Privacy Policy

1. Data We Collect

• Account identifiers such as user ID, email, and connected login provider metadata.
• Profile data from linked providers (for example Steam display name/avatar or Google profile details).
• Billing metadata related to subscriptions (for example Stripe customer/subscription IDs and status).
• Operational data needed to run the app, such as request logs, pricing source selections, and saved UI preferences.

2. How We Use Data

• Authenticate users and protect account security.
• Provide trade-up calculations, plan gating, and subscription features.
• Process payments and manage billing lifecycle events.
• Operate, debug, and improve reliability and abuse prevention.

3. Data Sharing

We share data only with service providers necessary to run the Service, including:

• Supabase (authentication and data storage)
• Stripe (subscription and billing)
• Steam / Google (sign-in and account-linking flows)

We do not sell personal data for money.

4. Cookies and Local Storage

The Service uses browser storage for session state and user preferences (for example filters and UI settings).

If you operate in jurisdictions requiring consent for non-essential storage, implement a consent manager before enabling non-essential tracking/storage.

5. Data Retention

We retain account and subscription records while accounts are active, and for limited periods thereafter where required for legal, security, and fraud-prevention purposes.

You can request account deletion from the dashboard settings flow.

6. Your Rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, and to object to certain processing.

To make a request, contact: support@skinmerge.com.

7. Security

We use reasonable technical and organizational safeguards, but no online service can guarantee absolute security.

8. Children

The Service is not directed to children and is not intended for users under the age required by applicable law in their jurisdiction.

9. International Data Transfers

Your data may be processed and stored in the United States or other countries where our service providers operate (including AWS, Supabase, and Stripe). By using the Service, you consent to the transfer of your data to these jurisdictions, which may have different data protection laws than your own.

10. Policy Updates

We may update this Policy from time to time. Updated versions become effective when posted with a revised effective date.