Privacy Policy

Last Updated: April 2, 2026 | Game: Market Masters | Website: mmasters.io

Plain English Summary We collect your email, username, and gameplay data to run your account and improve the game. We use Supabase (database/login), Cloudflare (security/analytics), and Railway (hosting) to operate the service. We do not sell your data. California residents have full CCPA/CPRA rights. Contact us at marketmasterscontactsupport@gmail.com.

1. Definitions

"Personal Information" means any information that can identify you directly (e.g. your email address) or indirectly (e.g. a unique player ID combined with gameplay data).
"Services" means the Market Masters game, the mmasters.io website, and any related features or content we provide.
"Processing" means any operation performed on Personal Information — including collecting, storing, using, sharing, or deleting it.
"Third-Party Providers" means companies we work with to operate the Services (e.g. Supabase, Cloudflare, Railway).

2. Information We Collect

We only collect information we actually need.

A. Information You Provide

Account Registration: username, email, hashed password (never stored in plain text).
Support & Communications: content of message and email.

B. Information Collected Automatically

Usage Data: in-game actions, session length, features used, game progress.
Device & Technical Data: browser type, OS, device type, IP address, language settings.
Log Data: IP addresses, request timestamps, HTTP response codes, error information from Cloudflare/Railway.

C. Information from Third-Party Providers

Supabase — database, auth, backend. Privacy Policy
Cloudflare — DNS, CDN, security, analytics. No fingerprinting or cookies for analytics. Privacy Policy
Railway — hosting, server-side logs. Privacy Policy

Each provider is bound by data processing agreements.

3. How We Use Your Information

We use your information to:

Operate your account and save game progress
Diagnose issues and improve the Services
Respond to support requests
Detect fraud and cheating
Send service-related communications
Comply with applicable laws

We do not use your information for targeted advertising and we do not sell your data.

4. Legal Basis for Processing (California / CCPA / CPRA)

Contractual Necessity: Processing required to provide the Services you signed up for.
Legitimate Interests: Processing necessary for our legitimate business interests, such as improving the game and preventing fraud.
Legal Obligation: Processing required to comply with applicable laws and regulations.
Consent: Processing based on your explicit consent where required by law.

5. Your Privacy Rights

Right to Know: You can request what Personal Information we have collected about you.
Right to Delete: You can request that we delete your Personal Information.
Right to Correct: You can request that we correct inaccurate Personal Information.
Right to Opt Out: We do not sell your data, so there is nothing to opt out of.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, contact marketmasterscontactsupport@gmail.com. We will respond within 45 days per CCPA requirements.

We may share your information in the following circumstances:

Third-Party Service Providers: As described in Section 2C, to operate the Services.
Legal Requirements: When required by law, subpoena, or legal process.
Protection of Rights: To protect the rights, property, or safety of Market Masters, our users, or others.
Business Transfers: In connection with a merger, acquisition, or sale of assets.

We do not sell, rent, or trade your Personal Information to any third parties.

7. Data Retention

Account data: Retained until you request deletion.
Server logs: Retained for up to 90 days.
Support correspondence: Retained for up to 2 years.

To request deletion of your data, email marketmasterscontactsupport@gmail.com. Deletion requests will be completed within 30 days.

8. Data Security

We take reasonable measures to protect your Personal Information, including:

HTTPS/TLS encryption for all data in transit
Passwords hashed and salted via Supabase Auth
Restricted access to production systems
Cloudflare DDoS protection

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.

9. Children's Privacy

The Services are not directed at children under the age of 13. We do not knowingly collect Personal Information from children under 13. If we discover that we have collected Personal Information from a child under 13, we will delete it promptly.

If you believe a child under 13 has provided us with Personal Information, please contact us at marketmasterscontactsupport@gmail.com.

10. International Users

The Services are operated in the United States. If you are accessing the Services from outside the United States, your data will be transferred to and processed in the United States.

11. Changes to This Policy

When we make changes to this Privacy Policy, we will:

Post the updated policy with a new "Last Updated" date
Send an email notification to registered users
Display a notice on mmasters.io for 30 days

12. Contact Us

Email: marketmasterscontactsupport@gmail.com
Website: mmasters.io
Response time: 5 business days