Privacy Policy
Last updated: May 2026
This Privacy Policy describes how CasinoMass collects, uses, and protects personal information.
1. What we collect
Account information — email address, collected at signup. Used to authenticate your account and send transactional emails (magic-link login, billing receipts).
Usage data — page views, feature interactions, and export activity. Collected via PostHog analytics to improve the product. IP addresses are anonymised.
Payment information — handled by our payment processor (WhitePay). Payments are made in cryptocurrency (USDT and others). We do not store card numbers or wallet private keys — only the transaction reference, plan purchased, amount, and confirmation status.
Correction requests — if you submit a data correction, we record your account ID, the entity and field reported, and your suggestion. Used to process and track corrections.
API waitlist — if you join the waitlist, we store your email and the source (referrer) to notify you when API access opens.
2. How we use it
- To provide and maintain the Service
- To process payments and send billing communications
- To verify and improve data quality (correction requests)
- To analyse product usage and prioritise features
- To contact you about significant service changes
We do not sell your data to third parties.
3. Data retention
The following periods apply to each category of personal data:
| Data type | Retention period |
|---|---|
| Account data (email, role, settings) | Active life of account; removed within 30 days of deletion request |
| Session cookies | Expire after 12 hours of inactivity |
| Reveal history | Retained until account deletion |
| Export logs | 12 months; anonymised (userId removed) thereafter |
| Correction requests | 24 months; anonymised when the submitter deletes their account |
| Payment invoices | 7 years (statutory accounting / financial record-keeping requirement) |
| Audit logs | 24 months in identifiable form; retained in anonymised form thereafter |
| Analytics events (PostHog) | 12 months per PostHog's retention policy |
| Telegram support messages | 90 days after case resolution |
If you request account deletion, personal identifiers are removed within 30 days. Payment invoices are retained for 7 years as required by applicable accounting regulations regardless of account status. Anonymised aggregate data (export counts, revenue metrics) may be retained indefinitely for product analytics.
4. Third-party services
| Service | Purpose |
|---|---|
| Supabase | Authentication and database hosting |
| PostHog | Product analytics |
| WhitePay | Crypto payment processing |
| Vercel | Hosting and edge delivery |
Each provider has its own privacy policy governing data processed on their infrastructure.
5. Cookies
CasinoMass uses cookies for session management (authentication) and analytics (PostHog). No advertising or tracking cookies are used.
6. Your rights
You may request a copy of your personal data or ask for deletion by emailing Contact support. We will respond within 30 days.
7. Contact
For privacy enquiries: Contact support