Privacy Policy
Last updated: July 9, 2026
1. What We Collect
Account data. Your email address, used to sign you in with one-time codes and to send service emails. We never see or store a password.Records you enter. The tracking data you create in the app — which casino bonuses you've collected and when, play sessions, withdrawals, purchases, and casino balances. You enter this yourself; we don't pull it from casinos.Billing data. Payments are processed by Stripe. We store your Stripe customer ID and subscription status; we never see or store your card number.Technical data. Session cookies to keep you signed in, your IP address for security and rate limiting, and — only if you enable push notifications — a push subscription endpoint from your browser.
2. How We Use It
We use your data solely to operate the Service: authenticating you, showing you your own tracking data and analytics, processing your subscription, sending bonus-ready notifications you've opted into, and protecting the Service from abuse. We do not sell or rent your personal information, and we do not use third-party advertising or advertising trackers.
3. Service Providers
Your data is processed by a small set of infrastructure providers acting on our behalf: Supabase (database and authentication), Stripe (payments), Vercel (hosting), Resend (login-code emails), and Upstash (rate limiting). Each receives only what it needs to perform its function and is bound by its own privacy and security commitments.
4. Cookies
We use first-party cookies for one purpose: keeping you signed in (authentication session cookies). We do not use advertising or cross-site tracking cookies. If you block cookies, you won't be able to stay logged in.
5. Referral Links
Casino and product links on the Service are referral links. When you click one, the destination site learns you arrived via SweepsGirl (that's how referrals work), but we do not send them your identity, and what you do on their site is governed by their privacy policy — not ours.
6. Data Retention & Deletion
We keep your data for as long as your account exists. To delete your account and its data, email thesweepsgirl@gmail.com from your account email and we will delete it within 30 days, except records we must retain for legal or accounting reasons (e.g., payment records held by Stripe).
7. Your Rights
You can access and correct your tracking data directly in the app, and export locked sessions as CSV. Depending on where you live (for example, California), you may have additional rights to access, correct, delete, or receive a copy of your personal information. To exercise any of these, email us — we honor such requests regardless of state.
8. Security
Data is encrypted in transit (HTTPS) and at rest by our providers, access is scoped by row-level security so each account can only read its own records, and payment details never touch our servers. No system is perfectly secure, so use an email account you control and keep it protected.
9. Children
The Service is for adults 18+ (21+ in some jurisdictions) and is not directed at children. We do not knowingly collect information from anyone under 18; if you believe we have, contact us and we will delete it.
10. Changes & Contact
We may update this policy from time to time; material changes will be reflected in the "Last updated" date above. Questions or requests: thesweepsgirl@gmail.com. See also our Terms of Service.