Privacy Policy.
Cromito is a sports card-collecting game. This policy explains what we collect, why, and how you can delete it. If you don't agree with it, please don't use Cromito.
What we collect
- Your sign-in identity. Cromito only supports signing in with Google (and Sign in with Apple on iOS). From that we receive your email address, display name and profile picture. We never see or store your password.
- Your game data. Coins, cards, packs, predictions, trades, market listings, friends and competition entries — the state needed to run your account.
- Purchase records. If you buy coins on the website, payment is processed by Whop. We store a record of the purchase (bundle, amount, transaction reference) so your coins can be credited. We never receive or store your card details.
- Technical data. Standard server logs — IP address, device and browser type, and timestamps — used to operate, debug and secure the service.
What we do not do
- We do not sell or rent your personal data.
- We do not use advertising or analytics trackers, and we do not track you across other apps or websites.
- We do not use your data to build advertising profiles.
Who processes your data
- Google — sign-in.
- Supabase — authentication and database hosting.
- Fly.io — application hosting.
- Whop — payment processing for coin purchases (website only; coin purchases are not offered in the mobile app).
These providers process data on our behalf so Cromito can function. Live match statistics come from a third-party sports data provider; no personal data is sent to them.
Deleting your data
You can delete your account at any time from Account inside the app. Deleting removes your sign-in identity (email and Google link) and your display name, withdraws your open listings and trade offers, refunds coins held in open player requests, and clears your friends list.
Anonymised coin-transaction records are retained so completed trades and purchases stay balanced for the other players involved, and to meet record-keeping obligations. These records no longer identify you. Full instructions: how to delete your account.
Children
Cromito is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has created an account, contact us and we will delete it.
Your rights
You can request access to, correction of, or deletion of your personal data by emailing us. Deletion is also self-service, as described above.
Contact
Questions about this policy or your data: privacy@cromito.com