LEGAL // PRIVACY

Privacy & Cookie Policy.

Last updated September 10, 2026

Information Winrate handles

Winrate records a randomly generated browser identifier to maintain an aggregate visitor counter. If you create an account, Winrate stores your email address, display name, a securely derived password hash, account creation time, session records, coin balance, and reward history. Passwords are never stored in readable form.

If you publish a community post, Winrate stores the uploaded photo in private Supabase Storage and stores its caption, account association, reactions, comments, replies, interaction times, and randomly generated identifiers in Supabase Postgres. Game-room comments and likes are stored in the same account-linked manner. Do not upload or post personal, confidential, copyrighted, or sensitive material you do not have permission to share.

Login and security cookies

After login, Winrate sets a secure, HTTP-only session cookie so you can remain signed in. The cookie is used for authentication and fraud prevention, expires after 30 days, and is not readable by site JavaScript.

Coins and abuse prevention

Winrate stores an event ledger for eligible daily visits, comments, likes, and referral registrations. Referral records connect the new account to the inviter so the one-time 10-coin award cannot be repeated for the same registration. Daily limits, unique interaction rules, and security rate limits help prevent automated or repetitive activity from generating unlimited coins. Coins are non-transferable loyalty points with no cash value; they cannot be purchased, redeemed, or wagered.

Advertising and cookies

When advertising is enabled, third-party vendors, including Google, may use cookies, web beacons, IP addresses, or similar technologies to serve and measure ads. Google's advertising cookies can be used to serve ads based on visits to this site and other sites.

You can manage personalized advertising in Google Ads Settings. Learn more about how Google uses information from partner sites.

Consent choices

Where required, an approved consent management platform may ask you to accept, reject, or manage advertising and storage choices before personalized ads are served. Your choices can affect which ads are displayed.

Data retention and control

Account records, community posts, uploaded photos, reactions, and discussions remain available until they are removed for moderation, legal, security, or operational reasons. Clearing this site's local storage removes the visitor identifier saved in your browser, although the aggregate counter is not reduced. Logging out removes the active login cookie from your browser and invalidates that session.

Policy changes

This notice may be updated when site features, vendors, or legal requirements change. The revision date above identifies the current version.