Privacy Policy

Last updated: 2026-09-02

1. Data We Collect

When you create and use an account, we collect:

• Account information - username, email address, and (for email/password accounts) a securely hashed password.
• Profile information you choose to provide - country, trading experience level, preferred instruments, and avatar image.
• Gameplay data - match history, trades placed, sabotage cards used, War Rating, coin balance and transaction history, Battle Pass progress, and chat messages sent from the fixed in-match preset list.
• Technical data - IP address and user agent at login and at session creation, used for session security and moderation (for example, detecting multiple accounts sharing a match).
• Payment metadata - if you purchase coins or a Battle Pass subscription, Stripe processes your card details directly; we receive only the payment status, amount, and a reference ID, never your full card number.

2. How We Use Your Data

We use the data above to: operate your account and match history; calculate War Rating, tiers, and leaderboards; process coin purchases and Battle Pass subscriptions; detect abuse such as multi-accounting or collusion; and communicate service-related information (for example, password reset emails).

We do not sell your personal data to third parties.

3. Third-Party Services

We rely on the following third-party service providers, each of which processes a limited slice of your data as necessary to provide their part of the service:

• Supabase - hosts our database and, for accounts using Google or Apple sign-in, our authentication provider.
• Stripe - processes coin purchases and Battle Pass subscription payments. Stripe operates in test mode in the current build.
• Google - if you choose "Continue with Google," Google authenticates your identity and shares your name and email with us per their sign-in flow.
• Apple - if you choose "Continue with Apple," Apple authenticates your identity per their Sign in with Apple flow.

Each of these providers has its own privacy policy governing how they handle data on their platforms.

4. Data Retention

We retain account and gameplay data for as long as your account is active. If you request account deletion, we remove or anonymize your personal information within a reasonable period, except where we are required to retain certain records (such as transaction records) for legal or accounting purposes.

5. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. You can update most profile information directly from Settings, and can request a full data export or account deletion by contacting us.

6. Contact

Questions about this Privacy Policy, or requests relating to your data, can be sent to privacy@spikecrush.example.