Effective: August 25, 2026
This policy explains how Andrew Suiter (“we”) handles information for Honest Leaderboard Game.
We handle your email address for sign-in; an account ID; your public display name and aggregate USD leaderboard total; purchase product, price, currency, conversion, timestamps, and financial state; hashed transaction identifiers; reports and blocks; and limited security and diagnostic logs. Apple or Google processes your payment details. We do not receive or store your card or bank details.
We use this information to run the leaderboard, verify purchases once, apply exchange rates, keep totals consistent with store records, prevent fraud and abuse, moderate public names, provide support, comply with law, and keep the service reliable.
Your display name and aggregate USD total are visible worldwide. Your email, purchase records, reports, and blocks are not public.
We use Apple App Store, Google Play, Supabase, Cloudflare, Twelve Data, and Expo/EAS. They process information under their own terms. Non-USD quotes identify and link to Twelve Data. Its indicative rate is used only to calculate the USD leaderboard amount shown before purchase. Information may be processed outside your country.
Account data is kept while your account is active. Short-lived FX quotes and abuse counters are routinely deleted. A minimized completed-purchase ledger supports exact-once accounting, fraud prevention, disputes, and legal obligations. It contains the product, original amount and currency, USD amount, timestamps, platform and environment, financial state, and a hashed transaction identifier—not a raw receipt, purchase token, email, card detail, or complete store response. When you delete your account, your public name is replaced with “Deleted player,” ordinary app access ends, public block state is cleared, and private block and report relationships enter bounded deletion. Deletion itself does not change an amount or rank already counted; a later authoritative store correction may change the anonymous amount and resulting rank. A temporary private mapping used to redact older leaderboard snapshots is removed after replacement snapshots are published. A separate private link needed for an unresolved store payment may remain only until settlement or the final profile and sign-in purge, targeted no later than the recorded 31-day deadline. The anonymous monthly fact and minimized financial record do not retain the original account ID after that purge. A playerless quote reference may remain until bounded cleanup after the 62-day Apple or 61-day Google acceptance-retention boundary. Minimized completed rows may be retained longer while the documented accounting, dispute, fraud-prevention, or legal need applies. They are private and cannot restore your profile. The app may protect a limited deletion-retrieval authorization on your device while we keep only its bound hash so that device can retrieve the same deletion result. It cannot restore the account, read a profile, or authorize a payment. We attempt to disable sign-in and refresh during deletion; an automated queue retries temporary provider failures while the deleted account remains unable to use ordinary app routes. Limited device-held recovery authorizations and server hashes may exist only to finish unresolved receipts bound to their exact quote, product, platform, and store proof. They cannot create another credit or restore the account. Finalized state may remain for up to 24 hours to replay that exact response safely and never beyond the 31-day deadline.
You may change your public name or delete your account in the app. You may also contact us to request access, correction, deletion, or another right available where you live. For an off-app deletion request, we send a short-lived, one-use email code through our ordinary sign-in provider to the email address already on the account; an email sender address alone is not proof of ownership.
The service is not directed to children below the minimum age to consent to online services where they live. A parent or guardian who believes a child provided information should contact us.
We use technical and organizational safeguards, but no online service is risk-free. We may update this policy and will post the new effective date here.
Andrew Suiter
andrew@honestleaderboardgame.com