Privacy Policy

Slab City Games ("we", "us", "our") operates slabcity.cards (the "Service"). This Privacy Policy explains what data we collect, how we use it, and your rights.

1. Information We Collect

Account Information

When you create an account via Google OAuth or email, we collect your email address, display name, and profile avatar. Authentication is handled by Supabase.

Game Data

We store your game progress, scores, leaderboard entries, challenge results, collection data, and career statistics. This data is tied to your account.

Payment Information

Payments are processed by Stripe. We do not store your credit card number or payment details. Stripe may collect payment information according to their own privacy policy. We retain a record of the transaction (Stripe session ID, purchase type, amount) for accounting and refund purposes.

Usage Data

We use Google Analytics to collect anonymized usage data including pages visited, session duration, and device type. This helps us improve the Service.

2. How We Use Your Information

• To provide and maintain the Service
• To save and restore your game progress
• To display leaderboards and friend features
• To process purchases and manage premium features
• To communicate with you about your account
• To improve the Service based on aggregated usage patterns

3. Data Storage & Security

Your data is stored in Supabase (hosted on AWS). We use Row Level Security (RLS) policies to ensure users can only access their own data. All data is transmitted over HTTPS.

4. Cookies & Local Storage

We use localStorage to save your theme preference and session state. We use essential cookies for authentication. Google Analytics uses cookies for anonymized analytics. We do not use advertising cookies or tracking pixels.

5. Data Sharing

We do not sell, rent, or share your personal information with third parties for marketing purposes. We share data only with:

• Supabase — database and authentication provider
• Stripe — payment processing
• Google — OAuth authentication and analytics
• Vercel — hosting and deployment

6. Data Retention

We retain your account and game data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial record-keeping purposes.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Export your game data
• Opt out of non-essential analytics

To exercise these rights, contact us at hello@slabcity.cards.

8. Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such data, contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a new "last updated" date.

10. Contact

Questions about this Privacy Policy? Contact us at hello@slabcity.cards.