Privacy Policy

1. Information We Collect

Account Information

When you create an account, we collect your email address and, optionally, your name. If you sign up through a third-party provider (e.g., Google), we receive your name and email from that provider.

Usage Data

We use Google Analytics 4 and Microsoft Clarity to understand how visitors use the site. These services use cookies and collect usage data such as pages viewed, referral sources, device and browser type, approximate location, and (for Clarity) anonymized session interactions like clicks and scroll depth. We use this data in aggregate to improve the Service. We do not use it to personally identify you or for advertising. We also use Ahrefs Web Analytics, which is cookie-free.

Location Data

If you use the retailer search or "Near Me" feature, your browser may request location permission. Location data is used only to find nearby retailers and is not stored on our servers beyond what you explicitly log in your ticket ledger.

Payment Information

Payments are processed by Stripe. We do not store your credit card number, CVC, or billing address. Stripe's privacy policy governs the handling of your payment data.

Ticket Ledger Data

If you use the My Ledger feature, you may voluntarily log ticket purchases, results, and retailer locations. This data is stored in your account and is not shared with third parties.

2. How We Use Your Information

• To provide and maintain the Service, including personalized rankings based on your selected state
• To process subscriptions and payments
• To send transactional emails (account verification, password reset, subscription confirmations)
• To improve the Service through aggregated, anonymized usage analytics
• To respond to support requests

We do not sell your personal information. We do not use your data for advertising. We do not share your data with third parties for their marketing purposes.

3. Third-Party Services

We use the following third-party services:

• Supabase — Authentication and database hosting (your account data)
• Stripe — Payment processing (subscription billing)
• Google Analytics 4 — Website usage analytics (uses cookies)
• Microsoft Clarity — Anonymized session analytics and heatmaps (uses cookies)
• Ahrefs Web Analytics — Aggregate traffic analytics (cookie-free)
• Google Maps Platform — Retailer search and location services (used only when you search for stores)
• Vercel — Application hosting

Each service has its own privacy policy governing how it handles data.

4. Cookies

We use essential cookies required for authentication (session tokens), plus analytics cookies set by Google Analytics 4 and Microsoft Clarity to measure and improve how the site is used. We do not use advertising cookies or third-party marketing cookies.

5. Data Storage and Security

Your data is stored on Supabase's cloud infrastructure with row-level security policies. All data is encrypted in transit (TLS) and at rest. We implement access controls to ensure your data is only accessible to you and authorized service functions.

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, your personal data (profile, favorites, ticket log) will be deleted within 30 days. Aggregated, anonymized analytics data may be retained indefinitely.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Opt out of marketing communications (we don't send marketing emails, but you can unsubscribe from any future communications)

To exercise these rights, contact us at the email below.

8. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a minor, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, contact us at privacy@seriousscratchers.com.