Payment privacy notice
Effective September 29, 2026. This notice describes the coin purchase feature.
We use your account ID and email to associate checkout with your account. Our purchase records contain order and Stripe transaction references, the purchased pack, payment amount and currency, purchase and refund dates, purchase-policy version, coin use, and refund or dispute status. Supabase stores these records. They support delivery, purchase history, fraud prevention, refunds, and accounting.
Stripe collects payment and billing information directly through its hosted checkout and handles transaction-related communications. We do not store your full card number or card security code. See Stripe’s privacy policy and the terms displayed at checkout.
Cloudflare hosts the purchase endpoints. Its Turnstile verification checks for automated abuse. Verification tokens and, when available, the connecting IP address are sent to Cloudflare for verification. We do not add card details or secret keys to application logs.
We retain purchase records needed for service, refunds, disputes, security, accounting, and applicable recordkeeping obligations. Contact support@squareminigames.com for payment-data questions or access/deletion requests. Records required for applicable obligations may need to be retained.