Privacy Policy

Last updated: [date]. This page is placeholder copy — every section below needs a pass from legal counsel and our data protection advisor before launch.

1. What we collect

We ask for your email address and nothing more when you sign up with email. If you sign up with Facebook, Google, or Apple, we receive the basic profile information those services share by default. TODO(legal): full, itemised data inventory (account data, gameplay data, device/analytics data, payment data via Stripe).

2. Why we collect it

TODO(legal): lawful basis for each category above (contract necessity, legitimate interest, consent), written for GDPR since Sister Spins is operated from the Netherlands.

3. Who we share it with

We never sell your details. TODO(legal): named list of processors — payments (Stripe), hosting/database (Aiven), email (Brevo), analytics (PostHog, GA4, Meta), and what each one receives.

4. Cookies and tracking

TODO(legal): cookie categories, the analytics/ad vendors in use, and how to opt out. Ties into our cookie banner implementation.

5. How long we keep it

TODO(legal): retention schedule per data category, and what happens to data after account deletion.

6. Your rights

You can ask us what we hold about you, correct it, or ask us to delete it. TODO(legal): full rights list (access, rectification, erasure, portability, objection) and how to exercise them.

7. Children's privacy

Sister Spins is for players 18 and over. We do not knowingly collect information from anyone under 18. TODO(legal): confirm process if we learn we've collected data from a minor.

8. Changes to this policy

TODO(legal): how and when we'll notify players of material changes.

9. Contact

Questions about your data? Contact us.