Last updated: June 2026
Privacy Policy
1. Data Controller
GTA6 Rewards. Contact: support@gta6rewards.com.
2. What We Collect
We collect: your email address (account creation), username and country (profile setup), activity data (check-in timestamps, spin results, ticket purchases, points history), device/browser info for push notifications, and usage analytics. We do not collect payment card data.
3. Why We Process It & Legal Basis
We process your data to: operate your account and deliver the service (legal basis: contract performance); send transactional emails such as magic links and draw results (contract); send daily push notifications if consented (consent); analyse platform usage to improve features (legitimate interests); comply with legal obligations (legal obligation).
4. Data Processors
Sub-processors contractually bound to GDPR-compliant standards: Supabase Inc. (database & auth — US, SCCs); Vercel Inc. (hosting & CDN — US, SCCs); Cloudflare Inc. (CDN, WAF, DDoS — US, SCCs); Resend Inc. (email — US, SCCs); OneSignal Inc. (push — US, SCCs); PostHog Inc. (analytics — EU servers available, SCCs).
5. Your Rights
Depending on your jurisdiction, you may have the right to: access, rectify, erase, restrict, or port your data; object to certain processing; withdraw consent at any time. Contact support@gta6rewards.com to exercise your rights. You may also lodge a complaint with your local data protection authority.
6. Cookies
We use essential cookies for authentication and language preferences, and analytics cookies (PostHog). See our Cookie Policy for details.
7. Data Retention
Account data is retained while your account is active. After deletion, data is purged within 30 days except where legal retention obligations apply. Analytics data is retained for 12 months.
8. Contact & Complaints
For privacy questions or to exercise your rights: support@gta6rewards.com. You may also contact your national data protection authority.