Privacy Policy (DRAFT — not for publication)

This is a working draft, not a finished legal instrument — review against CCPA/CPRA, VCDPA, and other applicable state privacy statutes before publication. Source: /legal/04-privacy-policy-DRAFT.md in the project repository.

Data We Collect

Account data (email, username), payment data (processed by Stripe — we don't store card numbers), gameplay data (answers, response timing, scores, wallet ledger), and, before withdrawal, identity verification data.

How We Use It

To operate the game, verify eligibility (age, jurisdiction), comply with anti-money-laundering and tax-reporting obligations, and communicate with you about your account.

Data Sharing

Stripe (payments, identity verification) and Supabase (database, authentication, hosting) as sub-processors. We do not sell personal data.

Your Rights

Depending on your jurisdiction, you may have rights to access, delete, correct, or port your data, and to opt out of data sharing. Contact us to exercise these rights.

Children's Privacy

This service is not directed to, and not available to, anyone under our minimum age requirement. We do not knowingly collect data from minors.