Last Updated: February 2025

Potly.Win ("Platform", "we", "us", "our"), operated by [PotlyWin LLC], respects your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights regarding your data.

1. Information We Collect

Information you provide:

• Account information: Username, email address, and password (stored securely hashed).
• Payment information: PayPal email address for prize payouts (only for prize winners). We do not collect or store credit card or bank account information.
• Tax information: W-9 forms for US-based winners receiving over $600/year, as required by law.

Information collected automatically:

• Gameplay data: Scores, game session data, timestamps, input patterns, and performance metrics. This data is essential for leaderboard rankings, anti-cheat detection, and prize allocation.
• Device and browser information: IP address, browser type, operating system, and screen resolution.
• Usage data: Pages visited, features used, and interaction patterns.
• Cookies: Authentication tokens (httpOnly secure cookies) to keep you logged in. We do not use tracking cookies for advertising purposes.

2. How We Use Your Information

Purpose	Data Used
Account management	Username, email, password
Leaderboards & rankings	Username, scores, gameplay data
Anti-cheat & fair play	IP address, gameplay data, input patterns, device info
Prize payouts	Email, PayPal info, tax forms
Platform improvement	Usage data, aggregated gameplay statistics
Security & fraud prevention	IP address, device info, account activity
Communication	Email (prize notifications, important account updates only)

3. Advertising

We display advertisements from third-party ad networks (such as Google AdSense) to fund our prize pools. These ad providers may use cookies and similar technologies to serve ads based on your browsing activity. We do not sell your personal information to advertisers.

You can manage your ad preferences through:

• Google's Ad Settings: adssettings.google.com
• Your browser's cookie settings
• The Network Advertising Initiative opt-out page: optout.networkadvertising.org

4. Data Sharing

We do not sell your personal information. We may share data in the following limited circumstances:

• Public leaderboards: Your username and scores are displayed publicly on leaderboards.
• Payment processors: PayPal receives your payment email for prize distribution.
• Ad networks: Third-party advertisers may collect anonymized browsing data via cookies.
• Legal requirements: We may disclose information if required by law, court order, or government regulation.
• Platform protection: To enforce our Terms, investigate fraud, or protect the safety of our users.

5. Data Security

We implement industry-standard security measures to protect your data:

• Passwords are hashed using bcrypt (never stored in plain text).
• Authentication uses JWT tokens with short expiry and secure refresh tokens.
• All data is transmitted over HTTPS encryption.
• Database access is restricted and monitored.
• Rate limiting and IP tracking protect against brute force attacks.

While we take security seriously, no system is 100% secure. We cannot guarantee absolute security of your data.

6. Data Retention

• Account data: Retained as long as your account is active.
• Gameplay data: Scores and leaderboard entries are retained indefinitely for historical records.
• Session data: Game session details are retained for 90 days for anti-cheat review, then anonymized.
• IP addresses: Retained for 90 days for security purposes.
• Deleted accounts: Personal data is removed within 30 days of account deletion. Anonymized gameplay data may be retained for leaderboard integrity.

7. Children's Privacy

Users aged 13-17 may create accounts and play games but are not eligible for cash prizes. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account.

For users under 16 in the European Economic Area (EEA), parental consent may be required under GDPR. Parents or guardians may contact us to review, modify, or delete their child's data.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your account and associated data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your data for certain purposes.
• Restriction: Request restriction of processing under certain circumstances.

To exercise any of these rights, contact us at privacy@potly.win. We will respond within 30 days.

9. International Users

The Platform is operated from the United States. If you are accessing the Platform from outside the US, your data may be transferred to and processed in the United States. By using the Platform, you consent to this transfer. We comply with applicable data protection laws including GDPR for EEA users and PIPEDA for Canadian users.

10. GDPR Compliance (EEA Users)

If you are located in the European Economic Area, our legal bases for processing your data are:

• Contract performance: Processing necessary to provide our services (account management, gameplay, prizes).
• Legitimate interest: Anti-cheat measures, platform security, and improvement.
• Consent: Third-party advertising cookies (you may withdraw consent at any time).
• Legal obligation: Tax reporting requirements for prize winners.

11. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected and how it is used.
• Right to delete personal information.
• Right to opt-out of the sale of personal information (we do not sell personal information).
• Right to non-discrimination for exercising privacy rights.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We will notify you of material changes via email or site notification.

13. Contact

For privacy-related inquiries:

Email: privacy@potly.win
[PotlyWin LLC]
[Address placeholder]