Privacy Policy
Last updated: October 31, 2026
What we collect
- Account: username, password (stored only as a secure hash), birth year, and email if you give it. If you sign in with Google, we receive your name, email address and a Google account ID from Google; we never see your Google password.
- Gameplay: balances, bets, items and history, so the game works and stays fair.
- Purchases: what you bought and when. Card details are handled by our payment provider (Stripe) and never reach us.
- Technical: IP address and basic logs for security and to stop abuse. When an account is created we keep a one-way fingerprint of the connection (not the address itself), so invite rewards can't be farmed with spare accounts.
- Ads: if ads are on, our ad partner (Google) may use cookies or similar technology. See their policies.
- Visitor stats: we use Cloudflare Web Analytics, which counts visits without cookies and without tracking you across other sites.
- Cookies: we use a small number of necessary cookies to keep you signed in and to complete Google sign-in safely.
How we use it
To run the game, process purchases, prevent fraud and cheating, provide support, and meet legal obligations. We don't sell your personal data.
Sharing
Only with service providers that help us run Lucky Brass (hosting, payments, sign-in, visitor stats, ads), or when the law requires it.
Keeping and deleting
We keep your data while your account is open and as long as the law requires afterwards. Email [email protected] to access, correct, or delete your data.
Your rights
Depending on where you live (for example under GDPR or CCPA), you may have rights to access, correct, delete, or object to processing of your data. Contact [email protected].
Children
Lucky Brass is for adults only. We don't knowingly collect data from anyone under 18.