Last updated · 2026-07-16 · DRAFT
Privacy Policy
Data controller
For the purposes of this policy, the "data controller" is Itemsism OÜ, a company registered in Estonia under Registry code 17363244, with its registered office at Tuulemäe tn 5, Lasnamäe linnaosa district, Tallinn 11411, Estonia.
For any privacy question, or to exercise your data-protection rights (access, correction, deletion, portability, objection), contact us at info@itemsismou.com.
What we collect
- Account information — email, display name, country code, and (if you provide it) date of birth. Created via Clerk when you sign up.
- Gameplay data — game sessions, bet amounts, outcomes, wallet balance, transaction history. Stored to run the Service and provide your account statement.
- Purchase records — for coin pack purchases, we receive a tokenized record from Paddle (transaction id, amount, status). We do not see or store your card details.
How we use it
- To operate and provide the Service to you.
- To verify eligibility (21+ and geographic restrictions).
- To process optional coin purchases via our payment processor.
- To detect and prevent fraud or abuse.
- We do not sell or rent your personal data to third parties.
Third-party processors
Operating Aurelia requires a small set of trusted service providers:
- Clerk — authentication and identity management.
- Paddle — Merchant of Record for coin pack purchases. Card details are collected and stored by Paddle, not by Itemsism OÜ.
- Neon — database hosting (Postgres).
- Vercel — application hosting and edge network.
Each of these processors has its own privacy practices governing how they handle data we share with them.
Cookies
We use first-party cookies set by Clerk to keep you signed in. We do not use third-party advertising cookies.
Your rights
Depending on your jurisdiction (e.g., GDPR in the EU, CCPA in California), you may have rights to access, correct, delete, or export your personal data. To exercise any of these rights, contact us at info@itemsismou.com.
Data retention
We retain account and gameplay data for as long as your account is active. Account deletion requests are honored within 30 days, subject to any legal record-keeping obligations (e.g., tax law for purchase records).
Children
Aurelia is a 21+ service. We do not knowingly collect data from anyone under 21. If you believe an underage user has registered, please contact us so we can investigate and remove the account.
Changes
We may update this policy from time to time. Material changes will be communicated by email or via the Service.
DRAFT — placeholder text pending counsel review.