Privacy Policy

Last updated: June 2026

1. What We Collect

When you use CatchaBreaks, we collect:

Account data: email address, display name, and hashed password (we never store your plain-text password).
Break data: items you list, spots you enter, and draw outcomes.
Payment data: we do not store full card numbers. Payment is processed by Braintree (a PayPal company). We only store a Braintree transaction ID to track authorization holds and captures.
Communications: messages you send through the platform messaging system.
Technical data: IP addresses, browser type, and usage logs for security and debugging purposes.

2. How We Use Your Data

To operate your account and process break entries.
To send you transactional emails — spot confirmations, draw results, shipping coordination, and important account notices.
To send you platform notifications if you opt in (e.g. spot-open alerts, new break alerts).
To detect and prevent fraud, chargebacks, and abuse.
To comply with legal obligations.

3. Email Communications

By creating an account you consent to receiving transactional emails related to your breaks and account. You may opt out of non-transactional marketing emails at any time via the unsubscribe link in the email. Transactional emails (draw results, payment confirmations) cannot be opted out of while your account is active.

4. Data Sharing

We do not sell your personal data. We share data only with:

Braintree/PayPal — to process payments.
Email service provider — to send transactional emails.
Railway (hosting) — your data is stored on their infrastructure.
Law enforcement — if required by law or court order.

5. Data Retention

We retain your account data for as long as your account is active. Break history and transaction records are retained for a minimum of 7 years to meet financial record-keeping obligations. You may request deletion of your personal data by emailing us — note that financial transaction records may be retained for legal compliance even after account deletion.

6. Your Rights

Depending on your location, you may have rights to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your account and non-financial data.
Object to processing for marketing purposes.

To exercise these rights, email blamx626@gmail.com.

7. Security

We use industry-standard security measures including bcrypt password hashing, HTTPS-only connections, JWT tokens with expiry, and rate limiting on authentication endpoints. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

8. Cookies

CatchaBreaks stores your authentication token in your browser's localStorage. We do not use third-party advertising cookies or tracking pixels.

9. Children's Privacy

CatchaBreaks is not intended for users under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us and we will delete it.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a notice on the site.

11. Contact

Privacy questions: blamx626@gmail.com