Privacy Policy

Last updated: 10 August 2026

1. Data controller

Alejandro Tejedo (Spain). Contact: alejandro.tejedo@icloud.com.

2. What data is collected

SuperStake has no sign-up or login, and collects the bare minimum needed for the subscription to work:

• Anonymous session identifier from Firebase Authentication, created on first launch. It contains no name, email or any contact details: it only links the subscription to the installation.
• Purchase history: the Apple transaction identifier (originalTransactionId) and the subscription status, verified with Apple.
• App usage data, via Google Analytics for Firebase: screens viewed, in-app actions (for example, opening a match or the paywall), session time, device model, OS and app version, and approximate city-level location derived server-side from the IP address. This data is associated with the same anonymous identifier from the first point.

All of this data is associated with that anonymous identifier, so it is treated as data linked to a specific user.

3. What is NOT collected

• No name, email, phone number or address.
• No precise location (GPS), no contacts, no photos, no health or financial data.
• No advertising and no ad tracking: the IDFA and the ATT framework are not used, no data is combined with third parties for advertising purposes, and no data is ever sold to anyone.

4. Purpose and legal basis

The subscription data in section 2 is processed for a single purpose: granting and maintaining access to the subscription you purchased through Apple. The legal basis is the performance of a contract (art. 6(1)(b) GDPR).

Usage data is processed to understand how the app is used and improve it — which screens are viewed, where the purchase flow is abandoned, which features go unused. The legal basis is legitimate interest (art. 6(1)(f) GDPR) in improving the service; you can object to this processing by writing to the contact in section 1.

5. Processors and transfers

The service relies on two providers:

• Google Firebase (Authentication, Firestore, Cloud Functions and Google Analytics for Firebase), with subscription data hosted in the Europe region. See its privacy policy. International transfers, where they occur, are covered by the EU-U.S. Data Privacy Framework and standard contractual clauses.
• Apple, which processes the payment and verifies the subscription under its privacy policy.

6. Retention

Subscription data is kept for as long as the anonymous session exists, and afterwards only for as long as needed to meet legal obligations or resolve billing disputes. Usage data associated with the identifier is kept in Google Analytics for a maximum of 14 months; aggregated reports contain no identifiable data.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to alejandro.tejedo@icloud.com. Since the app has no accounts, for deletion requests please tell us roughly when you installed the app and, if you have it, your Apple invoice so we can locate the transaction. You can also lodge a complaint with the Spanish Data Protection Agency (AEPD) or with your local supervisory authority.

8. Minors

The service is not directed at people under 18 and no data of minors is knowingly collected.

9. Changes

If the app were to start collecting any new data, this policy will be updated first, along with the App Store listing and the app's own privacy manifest. The "last updated" date always reflects the version in force.