Privacy Policy
Stackr · Last updated: May 21, 2026
This Privacy Policy explains how Stackr (“we”, “us”, “our”) collects, uses, stores, and protects your personal information when you use the Platform. By using Stackr, you consent to the practices described here.
1. Information We Collect
We collect the following categories of information:
- Account data: email address, username, password (hashed), and profile picture.
- Usage data: game history, table actions, SC transactions, chat messages, wagered amounts, and session data.
- Device & log data: IP address, browser type, operating system, and access logs.
- Deposit data: transaction amounts, crypto currency type, and deposit status (no full card or wallet details stored).
2. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Platform
- Verify your identity and prevent fraud, cheating, and abuse
- Process SC transactions and maintain audit logs
- Send you notifications, security alerts, and service communications
- Enforce our Terms of Service and Responsible Gaming policies
- Comply with legal obligations
3. Data Storage & Security
All data is stored in Supabase (PostgreSQL) with row-level security enforced at the database level. Access to sensitive data is restricted to server-side processes using service-role credentials that are never exposed to the client.
We implement industry-standard security practices including TLS encryption in transit, hashed passwords, and regular security reviews. However, no system is 100% secure — you use the Platform at your own risk.
4. Data Sharing
We do not sell your personal information. We may share data with:
- Service providers: Supabase (database), Vercel (hosting), and other infrastructure partners bound by data processing agreements.
- Law enforcement: where required by applicable law, court order, or to protect rights and safety.
- Successor entities: in the event of a merger, acquisition, or sale of assets.
5. Cookies & Tracking
Stackr uses session cookies set by Supabase Auth to manage authenticated sessions. We do not use third-party advertising cookies or behavioural tracking cookies. Essential session cookies cannot be disabled while using the Platform.
6. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, delete, or export the personal data we hold about you. To exercise these rights, please contact us through the support system available in your account settings.
We will respond to verified requests within 30 days where required by law.
7. Data Retention
We retain account data for as long as your account is active plus a reasonable period afterward. Transaction and audit logs may be retained longer to comply with legal obligations. You may request account deletion, subject to legal retention requirements.
8. Children's Privacy
The Platform is not directed at children under 18. We do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will immediately suspend and delete the account.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of material changes via the Platform. Continued use after changes constitutes acceptance.