Privacy Policy

1. What we collect

• Account data: email address, manager name (username), and country.
• Gameplay data: your team, squad and matchday line-ups, points, token balance, card collection, and store purchases.
• Identity & age data: your date of birth (collected at signup to confirm you meet the legal age) and, if you request a withdrawal, a government-ID document you upload for verification. ID documents are stored in private, access-controlled storage, used only to confirm age/eligibility, and are not shared.
• Wallet & payment data: if you link a crypto wallet or buy tokens, we store your public wallet address and on-chain transaction hashes. Blockchain transactions are public and permanent by nature; anything recorded on-chain (e.g. token claims and purchases) is visible to anyone and is outside our control. We do not take card/bank payments yet; when we do, those are handled by a third-party payment processor and we never store your full card details.
• Technical data: basic logs and analytics (e.g. pages viewed, device/browser), collected via cookies and tools such as Google Analytics / Tag Manager, Meta, and TikTok where enabled. Purchases and signups may also be sent server-to-server to these providers (with hashed identifiers) to measure advertising accurately.

2. How we use it

To operate your account, run the game and leaderboards, maintain security and integrity, understand and improve the product, and communicate service updates. We process this data to provide the service you requested and for our legitimate interest in running and improving it.

3. Sharing & processors

We do not sell your personal data. We share it with service providers who process it on our behalf, including Supabase (authentication and database), Vercel (hosting), and analytics/advertising providers where enabled. Your manager name, country, and standings are publicly visible on leaderboards — your email is never shown publicly.

4. Cookies

We use cookies necessary for login sessions and, where enabled, analytics/advertising cookies. Non-essential (analytics/advertising) cookies are off by default — a banner lets you accept or decline them, and we honour that choice via Google Consent Mode. You can also control cookies through your browser settings; disabling some may affect functionality.

5. Your rights

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, or to delete your account, contact us using the details below.

6. Retention

We keep your data for as long as your account is active and as needed to provide the service, then delete or anonymize it within a reasonable period, unless a longer period is required by law. Government-ID documents uploaded for verification are kept only as long as needed to verify you (and to meet any legal record-keeping requirement), then purged.

7. Children

SPM88 is not intended for anyone under 18, and we do not knowingly collect data from children.

8. Contact

For privacy questions or requests, contact the Operator, Loopmeback, via your account communications channel.