MINORITY RULES

Effective Date: October 12, 2026

Minority Rules ("we", "us", "our") operates the Minority Rules web application and mobile application (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

1. Information We Collect

Account Information: When you create an account, we collect your email address and display name. Your password is hashed using bcrypt and is never stored in plain text.

Gameplay Data: We record your gameplay activity including rounds played, wins, losses, stakes, and experience points (XP).

Technical Data: We collect your IP address when you connect to the Service. We may also collect a device fingerprint (a non-identifying hash derived from your device characteristics) to help prevent fraud and multi-accounting. At signup, we record and retain a snapshot of your IP address, browser or app User-Agent, and device fingerprint on your account record. This signup snapshot is used to detect duplicate or coordinated account creation and is retained until your account is deleted. The app also creates a random identifier for its installation, used only to keep you signed in on that device; it is removed when you uninstall the app.

Diagnostic Data: If the app detects a connection problem — for example, the game stops updating, a reconnection goes unanswered, or a sign-in is refused — it sends us a short diagnostic report: the names and times of recent connection events (not their contents, your predictions or your messages), the app version, your device platform, the screen state the app was in, and its connection status. Reports are linked to your account so we can match them to a problem you report, are used only to find and fix problems with the Service, and are deleted automatically after 14 days, or when your account is deleted.

Communications: If you use in-game chat, your messages are stored temporarily for the duration of the game session. If you submit feedback, your feedback text and optional email are stored.

Sponsor Content Interactions: When you see sponsor branding in the Service (for example a sponsored leaderboard header, a home screen credit or a winner announcement) or tap a sponsor's link, we record that interaction against your account so we can count, for each sponsored week, how many players saw the sponsor's branding and how often its link was tapped.

Sponsor Portal Accounts: If you use the Sponsor Portal on behalf of a sponsor, we collect your name, email address, a hashed password, your two-factor authentication settings, and a log of the actions you take in the portal.

Sponsor Applications: If you apply to become a sponsor through our sponsor program page, we collect the business contact details you give us (your name, role, work email, company and website) and what you tell us about your plans, and use them only to review your application and contact you about it.

Beta Invite Requests: If you request an invite to the beta on our website, we store the email address you enter and use it only to send your invite (and, if you reply to it, to set up your access). We do not use it for marketing or share it with anyone.

2. How We Use Your Information

To provide and maintain the Service
To authenticate your identity and manage your account
To process in-game transactions (stakes, payouts, balance management)
To detect and prevent fraud, abuse, and multi-accounting
To send you transactional emails (account verification, password resets)
To improve the Service based on gameplay data and feedback
To diagnose and fix connection problems with the Service

3. Data Sharing

We do not sell your personal information. We may share limited data with:

Email service providers (for sending transactional emails via SMTP)
Hosting providers (DigitalOcean) for infrastructure
Identity verification provider (Stripe Identity) — required only when we make real cash prize payouts. During verification you provide government-issued ID and a biometric selfie directly to Stripe; Stripe processes this data in accordance with their privacy policy. We receive a verified first name, last name, and date of birth, which we store as a salted hash to prevent multi-account fraud. We do not receive or retain the ID document image or the selfie.
Payment provider (Stripe Payouts) — used to send real cash prize payments and to receive real-money deposits when applicable. Stripe handles all payment card and bank account information directly; we do not store payment credentials.
Sponsors — we share only weekly totals, such as how many players saw their branding, total views, link taps, and overall activity in the Service that week, with small counts withheld. We never share your name, email, account or any individual-level data with sponsors.
Law enforcement if required by law

4. Data Storage and Security

Your data is stored in a MongoDB database hosted on secure infrastructure. We use encryption in transit (HTTPS/TLS), hashed passwords (bcrypt), and JWT-based authentication to protect your account.

Survey responses are anonymized using per-survey salt and SHA-256 email hashing — no plaintext email is stored with survey data.

5. Cookies and Local Storage

The Service uses browser localStorage to store your authentication token for session persistence. We do not use third-party tracking cookies or advertising cookies.

6. Your Rights

Access: You can view your account data through the in-app profile screen.
Correction: You can update your password through the app.
Deletion: You can request account deletion by contacting us. We will delete your account and associated personal data.

7. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the Service or by email.

9. Contact Us

If you have questions about this Privacy Policy or wish to request account deletion, please contact us at [email protected].

Back to Minority Rules