Last Updated: July 21, 2025
1. Introduction and Scope
1.1. About This Policy: This Privacy Policy ("Policy") describes how ScratchAll ("we," "us," "our") collects, uses, processes, and discloses your information, including personal data, in conjunction with your access to and use of the ScratchAll website, any associated mobile applications, and all related services (collectively, the "Service").
1.2. Acceptance of Policy: By accessing, using, or interacting with any part of the Service, you acknowledge that you have read, understood, and agree to be bound by the terms of this Policy. If you do not agree with this Policy, you must not access or use the Service.
1.3. The Service: The ScratchAll Service provides a free-to-play interactive game. Users may have the option to purchase virtual in-game items such as currencies or content packs with real money. The Service is not a gambling platform; no real money can be won. The Service may also feature advertisements.
1.4. Data Controller: For the purposes of applicable data protection legislation, the data controller of your personal data is ScratchAll, located in Pittsburgh, Pennsylvania, USA. Our contact information is provided in Section 11 of this Policy.
2. Governing Regulations and Compliance
This Policy is designed to comply with major data privacy regulations. While not exhaustive, our practices are guided by the principles of the following legal frameworks:
- General Data Protection Regulation (GDPR): Applies if we process the personal data of individuals located in the European Economic Area (EEA).
- California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Applies if we collect personal information from California residents and meet certain statutory thresholds.
- Children's Online Privacy Protection Act (COPPA): Governs the online collection of personal information from children under the age of 13 in the United States.
- Other applicable regional and national data protection laws may also apply depending on your jurisdiction.
3. The Information We Collect
We collect information to provide and improve our Service. The types of information we collect are categorized as follows:
3.1. Information You Provide Directly to Us: This is personal data you actively and voluntarily provide when you use the Service. This includes, but is not limited to:
- Account Information: When you register for an account, we collect information such as a username, email address, and password.
- Contact Information: If you contact us for support or other inquiries via email or other communication channels, we will collect your name, email address, and the content of your communications.
- Payment Information: If you choose to make in-game purchases, you will provide payment information directly to our third-party payment processor, Stripe. We do not directly store or have complete access to your full credit card number or financial account details. Our processor provides us with confirmation data, such as a transaction token and order details.
- User-Generated Content: Usernames displayed on leaderboards or other public-facing features of the Service.
3.2. Information We Collect Automatically: When you use the Service, we automatically collect certain information about your device and your usage of the Service. This may include:
- Device and Connection Information: Your IP address, device type and model, operating system, browser type and version, and unique device identifiers.
- Usage and Gameplay Data: Information about your interactions with the Service, such as the features you use, pages you visit, virtual currency balances, wins, losses, claimed rewards, game progress, purchases made, and the time, frequency, and duration of your activities.
- Analytics and Interaction Data: Through our analytics platform, we may collect detailed interaction data including clicks on various elements, user journeys through the Service, mouse movements, and scroll patterns to help us understand usability and improve the Service.
- Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and other similar technologies to operate the Service, for analytics, and for advertising purposes. The use of these technologies is further described in Section 6.
3.3. Information from Third-Party Sources: We may receive information about you from the third-party services we use to operate the Service. This includes:
- Payment Processor: We receive transaction confirmations, order details, and other related data from our payment processor, Stripe, to confirm and process your purchases.
- Backend and Database Provider: Our backend service provider, Supabase, processes and stores the data necessary for the Service to function.
- Advertising Partners: Our advertising partner, Google Ads, may provide us with information related to the performance of ad campaigns and your interaction with advertisements.
3.4. Children's Data and Age Requirements: The Service is not intended for or directed at children under the age of 13. We do not knowingly collect personal information from individuals under 13 years of age. If we become aware that we have inadvertently collected personal data from a child under 13, we will take commercially reasonable steps to delete such information. Use of the Service indicates you are either over the age of 18, or you are over the age of 13 and have obtained verifiable parental or guardian consent to use the Service and agree to this Policy.
4. How and Why We Use Your Information
4.1. Purposes of Processing: We use the information we collect for various business and commercial purposes, including:
- To Provide and Maintain the Service: To create and manage user accounts, operate the game, process transactions, and deliver the features of the Service.
- To Improve and Personalize the Service: To understand how users interact with the Service, personalize your experience, provide customized content, and develop new features.
- To Communicate with You: To respond to your inquiries, send administrative information (such as updates to our terms or policies), and provide customer support.
