Privacy Policy

1. Introduction

Carpe Five ("Carpe Five", "we", "us", "our"), operated by IWTBNB Group, respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our Platform. By using Carpe Five, you consent to the practices described here.

2. Information We Collect

Information you provide:

• Email address and display name (registration)
• Country of residence (profile setup)
• Date of birth (age verification)
• Payment information (merchants only — processed by Stripe; we do not store card details)
• Wallet address (if you submit a BC redemption request)

Information collected automatically:

• Game results, timing data, and item usage (for gameplay and anti-cheat)
• IP address and device/browser information (for security and fraud prevention)
• Ad interaction data (for ad billing and performance analytics)
• Session tokens (short-lived, for game security)

3. How We Use Your Information

• To operate the game and manage your account
• To process merchant payments and campaign management
• To calculate and display leaderboard rankings
• To send transactional emails (registration, password reset)
• To detect and prevent fraud, cheating, and abuse
• To improve the Platform and user experience
• To comply with legal obligations

4. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase — database and authentication provider (data stored on their infrastructure)
• Stripe — payment processing for merchant billing (PCI-compliant)
• Upstash — Redis caching for leaderboard and session data
• Vercel — hosting and edge functions
• Monetag — ad delivery (receives anonymized ad interaction data)
• Law enforcement or legal authorities, when required by law

5. Cookies & Local Storage

We use cookies and session storage for authentication (Supabase auth tokens). We do not use advertising tracking cookies. Third-party ad providers (e.g., Monetag) may set their own cookies subject to their privacy policies.

6. Data Retention

We retain your account data for as long as your account is active. Game results and transaction history are retained for at least 2 years for dispute resolution. You may request deletion of your account and data by contacting us — see Section 10.

7. Your Rights (GDPR / CCPA)

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — receive your data in a machine-readable format
• Objection — object to certain processing activities
• Opt-out of sale — we do not sell your data (CCPA)

To exercise these rights, contact us via the FAQ page.

8. Security

We implement industry-standard security measures including TLS encryption, row-level security on our database, and JWT-based session validation. However, no system is perfectly secure. We encourage you to use a strong, unique password.

9. Children's Privacy

IWTBNB is not intended for users under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has registered, please contact us for removal.

10. Contact & Data Requests

For privacy-related requests, questions, or to exercise your rights, please visit our contact page.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notice. Continued use of the Platform constitutes acceptance of the updated policy.