Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and, optionally, your name. If you sign up through a third-party provider (e.g., Google), we receive your name and email from that provider.

Usage Data

We use Plausible Analytics, a privacy-friendly analytics service that does not use cookies and does not collect personal data. Plausible tracks page views, referral sources, and device type in aggregate — no individual user tracking.

Location Data

If you use the retailer search or "Near Me" feature, your browser may request location permission. Location data is used only to find nearby retailers and is not stored on our servers beyond what you explicitly log in your ticket ledger.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVC, or billing address. Stripe's privacy policy governs the handling of your payment data.

Ticket Ledger Data

If you use the My Ledger feature, you may voluntarily log ticket purchases, results, and retailer locations. This data is stored in your account and is not shared with third parties.

2. How We Use Your Information

• To provide and maintain the Service, including personalized rankings based on your selected state
• To process subscriptions and payments
• To send transactional emails (account verification, password reset, subscription confirmations)
• To improve the Service through aggregated, anonymized usage analytics
• To respond to support requests

We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties for their marketing purposes.

3. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database hosting (your account data)
• Stripe — Payment processing (subscription billing)
• Plausible Analytics — Privacy-friendly website analytics (no cookies, no personal data)
• Google Maps Platform — Retailer search and location services (used only when you search for stores)
• Vercel — Application hosting

Each service has its own privacy policy governing how it handles data.

4. Cookies

We use only essential cookies required for authentication (session tokens). We do not use tracking cookies, advertising cookies, or third-party marketing cookies. Plausible Analytics is cookie-free.

5. Data Storage and Security

Your data is stored on Supabase's cloud infrastructure with row-level security policies. All data is encrypted in transit (TLS) and at rest. We implement access controls to ensure your data is only accessible to you and authorized service functions.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data (profile, favorites, ticket log) will be deleted within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications (we don't send marketing emails, but you can unsubscribe from any future communications)

To exercise these rights, contact us at the email below.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at privacy@seriousscratchers.com.