Legal

Privacy Policy

Last updated: 27 May 2026 Effective: 27 May 2026

This Privacy Policy describes how SMASH & DASH CLUB ("we", "us", or "our") collects, uses, and shares information about you when you use our web application and mobile application (collectively, the "Service").

By using our Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect the following categories of information:

2. How We Use Your Information

We use the information we collect to:

We do not sell your personal data to third parties. We do not use your data for advertising purposes.

3. Data Sharing

We may share your information in the following circumstances:

4. Data Retention

We retain your account data and match history for as long as your account is active or as needed to provide the Service. If you request account deletion, we will remove your personal data within 30 days, except where retention is required by law.

5. Cookies

We use essential session cookies to maintain your authenticated session. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can control cookies through your browser settings.

6. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you become aware that a child under 13 has provided us with personal information, please contact us and we will take steps to remove that information.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, please contact us at support@smashdash.win.

8. Data Security

We implement industry-standard security measures including TLS encryption for data in transit, row-level security (RLS) policies in our database to enforce group data isolation, and OAuth 2.0 authentication to prevent password-based attacks. We regularly review our security practices.

9. Third-Party Services

Supabase — Database, authentication, and storage. See Supabase Privacy Policy.

Google Sign-In — OAuth authentication. See Google Privacy Policy.

Facebook Login — OAuth authentication. See Meta Privacy Policy.

Google Cloud Run — Application hosting. See Google Cloud Privacy Notice.

10. International Data Transfers

Your data may be processed and stored in servers located outside your country of residence, including Singapore and the United States. We ensure appropriate safeguards are in place for such transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitute acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: