Privacy & cookies

Information we process

House of REAP is responsible for the personal information processed through reap.win. We process account identifiers, contact and authentication information, linked public wallet addresses, transactions, game and reward activity, purchase and collectible records, support messages and campaign submissions. Social sign-in or connected platforms provide the profile information and permissions you authorize; we do not receive your social account password.

Technical information can include IP address, device/browser information, timestamps, session identifiers, referral attribution, page interactions and diagnostic events. Public profile information, leaderboards, chat and content you submit for public campaigns may be visible to other people. Do not include private information in public submissions.

How we use information

We use this information to operate accounts and payments, settle games, deliver purchases and rewards, verify qualifying activity, prevent fraud, resolve support requests, maintain security and improve the product. Where applicable, processing relies on performing our agreement with you, legal obligations, legitimate interests balanced against your rights, or consent.

Service messages concern your account, transactions or requested support. Promotional communications use the permissions required for your location and provide a way to unsubscribe. Withdrawing marketing permission does not stop necessary account or transaction messages.

Cookies, storage and analytics

Cookies and local storage support sign-in, security, language and interface preferences, referral attribution and transaction recovery. Analytics and diagnostic services help us understand usage and errors. Current integrations include Vercel Analytics, PostHog and Sentry. PostHog session replay is disabled in the current application configuration; selected interaction events and click/scroll heatmaps may still be collected.

You can manage browser cookies and storage through your browser settings. Blocking essential storage may prevent sign-in or recovery of an interrupted action. Browser controls are not a substitute for any consent choice required by applicable law.

Service providers and disclosure

We share information as necessary with hosting, database, authentication, wallet/payment, analytics, security, email and support providers. Current integrations include Supabase, Vercel, PostHog, Sentry and Resend, together with the wallet and network providers used for your transaction. Social connections use the platform you choose, such as X, Google or Discord.

Information may also be disclosed where required by law, to investigate fraud or protect rights, or as part of a business transfer subject to appropriate safeguards. Providers may process information outside your country; applicable transfer safeguards must be used where required.

Retention and security

We retain information for as long as needed for the service, transaction reconciliation, fraud prevention, dispute resolution and applicable legal duties. Closing an account does not necessarily erase records that must be retained for these purposes. Access restrictions and technical controls protect information, but no system can guarantee absolute security.

Public blockchain records

Blockchain transfers and wallet addresses may be publicly visible and permanent. We cannot remove or amend records held on a public blockchain. Information in your REAP account is not automatically public merely because a related deposit or withdrawal is onchain.

Your choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to processing, and withdraw consent where processing relies on it. Contact support@reap.win. We may verify your identity before responding. Some requests are limited by legal retention duties, other people’s rights or the need to resolve a transaction or dispute. You may also contact the relevant data protection authority.

REAP is not intended for people below its minimum age. Contact us if you believe a minor has supplied personal information. Material policy changes will be communicated as required; the updated document will carry its revision date.