

Mistplay shares ad identifiers, IP addresses and event data, such as an install, a purchase or a playtime milestone, with ad platforms including Google and Unity. It says this may count as a "sale" or "sharing" under California law; you can opt out only by contacting customer service. It also uses the data to train its machine-learning models. If you refuse personalised game ads inside the app, the policy says you cannot take part in the rewards programme at all.

Google Play's data safety section matches this, listing installed apps, in-app search history and location. Apple's label shows your phone number and device ID used to track you, and "Sensitive Info" linked to you.

The ID check and a contradiction

Mistplay's help centre says every player must now pass an ID check before ordering a gift card. You photograph a valid government ID and take a selfie on a page run by Verisoul, which acts as an independent controller for that data under its own policy and biometric terms.

The privacy notice says twice that Mistplay "does not collect, have access to, or process biometric data". Yet the same notice says Mistplay may process biometric data "using facial scan technology", and its California section says data derived from facial scans is stored by Mistplay for six months. The two statements cannot both be accurate, and Mistplay does not explain the gap. We score this under transparency.

Rewards, expiry and disputes

The terms, also dated 1 October 2026, are stricter than they first look:

• Units have no cash value and can expire if you earn none for 180 days (US), with 30 days' notice.
• Accounts idle for 18 months can be closed, and closing your own account wipes your balance.
• VPNs, emulators and autoclickers are banned, and failing ID verification means no rewards.
• US disputes go to individual arbitration in New York, with a class-action waiver.

Gift-card orders show as pending for up to 48 hours. Codes are sent by email through a reward distributor, and Mistplay says it cannot replace or refund them.

How to use Mistplay with less risk

1. Decide in advance that you will not buy anything in a game to earn units or Gems.
2. Redeem small gift cards as soon as you can, rather than letting units sit for months.
3. Ask customer service to opt you out of data "sales" if you are in a US state with a privacy law.
4. Use a separate email address for Mistplay and for the gift cards it sends.
5. Uninstall promoted games you stop playing; each one carries its own tracking.
6. Keep children off it. The terms require users to be 18, whatever the Play Store rating says.

How we scored it

Privacy (30) is the weakest factor: playtime, installed apps, purchase data and ad sharing are the business model. Transparency and control (40) reflects the 180-day expiry, the "no rewards without personalisation" rule and the contradictory biometric statements. Scams and harmful content (48) comes from rewards tied to in-game spending and the Teen rating on an 18+ service. Regulatory record (86) is the strongest because no regulator has acted. For a survey-based alternative, see Eureka; for a rival game-rewards app, see JustPlay.