Privacy Policy

Effective date: {{EFFECTIVE_DATE}}

This policy explains how Take the Crown (takethecrown.app) handles personal data. It is written to comply with Ecuador's Organic Law on Personal Data Protection (LOPDP) and, for users in the European Economic Area and the United Kingdom, the GDPR.

1. Who is responsible

Dario Sarango, natural person residing in Ecuador, is the data controller. Contact for any privacy matter: hola@takethecrown.app.

2. Data we collect

Account and profile. Email, public name, avatar or uploaded image, country, main link, social links, showcase, and your settings (language, alerts, privacy options). If you sign in with Google or X, we receive your email and basic profile from them.

Purchases. Email, amount, currency, time, and the content you submit with the purchase (name, message, link, country, local hour). Payment details such as card numbers are collected by Dodo, never by us.

Game activity. Reigns, durations, prices paid, achievements, ranks, seasons and reports you submit.

Technical data. Your IP address is used in real time for security and to suggest your country. We only store it as a salted, irreversible hash, used to limit abuse. We also process request logs, browser type and your time zone.

Communications. Emails we send you and whether they were delivered.

3. What is public

The game is public by design. Your public name, avatar, country, main link, social links, reigns, messages, achievements, rank and statistics are visible to anyone. You can hide your main rival and your chronicle, and choose whether to show the total amount you have spent. Your email is never public.

4. Why we use your data and on what basis

We do not sell your data, use it for advertising or build advertising profiles.

5. Automated moderation

Names, messages and links are checked by automated rules and by an AI model provided by Anthropic before they are published. This can hold content for review or prevent it from being published. It does not affect your account or purchases beyond that content. You can ask us at hola@takethecrown.app for a human review of any moderation decision.

6. Who we share data with

We use service providers that process data on our behalf, under contracts that protect it:

• Supabase: database, authentication and file storage.
• Vercel: hosting.
• Cloudflare: content delivery, security and bot protection.
• Resend: sending emails.
• Anthropic: automated content moderation.

Dodo processes payments as merchant of record and is responsible for the data it collects under its own privacy policy. Google and X process your data under their own policies when you sign in with them.

We may disclose data when required by law or to protect the rights and safety of users and the Service.

7. International transfers

Our providers may process data outside Ecuador and outside your country, including in the United States. We rely on providers that offer appropriate safeguards, such as standard contractual clauses.

8. How long we keep data

• Account and profile data: while your account exists.
• Reign history: it is part of the game's public record. If you delete your account, your reigns remain without your name, avatar, message or link.
• Payment records: for as long as tax and accounting laws require.
• IP hashes and abuse records: up to 90 days, unless needed for an ongoing investigation.
• Emails sent and logs: up to 90 days.

9. Your rights

You have the right to access, rectify, delete and port your data, to object to or restrict its processing, and to withdraw consent. You can edit most data and delete your account from your profile settings. For anything else, write to hola@takethecrown.app. We will reply within the time required by the law that applies to you.

You can also file a complaint with Ecuador's Superintendency of Personal Data Protection or with the data protection authority in your country.

10. Cookies

We only use cookies that are strictly necessary for the Service to work: your session, your language, your time zone and bot protection. We do not use analytics or advertising cookies.

11. Children

The Service is not intended for people under 16, and purchases require being an adult. If you believe a minor has given us data, contact us and we will delete it.

12. Security

We protect data with encryption in transit, access controls and the minimum data necessary. No system is completely secure, but we work to protect your information and will notify you and the authorities of any breach as the law requires.

13. Changes

We may update this policy. We will publish the new version with its effective date and notify you of significant changes by email or on the Service.