- Marketing and Advertising: To display advertisements within the Service, including targeted ads, and to measure the effectiveness of such advertising.
- Analytics and Performance: To monitor and analyze usage and trends to improve the user experience and the performance of our Service.
- To Publish Scores and Winnings: To operate features like leaderboards that display user-generated usernames and virtual achievements.
- Security and Legal Compliance: To detect and prevent fraud, maintain the security of our Service, and comply with our legal obligations, court orders, or other binding legal processes.
4.2. Legal Basis for Processing (for EEA Users): If you are an individual in the European Economic Area (EEA), we collect and process information about you only where we have a legal basis for doing so under applicable EU laws. The legal basis depends on the Service you use and how you use it. This means we collect and use your information only where:
- It is necessary for the performance of a contract with you (e.g., to provide the core Service you have requested and to manage your user account).
- It satisfies a legitimate interest (which is not overridden by your data protection interests), such as for research and development, to market and promote the Service, and to protect our legal rights and interests.
- You give us your consent to do so for a specific purpose (e.g., for certain types of marketing or the use of non-essential cookies).
- We need to process your data to comply with a legal obligation.
5. Data Sharing and Disclosure
We do not sell any of the personal data that we collect. We may share your information with certain third parties under the circumstances described below.
5.1. Third-Party Service Providers: We share information with third-party vendors, consultants, and other service providers who perform services on our behalf. These services are integral to the operation of ScratchAll. Data collected through web analytic tracking is processed internally in accordance with this Policy.
5.2. Links to Third-Party Privacy Policies: Your data, when processed by these third parties, is subject to their own privacy policies. We strongly encourage you to review them.
- Supabase: https://supabase.com/privacy
- Stripe: https://stripe.com/privacy
- Google: https://policies.google.com/privacy
6. Cookies and Tracking Technologies
6.1. General Use: We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier.
6.2. Types of Cookies We Use:
- Essential/Functional Cookies: These are necessary for the Service to function correctly. They are used to maintain your session, manage your account and balance, and remember your choices.
- Performance and Analytics Cookies: These cookies, including those from our analytics platform, help us understand how our Service is being used, measure the popularity of certain content, and analyze user interaction patterns.
- Advertising Cookies: These cookies are used by us and our advertising partners, such as Google, to deliver advertisements that may be relevant to you and your interests. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our Service and/or other sites on the Internet. To opt out of personalized advertising from Google, visit Google Ad Settings. You may also be able to opt out of other third-party advertisers by visiting www.aboutads.info/choices/.
7. Data Security
We are committed to protecting your data. We implement technical and administrative security measures designed to provide a level of security appropriate to the risk of processing your personal data. Our robust security features include, but are not limited to, encryption of data in transit (TLS/SSL) and at rest, access controls, and a secure infrastructure. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security.
8. Data Retention
We retain personal data for as long as is necessary for the purposes set out in this Policy. The criteria used to determine our retention periods include:
- The duration for which you have an active account with us.
- Our need to comply with a legal or regulatory obligation (e.g., for tax and accounting purposes).
- The need to resolve disputes or enforce our agreements.
9. Your Rights and Choices
Depending on your location and subject to applicable law, you may have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal information we hold about you.
- Right to Rectification: You can request that we correct any inaccurate or incomplete data we hold about you.
- Right to Erasure (Right to be Forgotten): You can request the deletion of your personal data under certain conditions.
- Right to Restrict Processing: You can request that we limit the way we use your personal data.
- Right to Data Portability: You can request a copy of your data in a machine-readable format to transmit to another service.
- Right to Object: You can object to our processing of your personal data, particularly for direct marketing purposes.
- Right to Withdraw Consent: Where we rely on consent as our legal basis for processing, you have the right to withdraw that consent at any time.
9.2. How to Exercise Your Rights: To exercise any of the rights described above, or if you have other questions or requests regarding your data, please contact us at [email protected]. We will respond to your request in accordance with applicable law.
10. Disclaimer Regarding Gambling
ScratchAll is a free-to-play game for entertainment purposes only. The Service does not offer real money gambling or an opportunity to win real money or prizes. Any in-game currencies or items purchased or won have no real-world cash value. Past success with the game or its features has no relationship with future success at real money gambling.
11. Contact Information
If you have any questions, comments, or concerns about this Privacy Policy or our data practices, please contact our privacy team:
ScratchAll
Email: [email protected]
12. Policy Updates
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Policy. We may also provide notice through the Service's interface or via email. You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service after any changes constitutes your acceptance of the new Policy.