PRIVACY POLICY

1. Information We Collect

We collect the following information when you use Dope Wars:

• Account data: Email address, username, and hashed password when you register
• Game data: Game scores, session data, action logs for score validation, and leaderboard entries
• Payment data: When purchasing Pro, Stripe processes your payment. We receive your email and transaction details but never your card number
• Technical data: Standard web server logs including IP address, browser type, and access times

2. How We Use Your Information

• To provide and operate the Game
• To display your username on leaderboards
• To process Pro membership payments
• To send transactional emails (account setup, purchase confirmation)
• To validate game scores and prevent cheating
• To improve the Game and fix bugs

3. Third-Party Services

We use the following third-party services to operate the Game:

• Supabase: Database and authentication. Your account data and game data are stored on Supabase servers. See their privacy policy
• Stripe: Payment processing for Pro membership. Stripe handles all payment card data. See their privacy policy
• Resend: Transactional email delivery. Your email address is shared with Resend to send account-related emails. See their privacy policy
• Vercel: Hosting and deployment. See their privacy policy

4. Cookies

We use essential cookies for authentication (Supabase session cookies). These are required for the Game to function and to keep you logged in. We do not use advertising or tracking cookies.

5. Data Retention

Your account data is retained for as long as your account exists. Game session data and leaderboard entries are retained indefinitely. If you delete your account, your personal data will be removed, but anonymized leaderboard entries may remain.

6. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data in a portable format

To exercise these rights, contact us at the email address provided on our website. We will respond within 30 days.

7. Data Security

We use industry-standard security measures to protect your data. Passwords are hashed and never stored in plain text. Payment processing is handled entirely by Stripe. All data is transmitted over HTTPS.

8. Children's Privacy

Dope Wars is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of significant changes via email. The "last updated" date at the top reflects the most recent revision.

10. Contact

For privacy-related questions, data requests, or concerns, please contact us at the email address provided on our website.