Privacy Policy

ShowYourLove ("ShowYourLove," "we," "us") is operated by an individual developer, not a registered company. This policy explains what data we collect when you use the ShowYourLove website and mobile app (together, the "Service"), why we collect it, and what rights you have over it.

If anything here is unclear, email us at support@showyourluv.com — a real inbox, checked by the person who built this.

1. Information we collect

We collect only what's needed to run the game, your account, and billing:

• Account information: name, email address, and a securely hashed password if you sign up with email/password; or your name, email, and profile photo if you sign in with Google. We never see or store your Google password.
• Gameplay data: games you create or join, tap counts and scores, win/loss results, and who you've invited to play — this is the core data the product runs on.
• Billing information: which plan you're on and your remaining plays. Payments are processed by Stripe — we do not receive or store your full card number. Stripe shares with us only what's needed to identify your subscription (a customer ID, subscription status, and renewal date).
• Device push token (mobile app only): if you grant notification permission in the ShowYourLove app, we store a device token so we can send you alerts — for example, when someone invites you to a battle.
• Technical & usage data: IP address, browser or device type, and request logs, collected automatically by our hosting providers (Vercel and Render) for security and to keep the service running. We do not run any third-party analytics or advertising trackers on ShowYourLove today.

2. Cookies

We use one essential session cookie (set by our authentication system, NextAuth) to keep you signed in. It's required for the Service to function — there's no cookie consent banner because we don't set any non-essential, advertising, or cross-site tracking cookies. If that ever changes, this policy — and the site — will be updated to ask for your consent first.

3. How we use your information

• To create and run your account, and let you play battles.
• To process payments and keep your plan/play balance accurate.
• To send transactional email — battle invites, "someone joined your game" alerts, and occasional re-engagement reminders if you've gone quiet (capped, and it stops once you play again).
• To respond when you contact support.
• To detect abuse, prevent fraud, and keep the Service secure.

We do not sell your personal information, to anyone, ever.

4. Who we share data with

We share the minimum data necessary with the vendors that make the Service work. Each only receives what it needs to do its job:

• Stripe — payment processing.
• Resend — sending transactional and reminder emails.
• Neon — our PostgreSQL database host, where account and gameplay data lives.
• Vercel — hosting for the website.
• Render — hosting for the real-time game server.
• Google — if you choose to sign in with Google.
• Apple / Google (push notifications) — APNs and FCM deliver push notifications to the mobile app, using only your device token.

We don't share your data with data brokers, advertisers, or anyone else outside this list, and we only ever disclose it beyond this list if required by law.

5. Data retention

We keep your account and gameplay data for as long as your account is active. If you delete your account, we delete your personal data within a reasonable period, except where we're required to keep billing records for legal/tax purposes, or where data has already been anonymized/aggregated (e.g. general usage stats that no longer identify you).

6. Your rights

If you're in the European Economic Area or UK (GDPR)

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Receive a copy of your data in a portable format.
• Object to or restrict certain processing.
• Lodge a complaint with your local data protection authority.

Our legal basis for processing your data is: performance of a contract (running your account and games), legitimate interest (security, fraud prevention, improving the Service), and, for reminder emails, your ongoing use of the Service — you can ask us to stop these at any time.

If you're a California resident (CCPA/CPRA)

You have the right to:

• Know what personal information we collect and why.
• Request deletion of your personal information.
• Know that we do not sell or share your personal information for cross-context advertising — because we don't.
• Not be discriminated against for exercising these rights.

To exercise any of the rights above, email support@showyourluv.com — we'll respond within 30 days.

7. Children's privacy

ShowYourLove is not directed at children under 13 (or the minimum age required by your country's law), and we do not knowingly collect personal information from children under that age. If you believe a child has created an account, contact us and we'll delete it.

8. International data transfers

Our hosting and email providers (Vercel, Render, Neon, Resend, Stripe) may process data in the United States or other countries outside your own. Where required, these providers rely on recognized transfer mechanisms such as Standard Contractual Clauses to protect data moved internationally.

9. Security

Passwords are stored as salted hashes, never in plain text. Data in transit is encrypted (HTTPS/TLS). No system is ever 100% secure, but we take reasonable, industry-standard measures to protect your information and will notify affected users if we ever discover a breach involving personal data.

10. Changes to this policy

If we make material changes to this policy, we'll update the "Last updated" date above and, for significant changes, notify active users by email.

11. Contact us

Questions, requests, or concerns about your data: support@showyourluv.com