PRIVACY POLICY & GDPR COMPLIANCE

1. Overview & Data Minimization Commitment

SaaSBrawl.lol ("we", "our", "us") is dedicated to protecting user privacy. We operate under strict data minimization principles under the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and the California Consumer Privacy Act (CCPA).

We do NOT require user account creation, passwords, phone numbers, or invasive tracking scripts. We do not sell, rent, or trade personal data to data brokers or advertising exchanges.

2. Information We Process

• Digital Sponsorship Metadata: When you sponsor a software tool, you voluntarily provide a display name (or remain "Anonymous Whale") and an optional 140-character roast message. These are publicly published to the live arena ledger.
• Payment Processing (Merchant of Record): All financial transactions are processed directly by Polar.sh (Polar Inc.), acting as the Merchant of Record. We never store, process, or have access to full credit card numbers, CVVs, or bank credentials. Please refer to Polar.sh's Privacy Policy for details on their secure payment handling.
• Technical Logs: Minimal server logs (IP address, user agent) collected solely for rate-limiting, DDoS mitigation, and fraud prevention, retained for no more than 30 days.

3. Cookies & Local Storage Policy

We do NOT use third-party tracking cookies, advertising retargeting pixels (such as Meta Pixel or Google Analytics tracking), or cross-site fingerprinting.

We use browser localStorage strictly for functional preferences:

• Your theme preference (Light or Dark mode).
• Your audio toggle state (Muted or Enabled).
• Caching match simulation state for uninterrupted browsing.

4. Your Rights Under GDPR & CCPA

You have the following statutory rights regarding any data you provide:

• Right to Access: You may request confirmation of any metadata associated with your transactions.
• Right to Erasure ("Right to be Forgotten"): You may request the redaction or permanent deletion of any public roast message or supporter name submitted to the arena.
• Right to Rectification: You may request correction of inaccurate metadata.
• Right to Non-Discrimination: We provide identical service regardless of the privacy choices you exercise.

5. Contact & Data Protection Officer

To exercise your data protection rights or submit an inquiry, contact our team at:
support@ali-ch.dev