Privacy

Privacy by design

This implementation stores account and gameplay records in Supabase, payment identifiers in Stripe-linked database records, and winner proof in a private storage bucket. Proof files are accessible only to their owner and authorised administrators.

Data controls

Row Level Security limits member access to owned records. Service-role access is server-only. Configure retention, legal basis, controller details and contact information before production launch.