TLDR: We will never sell your personal information. Ever. Full stop.
StatBox ("we," "us," or "our") is a sports-guessing game available at this website. If you have any privacy questions, contact us at statbox.game@gmail.com.
When you create an account we collect your email address. If you sign in with Google, we receive only what Google shares on your public profile (name and email address). We do not receive your Google password.
We store your game history, streaks, scores, achievements, and preferences so your progress syncs across devices.
If you purchase a Premium subscription, your payment is processed by Stripe, Inc. We do not see or store your full card number, CVV, or bank account details. Stripe provides us with a non-sensitive billing record (last 4 digits of card, card brand, billing country, and subscription status) so we can manage your access. Stripe's privacy policy is available at stripe.com/privacy.
We collect basic technical information such as your browser type and approximate country, used only to diagnose errors and ensure the app works correctly. We do not track you across other websites.
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing the game and syncing your progress | Performance of a contract (Art. 6(1)(b)) |
| Processing subscription payments | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (receipts, renewal notices, cancellation confirmations) | Performance of a contract (Art. 6(1)(b)) |
| Keeping your account secure and preventing fraud | Legitimate interests (Art. 6(1)(f)) |
| Complying with tax and financial record-keeping obligations | Legal obligation (Art. 6(1)(c)) |
We share your data only with the following service providers, and only to the extent needed to operate StatBox:
We do not sell your data. We do not share your data with advertisers. We do not use your data for targeted advertising. We do not share your data with any other third party.
If you have an account, we may send you emails that are necessary to operate the service. These include:
These emails are transactional and cannot be opted out of while you have an active account, as they are required by law or necessary to manage your subscription. We do not send marketing or promotional emails.
We use cookies only to keep you logged in and remember your preferences. We do not use tracking, advertising, or analytics cookies. A cookie notice is shown on your first visit. You can refuse non-essential cookies at that time.
Supabase and Stripe are US-based companies. Your data may be stored on servers in the United States. Both companies participate in data transfer frameworks that provide safeguards for transfers of personal data from the EU and UK to the US, including Standard Contractual Clauses where applicable.
You have the following rights regarding your personal data. To exercise any of these rights, contact us at statbox.game@gmail.com. We will respond within 30 days.
If you are located in the European Union or United Kingdom, you have the right to lodge a complaint with your local data protection authority if you believe we have not handled your data correctly. In the EU, the relevant authority is the supervisory authority in your country of residence. In the UK, it is the Information Commissioner's Office (ICO) at ico.org.uk.
California residents have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at statbox.game@gmail.com.
StatBox is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, please contact us and we will delete that account and its data promptly. Users between 13 and 18 should have parental consent before creating an account or purchasing a subscription.
If we change this policy in a material way, we will notify you by email at least 14 days before the changes take effect. Continued use of the app after that date constitutes acceptance of the updated policy.