PRIVACY
Effective 29 August 2026
WHAT WE COLLECT
Account: your email, name and avatar via our sign-in provider (Clerk), including your X handle if you sign in with X. Purchases: what you bought, prices, and Stripe references — Stripe processes your card; we never see the number, only a payment-method fingerprint used to enforce fair play. Creatives: the content you submit is public by design — the point is display. Analytics: privacy-focused usage analytics (Datafast) without cross-site tracking cookies. Advertising: we run ads on X, and X's conversion pixel tells us when an ad brought you here. X receives your visit and may match it to your X account under its own privacy policy. It is the one third-party tracker on the site.
OUTBOUND CLICKS
When a visitor clicks a placement's link we record that a click happened — the placement, destination and time. We do not record who clicked: no visitor identity, no IP address, no fingerprinting. Aggregate counts are shown to the territory owner.
WHAT IS PUBLIC
The board, your creative content, conquest and takeover events, the activity feed, and Hall of Fame records (product name, amounts and hold durations) are public and permanent — history is never rewound, even after account deletion.
We send transactional email only: purchase confirmations, displacement notices, Reclaim expiry warnings and moderation decisions (via Resend). Displacement and Reclaim reminders can be turned off; no marketing email exists.
PROCESSORS
Clerk (authentication), Stripe (payments), Supabase (database, EU-hosted), Resend (email), Datafast (analytics), X (ad conversion measurement), Vercel (hosting). Each receives only what its role requires. We never sell data.
YOUR RIGHTS
Use the contact form to access or delete your account data. Deletion removes your account and personal details; public board history (which shows product names, not personal names) remains, and payment records are retained as legally required.