Lucky Ladies Privacy Policy

1. Information We Collect

When you use Lucky Ladies, we collect the following categories of information so we can run the service, prevent fraud, and process redemptions:

Information you provide

• Account details: name, email address, date of birth, and password (passwords are stored hashed by our identity provider, Clerk).
• Identity verification: when required for higher-tier redemptions, we may collect a government-issued ID number, photo of an ID, and selfie used to confirm a match. We use KYC-grade processors and only retain what is necessary to satisfy our compliance obligations.
• Payment + redemption details: the destination address for redemptions (e.g. Cash App tag, Chime account, etc.). We do NOT store full card numbers; payment processing is delegated to PCI-compliant third parties.
• Support correspondence: messages you send us via the in-app chat, email, or support form.

Information collected automatically

• Device and browser data: IP address, device type, OS, browser, screen size, referring URL, and crash reports.
• Usage data: pages visited, features used, session length, interaction events, and operator accounts you connect.
• Cookies and similar:see “Cookies” below.

2. How We Use Your Information

We use the information described above to:

• Operate Lucky Ladies, including creating your account, processing redemptions, and connecting to upstream operator platforms.
• Verify your identity and age, and prevent fraud, money laundering, and account takeovers.
• Provide customer support and respond to your questions.
• Send service-related notifications (e.g. successful redemption, password reset, account-security alerts).
• Send promotional communications when you have opted in. You can unsubscribe at any time.
• Improve Lucky Ladies — analyzing aggregate behavior, debugging issues, and prioritizing features.
• Comply with legal obligations and respond to lawful requests from law enforcement or regulators.

3. Cookies and Similar Technologies

Lucky Ladies uses cookies and similar technologies (including localStorage and session tokens) to keep you signed in, remember your preferences, and understand how the website is used. We use:

• Strictly necessary cookies — required to log you in and keep your session active. Disabling these will prevent the site from working.
• Analytics cookies — help us understand which features are used and where users encounter problems.
• Performance cookies — used by our hosting and monitoring providers to keep the site fast and reliable.

You can control cookies through your browser settings. Most browsers let you block or delete cookies; doing so may break parts of the service that depend on them.

4. How We Share Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have never done either. We share it only with the third parties needed to run Lucky Ladies, and only as much as each needs to do its job:

• Identity and authentication providers — Clerk handles login, signup, and password storage on our behalf.
• Operator platforms — when you connect an existing operator account or create one through us, we exchange the minimum data needed (e.g. username, balance) with that operator.
• Payment processor — Tierlock processes purchases. Card details go to Tierlock directly and never reach us; we receive only the amount, a reference, and whether it succeeded.
• Redemption processors — used to pay you. They receive your redemption destination, the amount, and a reference identifier.
• Email delivery — Resend sends account and promotional email on our behalf and processes your email address for that purpose only.
• Hosting and infrastructure — Vercel hosts the website; Neon hosts our database. They process data on our behalf subject to their security and data-processing agreements.
• Analytics and crash-reporting — when enabled, to improve the service.
• Legal and regulatory — when required by law, court order, or to protect our rights or the safety of others.

5. How Long We Keep Information

We retain your information for as long as your Lucky Ladies account is active and for a reasonable period afterward to comply with our legal and regulatory obligations (anti-money-laundering rules, record-keeping requirements, dispute windows, etc.).

When you ask us to delete your account we delete or anonymize your personal information except where we are required to keep it (e.g. completed transaction records). Backups are purged on a rolling schedule.

6. Your Rights and Choices

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Delete your account and the associated personal data, subject to legal retention obligations.
• Opt out of promotional communications.
• Object to or restrict certain processing of your information.
• Receive a copy of your information in a portable format.

To exercise any of these rights, contact us using the details in section 12. We may need to verify your identity before acting on your request, and we will answer within 45 days — or tell you why we need longer, which the law allows once.

7. State Privacy Rights

Several states give residents specific rights over their personal information. We extend the same handling to everyone, wherever you live, rather than operating one process per state.

California

If you are a California resident, the CCPA as amended by the CPRA gives you the right to know what personal information we collect, the categories of sources it comes from, the purposes we use it for, and the categories of third parties we disclose it to — all of which is set out in sections 1, 2 and 4 above. You may also request a copy of that information, ask us to correct it, and ask us to delete it.

We do not sell personal information and we do not share it for cross-context behavioral advertising, so there is no opt-out to exercise — but you may still tell us not to, and we will record it. We do not use personal information to make decisions that produce legal or similarly significant effects about you, and we do not knowingly collect the personal information of anyone under 18.

We will never deny you service, charge you a different price, or give you a lesser experience for exercising any of these rights. An authorized agent may make a request on your behalf with written proof of that authority.

Other states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana and other states with comprehensive privacy laws have comparable rights to access, correct, delete, and obtain a portable copy of their information, and to appeal a refusal. Use the same route in section 12. If we decline a request, we will tell you why, and you may reply asking us to reconsider; we will answer that appeal in writing.

8. Marketing and Do Not Track

Account and transaction email — a redemption result, a password reset, a security alert — is part of running your account, and you cannot unsubscribe from it while the account is open.

Promotional email is separate. Every one carries an unsubscribe link, you can ask support to take you off the list at any time, and opting out never affects your account, your balance, or your redemptions.

Browsers can send a “Do Not Track” signal, and there is no industry standard for honouring it. We do not track you across other companies’ websites in the first place, so the signal changes nothing about what we do. We also honour the Global Privacy Control signal as an opt-out request where the law requires it.

9. How We Protect Your Information

We use reasonable technical and organizational measures to protect your information — including encryption in transit and at rest for sensitive fields (such as stored operator credentials), access controls limiting who can see what, and routine monitoring for unauthorized access. No system is perfectly secure; if a breach affects you, we will notify you in accordance with applicable law.

10. Age Requirement

Lucky Ladies is for adults — 18 and over, and 21 where the law of your state requires it. We do not knowingly collect personal information from anyone under 18. If you believe a minor has given us personal information, contact us and we will delete it and close the account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make a material change we will revise the “Effective Date” at the top of this page and, where appropriate, notify you in the app or by email.

12. Contact Us

Questions, privacy requests, or concerns? Use the chat icon on luckyladiesarcade.com to reach support, or email Lisa Kara at lisakararealestate@gmail.com. Put “Privacy request” in the subject and tell us which right you are exercising and the email your account uses. If you would rather write to us, ask support for our mailing address and we will send it the same day.