Privacy Policy

Information we collect

Information you give us. Your email address, and — if you choose to add them — a phone number, display name, username (handle), and profile picture. If you sign up with a password, we store a securely hashed version of it (never the password itself).

Information from signing in with Google or Apple. If you use "Sign in with Google" or "Sign in with Apple", we receive your name, email address, and (from Google) profile picture to create or match your account. We do not receive your Google or Apple password. If you set up a passkey, your device keeps the private key and we store only the public half needed to recognise it.

Information created as you play. The Shakes you make and join, your side and stakes, outcomes, Coin balance and transactions, rating, streaks, disputes, friends, and titles.

Private predictions. "Private" describes who can find and join a prediction, not how it is stored. A Private prediction is not listed in Public Predictions or the Ledger and is not indexed or shared beyond the two people in it — but its statement is held on our servers in the same form as any other Shake, because the service has to display it, screen it, and settle coins against it. It is not end-to-end encrypted, and we do not present it as private from us.

In practice that means its statement goes through the same automated content screening as a public one before the Shake is created (see "AI processing" under "Who we share it with"), and can be read by authorised platform staff when a Shake is reported, when an account is investigated for abuse, and where we are required to by law. We do not read Private predictions routinely, and no feature in the product shows one to anyone other than its two participants and, in those circumstances, our staff.

Information from notifications. If you turn notifications on, your browser or device gives us a push token — an address for that one browser or app install, which does not identify you by name. We use it only to deliver notifications, and it is removed when you turn notifications off or delete your account.

Information collected automatically. Your IP address, and basic device and browser information, collected to keep you signed in, protect against bots and abuse, and keep the service running. We use a session cookie to keep you logged in and local browser storage for preferences (such as your theme). If you answer the Pick of the day before creating an account, a cookie holding a random number (it names no one) lets your device count once, and moves your answer to your account when you log in. When something goes wrong, an error report is recorded — the action that failed, the error itself, and basic device and browser information — so we can find and fix it.

Usage analytics. We record which screens you open, what you tap, and how long pages take to load, together with your device type, app version and rough location (country, from your IP address). This tells us which parts of the game work, which confuse people, and when something has become slow. Analytics events are tied to your account so we can follow one person's path through the app; they are not used for advertising and are not sold. We do not record session replays.

What other players can see

ShakeOnIt is played against other people, so some of your information is shown to them. Your username, display name, profile picture, rating, dispute count, status tier and any title you equip appear next to everything you do in the game: the Shakes you post and join, your public profile page, and the Leaderboard.

The Leaderboard ranks players by their results — coins won and lost, win rate, current and best winning streaks, biggest single win, how many Shakes they have posted and joined, and how many friends they have invited — overall and by category. Your results are sent to our servers as you play (that is how a Shake is settled) and, when they rank among the best, are listed there under your username. The Leaderboard and public profile pages can be seen by anyone with the link, signed in or not. Your email address, phone number and coin balance are never shown to other players, and a Private Shake's statement is visible only to the two people in it, though its result still counts toward your standings.

You agree to this when you sign up: the sign-in screen states that by continuing you accept the Terms and this policy, and says what other players will see. If you would rather not be recognisable, play under a username and display name that do not identify you — both can be changed at any time on the Account page — or delete your account, which removes you from the Leaderboard and takes down your profile page.

How we use your information

• To create and run your account and sign you in.
• To operate the game — Shakes, Coins, ratings, disputes, and settlements.
• To write the winner rule for a Shake, help check the outcome, and screen what people write for abuse — all with the help of an AI provider.
• To review a Shake by hand when the automated check cannot decide the outcome, or when someone rejects the result and asks for a person to look at it. This means a member of our team reads the Shake, its winner rule, the reasoning of the automated check, and the messages both sides have written about it.
• To send you transactional messages, such as login codes, verification, and results.
• To detect and prevent fraud, bots, cheating, and abuse.
• To maintain, secure, and improve the platform.
• To comply with legal obligations and enforce our Terms.

Who we share it with

We do not sell your personal information. We share it only with service providers who process it on our behalf to run the platform:

• Email & verification — to send login codes and notifications.
• SMS — to verify a phone number, if you add one.
• Google — if you choose to sign in with Google.
• AI processing — the text you write in a Shake or a dispute is sent to our AI provider to draft the winner rule, help check the outcome, and screen for abusive content. Under our provider's terms it is not used to train their models.
• Push notifications — Apple and Google deliver notifications to your device using the push token above.
• Error monitoring — diagnostic reports when something breaks, so we can fix it.
• Product analytics — the usage and page-speed events described above, processed on our behalf and stored in the European Union.
• Bot protection — a security check at signup that receives your IP address.
• Hosting & database — the infrastructure that stores your data and serves the app.

We may also disclose information where required by law, to protect our rights or users, or as part of a business transfer.

How long we keep it

We keep your account information for as long as your account exists. Some records have shorter lives and are removed automatically:

• Login and verification codes — deleted 7 days after they expire.
• Phone-verification send records — deleted after 30 days.
• Text refused by our content screen — kept for 90 days so repeated abuse can be recognised, then deleted.
• Notifications in your inbox — deleted after 12 months.
• Error reports and usage analytics — held by the providers above for no longer than 12 months.
• Push tokens — removed when you turn notifications off or delete your account.

Shakes, Handshakes, outcomes, ratings and the Coin ledger are kept for as long as either player's account exists, because each one is also the other player's record and the audit trail for their balance.

When you delete your account, your email, phone number, name, username, profile picture, passkeys and push tokens are erased immediately. Shakes you played against other people are kept but stripped of anything that identifies you. We may retain a limited record for longer where the law requires it, to resolve an open dispute, or to prevent fraud and abuse — held only as long as necessary and separated from your identity.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, or to object to or restrict certain processing. You can do most of this yourself in the app: update your details on the Account page, download a copy of everything we hold about you with "Download my data", or delete your account. To make any other request, contact us using the details below.

International transfers

We and our service providers may process your information in countries other than your own. Where we do, we take steps to ensure it remains protected in line with this policy.

Children

ShakeOnIt is for adults only and is not intended for anyone under 18. You must be at least 18 years old (and old enough in your jurisdiction to enter into this kind of agreement) to use the platform. We do not knowingly collect information from anyone under 18.

Security

We use reasonable technical and organizational measures to protect your information, including hashing passwords and encrypting data in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you in the app.

Contact

Questions or requests about your privacy? Reach us at support@shakeonit.club or through the in-app Support page.