Privacy policy

Understand how your personal data is handled, stored, and protected in accordance with privacy laws.

What We Consider Personal Data

Any information relating to an identified or identifiable natural person, as defined by the GDPR.

We process data based on your Consent, Contractual Necessity to provide our services, and Legitimate Interest.

User-provided (email, profile info), Financial (via Stripe Sync), and Technical (logs, cookies).

Via a restricted API key, we read transaction amount, currency, and date. We NEVER access customer names or cards.

During login, profile updates, leaderboard ranking, Stripe sync, upvotes, and when you contact support.

To calculate rankings, operate and secure our service, provide analytics, and respond to your inquiries.

Database/Auth on Supabase (SOC 2 Certified). Hosted on Cloudflare for security (DDoS protection, HTTPS).

We enforce read-only Stripe keys, use secure background jobs for data sync, and follow security best practices.

Anonymized requests (date, currency codes) sent to Frankfurter.app for currency conversion. No PII is sent.

You have the right to access, rectify, erase, object to, and limit the processing of your data, and data portability.

Data is retained for the duration of service provision. Inactive accounts may be deleted after a notice period.

Content already disseminated in public channels (e.g., newsletters, social media) cannot be retracted.