Privacy Policy

Last updated: 30 July 2026

1. Controller

Controller of personal data: Ivan Stabronik (JDG), ul. Lęborska 22/30, 80-387 Gdańsk, Poland. NIP: 5842849170. REGON: 528024820. Contact: stabronik.i@gmail.com, +48 572 569 580.

A Data Protection Officer has not been appointed.

Supervisory authority: President of the Personal Data Protection Office (UODO), https://uodo.gov.pl.

2. What we process

Depending on how you use Currency Clash, we may process:

• Payment-related data received from Stripe (for example truncated payment identifiers, payment status, currency, amount, package size, payer country, and email if provided to Stripe).

• Technical data such as IP address, browser/user-agent, cookies or similar identifiers needed for access entitlement, security, and abuse prevention.

• Consent records (immediate-performance consent, timestamps, policy versions).

• Referral codes and attribution between referrer and referred supporter identifiers.

• Optional contact email if used for access recovery or support.

We do not ask you to create a password account. Exact live vote totals are shown only after validated access following a successful payment.

3. Purposes and legal bases (GDPR)

• Performing the contract / taking steps at your request (Art. 6(1)(b)): recording purchased votes, unlocking exact results, operating referrals tied to payments, customer support about a purchase.

• Legal obligation (Art. 6(1)(c)): accounting, tax, and dispute-related retention where required.

• Legitimate interests (Art. 6(1)(f)): securing the Service, preventing fraud/abuse, understanding aggregate traffic necessary to keep the Service reliable — balanced against your rights.

• Consent (Art. 6(1)(a)): where we rely on consent (for example non-essential cookies/analytics or marketing, if introduced). Consent can be withdrawn without affecting prior lawful processing.

4. Recipients and processors

We use service providers acting as processors or independent controllers, including:

• Stripe — payment processing.

• Neon — database hosting.

• Vercel — application hosting.

• Cloudflare — DNS / edge networking for the domain.

These providers process data under their terms and, where they act as processors for us, under data-processing terms. Some providers may process data outside the EEA with appropriate transfer safeguards (for example Standard Contractual Clauses).

5. Retention

Payment, vote, consent, and entitlement records are retained for the life of the Service plus the period required for accounting, tax, and dispute handling under Polish law (typically up to 5 years after the end of the relevant tax year, unless a longer period is required).

Signed access cookies are short-lived (about 30 days). Permanent exact-score access is recorded server-side after payment and can be restored via a one-time email magic link without storing your password.

Referral attribution records are retained while needed to operate the scoreboard and prevent abuse, then deleted or anonymised when no longer necessary.

Technical logs are retained for up to 90 days unless needed longer for security investigations.

6. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction, portability, and objection to certain processing. Where processing is based on consent, you may withdraw consent.

You may lodge a complaint with your local supervisory authority (in Poland: UODO).

To exercise rights, contact stabronik.i@gmail.com. We may need to verify your request.

7. Cookies and similar technologies

We use strictly necessary cookies/storage for security and access entitlement after payment (for example a signed access cookie and a short-lived checkout-binding cookie).

If we later add analytics or marketing cookies, we will present required information and obtain consent where legally required before non-essential cookies are set.

8. Children

The Service is not directed at children. You must be at least 18 (or the higher age of majority where you live) to make a purchase. Do not use Currency Clash if you are below the digital consent age applicable in your country for information-society services.

9. Changes

We may update this Privacy Policy when our processing, processors, or legal requirements change. The “Last updated” date at the top will change accordingly. Material changes will be highlighted on this page where appropriate.

Back to the race