Privacy Policy
This Privacy Policy explains what information CapTableClash (the “Service”) collects, how it is used, and the choices you have. It should be read together with our Terms of Service.
1. Information we collect
The Service is designed to work without an account: as a guest, your profile, campaign progress, and preferences live only in your browser's local storage and are never sent to us. If you create an account, we collect the following through our backend provider, Supabase:
| What | When | Why |
|---|---|---|
| Email address | Only if you create an account (magic link or Google sign-in) | Authenticate you and let your rating follow you across devices |
| Display handle | Only if you create an account, or a local guest handle otherwise | Shown on the public leaderboard, match history, and in duels |
| ELO rating, wins/losses, match history | Whenever you play a rated or campaign match | Compute standings, show your history, run the leaderboard |
| Achievement and streak progress | As you play | Show your unlocked achievements |
| Local storage (browser) | Always, even as a guest | Store a guest profile, campaign progress, sound preference, and in-progress matches locally so they survive a page refresh |
| Basic connection data (IP address, user agent) | Automatically, via our hosting and match-server infrastructure | Operate the service, prevent abuse, and debug issues |
We do not collect payment information of any kind. The Service is free and does not have a purchase flow.
2. How we use information
We use the information above to:
- Operate core features: authentication, ratings, matchmaking, the leaderboard, match history, and achievements.
- Keep your progress and preferences available across sessions and, if you have an account, across devices.
- Maintain the security and integrity of the Service, including detecting abuse of the ranked ladder (see the Terms' acceptable use section).
- Diagnose and fix bugs.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Local storage and cookies
The Service uses your browser's local storage to remember your guest profile (if any), campaign and ladder progress, sound preference, and any in-progress match, so you can close the tab and pick up where you left off. If you sign in, our authentication provider (Supabase) stores a session token in your browser so you stay signed in. You can clear this at any time through your browser's settings, though doing so will reset local (guest) progress and sign you out.
4. Third-party service providers
We rely on the following third parties to operate the Service. Each processes data under its own privacy policy and terms:
- Supabase, which hosts our database and handles account authentication, including magic-link email delivery and storage of your profile, ratings, and match history.
- Google, an optional sign-in method (OAuth). If you choose to sign in with Google, Google shares basic profile information (such as your email address) with us to create your account.
- Our hosting and infrastructure providers, which process standard connection logs to serve the Service and the real-time match server.
5. Data retention and deletion
We retain account data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us at the address below; we will delete or anonymize it within a reasonable time, except where we need to retain limited information to comply with law, resolve disputes, or enforce our agreements. Local (guest) data can be deleted at any time by clearing your browser's site data.
6. Public information
If you create an account, your handle, rating, and win/loss record are shown publicly on the leaderboard and match history pages. Choose a handle accordingly; do not use information you don't want to be public.
7. Children's privacy
The Service is not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us and we will take steps to delete it.
8. Your choices and rights
Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to or restrict certain processing. You can exercise most of these by signing in and using account features, or by contacting us directly. We will respond to verifiable requests as required by applicable law.
9. Security
We use reasonable technical and organizational measures to protect your information, including relying on Supabase's infrastructure and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where practical, provide additional notice.
11. Contact
Questions about this Privacy Policy, or requests regarding your data, can be sent to support@captableclash.com.