Privacy Policy

Last updated: June 6, 2026

1. Data We Collect

WhatsApp number — used for OTP authentication and optional notifications.
Display name + city (optional) — shown on your profile + the leaderboard.
Profile photo + session cover — optional; shown publicly if your profile is Public.
Gameplay stats — matches, win/loss/draw, points, tier — recorded automatically as you play.
Activity logs — events like logins, session creation, tier-ups are stored for troubleshooting + monitoring (30-day retention).

2. How We Use Your Data

App operations: matchmaking, stats, leaderboard, notifications.
Notifications: session invites, H-1 reminders, match results, tier-ups (per your preferences in Settings).
Security: detecting abuse via rate-limit + log review.

3. Data We Don't Collect

GPS location, address book contacts, payment data, gallery photos (except what you upload manually).

4. Who We Share Data With

Fonnte (WhatsApp gateway) — only your WA number + notification message body.
Web Push providers (FCM/APNs) — the push endpoint doesn't directly identify the user.
We do not sell data to advertisers.

5. Your Rights

Access: view all your data via the Profile page.
Correction: edit your profile + privacy settings any time.
Delete account: email support@carsel.club to request deletion (carried out within 14 days).
Withdraw consent: disable WA notifications in Settings.

6. Retention

Account data is kept while the account is active. Activity logs are automatically deleted after 30 days. Database backups are kept 14 days (local) + remote per internal configuration.

7. Minors

Carsel Club is intended for users 17 and older. We do not knowingly collect data from children under 17.

8. Contact

This document is a minimum viable version. A full version with the legal basis (Indonesian Personal Data Protection Law, UU PDP 27/2022) will be published before the full public launch.