Privacy Policy

• Account info: username, email address, and a hashed password (we never store or see your raw password).
• Payment info: Stripe handles your card details directly — they never touch our servers. We store your Stripe customer ID so repeat checkouts work.
• Advertiser content: whatever you upload when claiming or bidding — a brand name, a website link, a logo, and optionally a short video.
• An anonymous visitor cookie (a random ID, not tied to any account) used to show the “online now” count — it carries no personal information.
• Your IP address, held briefly in memory to rate-limit requests (stop a runaway client from hammering the site) — never written to a database or logged long-term.

To run the platform: authenticate you, process real payments through Stripe, show your territories and advertiser content on the map and territory pages, and keep the service stable against abusive traffic. We don't sell your data, and we don't use it for advertising outside this platform.

Only the infrastructure providers that run the platform: Stripe (payment processing), Supabase (database and file storage), and Vercel (hosting). Each processes data under their own privacy policy and only for the purpose of providing their service to us. We don't sell or rent your information to anyone else.

A session cookie keeps you logged in (httpOnly, encrypted — inaccessible to page scripts). A separate anonymous visitor cookie powers the live visitor count and isn't linked to your account even if you're logged in. Neither is used for third-party advertising or tracking across other sites.

Claimed territories, bids, and ownership history are kept as a public record of the platform's activity, similar to a transaction ledger — that's core to how the game works. For anything else (correcting account details, deleting your account, or asking what we hold on you), reach out via the link in our footer and we'll sort it out directly.

Passwords are hashed, never stored in plain text. All traffic runs over HTTPS. Payment details never reach our servers at all — Stripe's hosted checkout handles that end-to-end.

This platform involves real payments and isn't intended for anyone under 18. Don't create an account if you don't meet that requirement.

If this policy changes in a meaningful way, we'll update the date at the top of this page. Continued use of the platform after a change means you accept the update.