Privacy Policy

This Privacy Policy explains how Got Stampd? ("we", "us") collects, uses, and shares information when you use the Got Stampd? mobile app and website at gotstampd.com (the "Service"). By using the Service, you agree to this Policy.

1. Information we collect

You give us

• Account: name/handle, email, password, and (optional) profile photo, avatar, and bio.
• Content you post ("User Content"): proof photos, videos/gifs, challenge entries, ratings, comments, and any location text you choose to add.
• Social graph: who you follow, friends you invite, teams you join.
• Purchases: subscription and order records (payment card details are handled by the App Store, Google Play, or Stripe — we do not receive full card numbers).
• Communications: messages you send us (e.g. support, reports).

Collected automatically

• Usage & device: app interactions, device model, OS, app version, language, IP address, and crash/diagnostic data.
• Approximate location: derived from IP. We do not collect precise GPS unless you explicitly opt in, and we strip GPS/EXIF metadata from uploaded media by default.
• Identifiers: a device/app identifier and push notification token.

From others

• Sign-in providers (Apple, Google) if you use them — we receive your name and email per your settings.
• Contacts you choose to import to find friends (optional, hashed for matching).

2. How we use it

• Provide and operate the Service (log entries, build boards, feeds, friends, races, teams).
• Process subscriptions and printed-book/merch orders.
• Moderate content and keep the community safe (see §5).
• Send service messages and, with your permission, push notifications; you can control notification types in settings.
• Analyze usage to improve the Service and fix bugs.
• Comply with law and enforce our Terms.

We do not sell your personal information, and we do not show third-party ads that track you across other apps.

3. Legal bases (EEA/UK)

Where GDPR/UK-GDPR applies, we rely on: contract (to provide the Service you request), legitimate interests (to secure, improve, and moderate the Service), consent (e.g. push notifications, contacts import, precise location), and legal obligation (e.g. mandatory child-safety reporting).

4. How we share it & our service providers

We share information with service providers ("processors") that help us run the Service, under contracts that limit their use of it:

We keep this list current as our providers change. Confirm your final content-moderation and print-on-demand vendors before publishing.

We may also share information to comply with law, respond to lawful requests, protect rights and safety, or in connection with a merger or sale of the business. Content you post publicly (public entries, profile) is visible to others per your visibility settings.

5. Content moderation & child safety

To keep the Service safe and comply with law, uploaded images are scanned before they can be shown publicly, including automated scanning for known child sexual abuse material (CSAM). If we detect apparent CSAM, we are legally required to report it to the U.S. National Center for Missing & Exploited Children (NCMEC) and to preserve related records. We also use automated and human review to detect other prohibited content described in our Community Guidelines.

6. Retention

We keep information for as long as your account is active and as needed to provide the Service. When you delete content or your account, we remove it from public view promptly and delete or de-identify it within a commercially reasonable period, except where we must retain it to comply with law, resolve disputes, prevent abuse, or complete an order already placed. Backups age out on a rolling schedule.

7. Your rights & choices

• Access, export, correct, or delete your data — in the app (Settings) or by emailing privacy@gotstampd.com. Account deletion is available in-app.
• Object to or restrict certain processing, and withdraw consent (e.g. notifications, contacts, location) at any time.
• Complain to your local data protection authority.

8. Children

The Service is not directed to children under 13 (or 16 where required, such as parts of the EU), and we do not knowingly collect their personal information. Some challenges (e.g. alcohol-related) are restricted to users 18+. If you believe a child has provided us information, contact privacy@gotstampd.com and we will delete it. We comply with COPPA and the Age-Appropriate Design Codes as applicable.

9. International transfers

We may process information in the United States and other countries. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) for transfers out of the EEA/UK.

10. U.S. state privacy rights (California & others)

Depending on your state, you may have the right to know, access, correct, delete, and opt out of "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined by the CPRA. To exercise your rights, email privacy@gotstampd.com. We will not discriminate against you for exercising them.

11. Cookies (website)

Our website uses essential cookies and, with your consent where required, basic analytics to understand traffic. You can control cookies through your browser and our consent banner. The mobile app does not use advertising cookies.

12. Security

We use encryption in transit, access controls, and other safeguards to protect your information. No method is 100% secure, but we work to protect your data and will notify you and regulators of breaches where required.

13. Changes & contact

We may update this Policy; we'll post the new date above and, for material changes, notify you in-app. Questions or requests: privacy@gotstampd.com or support@gotstampd.com.