Privacy Policy

The legal bases apply where laws such as the GDPR require one. "Contract" means we need the data to provide the Service you signed up for.

Your username, best ranked run, stages cleared and tier appear on public leaderboards. Your username appears on the public activity feed next to claims, ranked runs, free play hands and purchases (the pack size, never the price you paid or any payment detail). Your email address and any linked wallet address are never shown publicly.

We share personal data only with service providers that process it for us under contract:

• Supabase: database, authentication and server functions. Data is stored in the United States.
• Vercel: website hosting and delivery.
• Stripe: payment processing. Stripe processes your payment details as its own controller under its privacy policy.
• Google: only if you choose to sign in with Google.

We may also disclose data when the law requires it, to protect the rights, safety or property of our players or of Everreach Labs, Inc., or to a buyer or successor if the business is sold or reorganised, in which case this policy continues to apply.

Everreach Labs, Inc. is based in the United States and our providers store data there. If you are in the European Economic Area, the United Kingdom or Switzerland, your data is transferred to the United States under the safeguards our providers offer, such as the EU Standard Contractual Clauses or the EU US Data Privacy Framework.

• Account and game data: while your account is open. When you delete your account we delete or anonymise it within 30 days.
• Purchase records and the coin ledger: for as long as tax and accounting law requires, usually up to 7 years, even after the account is deleted.
• Security and audit logs: up to 12 months, longer only where needed for an open investigation or dispute.
• Emails with us: up to 3 years after the conversation ends.

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that is wrong;
• delete your data and your account;
• object to or restrict some processing, including processing based on legitimate interests;
• receive your data in a portable format;
• withdraw consent where we rely on it;
• complain to your data protection authority.

To use any of these rights, email ethan@everreachlabs.io from the address on your account. We answer within 30 days and may need to confirm your identity first. We will not treat you differently for using your rights.

Under the California Consumer Privacy Act, you have the right to know, delete and correct personal information, and to opt out of its sale or sharing. We do not sell personal information and we do not share it for cross context behavioral advertising. The categories we collect are those in section 2: identifiers, commercial information (purchases), internet activity (game and log data) and inferences used only to detect cheating.

Passwords are hashed, traffic is encrypted, value bearing records can only be changed by our servers, and two factor authentication is available on every account. No system is perfectly secure, so please use a unique password and turn on two factor.

STAKD is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, tell us and we will delete it.

We only use storage that is strictly necessary to keep you signed in. See the Cookie Policy.

We will post any update here with a new date, and tell you in the Service or by email about material changes. Questions or requests: Everreach Labs, Inc., 2803 Philadelphia Pike, Suite B #1255, Claymont, DE 19703, United States, ethan@everreachlabs.io.