Privacy Policy
RivalPrize ("we," "us," or "our") is committed to protecting your privacy. This policy explains what information we collect, how we use it, and your rights.
1. Information We Collect
Information you provide
- Account data: username, email address, and state of residence.
- Phone number: your US mobile number, collected during onboarding and used solely for identity verification via SMS.
- Payment data: your PayPal email address, used to process withdrawals. We do not store credit card numbers or full PayPal account details.
- Contest and match data: games you post, contests you enter, results you report, and dispute notes you submit.
Information collected automatically
- Log data: IP address, browser type, pages visited, and timestamps when you use the Platform.
- Session data: a secure session cookie that keeps you logged in.
2. How We Use Your Information
- To create and maintain your account.
- To process deposits and withdrawals via PayPal.
- To facilitate contests, matches, and dispute resolution.
- To verify eligibility (state of residence).
- To verify your phone number via a one-time SMS code during onboarding.
- To send transactional notifications: match updates and account activity.
- To detect and prevent fraud and policy violations.
- To comply with legal obligations.
We do not send marketing emails. We do not sell your data.
3. Payment Processing
All payment processing is handled by PayPal. When you deposit or withdraw funds, you interact directly with PayPal's platform. PayPal's own privacy policy governs their collection and use of your financial data. We only store the PayPal email address you register with us.
4. Data Sharing
We do not sell, rent, or trade your personal information. We may share it only:
- With PayPal, as necessary to process transactions.
- With our SMS provider, solely to deliver the one-time verification code to your phone number.
- With Cloudflare, whose Turnstile service receives your IP address and browser signals when you complete the human verification challenge on the sign-in page. Cloudflare's privacy policy governs their use of that data.
- With law enforcement or regulators when required by law or to protect the Platform.
- With service providers who help us operate the Platform, under confidentiality agreements.
5. Data Retention
We retain account data for as long as your account is active. Financial transaction records are retained for a minimum of 5 years to comply with accounting obligations. If you close your account, personal data is anonymized or deleted within 90 days, except where retention is required by law.
6. Security
Authentication is handled via Google OAuth — we never store or handle your password. All data in transit is encrypted via TLS. We take reasonable technical and organizational measures to protect your data, but no system is perfectly secure.
7. Cookies
We use one session cookie to keep you logged in. We do not use tracking, advertising, or analytics cookies. You can disable cookies in your browser, but doing so will prevent you from staying logged in.
8. Your Rights
You may, at any time:
- Update your account information from your profile settings.
- Request a copy of the personal data we hold about you.
- Request deletion of your account and personal data.
To exercise these rights, contact us at support@rivalprize.com.
9. Children
The Platform is not directed at anyone under 18. We do not knowingly collect personal information from minors. If we learn we have done so, we will delete it promptly.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated by email or notice within the Platform. Continued use after changes are posted constitutes acceptance.
11. Contact
Questions about this policy? Contact us at support@rivalprize.com.