Crypto Arcade is operated by [LEGAL NAME OR LLC]. This page explains what we collect, why, and who else can see it. Questions: [SUPPORT EMAIL].
| What | Why | Where it lives |
|---|---|---|
| Email address, Google account ID and basic profile details such as display name or profile photo if Google provides them |
To create your account, restore your access on another device, and tie a purchase to the person who made it. | Firebase Authentication (Google) |
| Trial eligibility Hashed verified email and account ID, trial start and expiry |
To allow one 24-hour trial and prevent resets through account recreation or browser changes | Server-only Firestore records |
| Purchase records plan, amount, status, subscription state |
To give you what you paid for, to let you cancel, and for our own tax and accounting records. | Stripe |
| Game record points, wins, losses, rounds, streaks, your round choices, optional three-character tag |
To run the weekly leaderboard and show you your own history. Your tag, score, wins, losses and streak may be visible publicly. | Firestore (Google), stored against a SHA-256 hash of your account ID rather than your email |
| Settings held in your browser current session pass, chosen coin, chart timeframe and optional AI key |
To keep the Service working between page loads. | Your browser's local or session storage. AI keys remain only for the current tab and are transmitted only as explained below. |
| Server logs | Standard request logs kept by our host for reliability and abuse prevention. | Vercel |
| Network and device information IP address, browser type, request time and URL |
To deliver the site, market feed, fonts, sign-in and payments; maintain security; and diagnose failures. | Vercel and the third-party services your browser contacts, listed below |
We do not ask for your legal name, phone number, date of birth or financial account login. Stripe may collect billing details on its checkout page. We do not collect precise location.
This is worth spelling out, because the two providers work differently.
Either key can be removed in Settings. Keys are also cleared when you sign out or close the tab. Code running in the same tab can access session storage, so use a key with a spend limit.
These companies collect or process data when they provide services to us. Their own privacy terms also apply to information they receive directly from you.
| Who | What they get | What for |
|---|---|---|
| Google (Firebase) | Email, account ID, basic Google profile details and game record | Sign-in and the leaderboard database |
| Stripe | Payment details you enter on their page, email | Taking payment and managing subscriptions |
| Vercel | Request logs | Hosting |
| Anthropic | The market snapshot for a round; your key only if you supplied one | Optional AI second opinions |
| OpenAI | The market snapshot for a round, and your key, only if you chose OpenAI | Optional AI second opinions |
| Coinbase, Kraken, Binance | IP address and ordinary request information | Public market data for the game board |
| Google Fonts | IP address and ordinary request information | Loading the Service's fonts |
| Resend | Email address and transactional email contents | Sending purchase, renewal and account emails |
The snapshot sent to an AI provider contains public market data and the state of the round. It does not contain your email, your account ID or your payment details. It may include the custom market target you entered.
AI providers may retain prompts, responses and technical logs under their own terms and account settings. AI calls are used only to produce the optional market response. We do not use AI output to make legal, employment, credit, insurance, housing or other high-impact decisions about you.
Crypto Arcade does not accept file, photo, video or audio uploads. It does not use a public user-file storage bucket. The only player-supplied public content is an optional three-character leaderboard tag. If uploads are added later, this policy and the deletion controls must be updated before that feature launches.
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to how we use it, and to withdraw consent. You will never be treated differently for exercising any of these.
You may delete your account from Settings. You may also email [SUPPORT EMAIL]. We will confirm receipt and respond within 45 days, or sooner when required by law. We may ask you to verify account ownership.
Deleting your account cancels an active subscription, removes your sign-in record, game history and leaderboard data, and clears your local app data. Limited trial eligibility records described above are retained. Stripe may retain transaction records that we or Stripe must keep for tax, accounting, fraud prevention or legal claims.
We set no advertising or analytics cookies. Firebase Authentication and Stripe may set their own cookies and browser storage that are strictly necessary to keep you signed in and to process a payment securely. The Game also uses your browser's local storage for the settings listed above.
Crypto Arcade is for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has created an account, contact us and we will delete it.
Payments run through Stripe, so card details never touch our systems. Sign-in tokens are verified on our server rather than trusted from the browser. Connections use HTTPS.
No service can promise perfect security. If a breach affects your personal information, we will tell you and the relevant regulator as required by law.
Our providers operate in the United States and elsewhere, so your information may be processed outside your country. Where required, transfers rely on the safeguards those providers put in place, such as standard contractual clauses.
We may update this policy. The date at the top shows the current version, and material changes will be made visible in the Service before they take effect.