Stoxxi (“Stoxxi”, “we”, “us”) operates the website at www.stoxxi.com(the “Service”), a social prediction arena where you trade virtual shares on real-world events using “AMMO”, an in-app play-money currency. The Service does not involve real-money wagering, deposits, or withdrawals.

This policy explains what personal data we collect, why, and your rights over it. The data controller is Double Digitize, the operator of stoxxi.com. If you have questions, contact us at privacy@stoxxi.com.

• Account & identity. When you register (via Google or email), we collect your email address, authentication identifiers, and the operator name and profile picture you choose.
• Activity. Your in-app actions — trades, positions, AMMO balances, standings, and objectives — which power your portfolio and the leaderboards.
• Subscription & payment. If you purchase a Pro or Elite plan, payment is processed by Stripe. We do not store your full card details; we retain your subscription status and Stripe customer reference.
• Technical data. Device, browser, IP address, and usage events collected via cookies and similar technologies (see below).

• To provide and secure the Service (accounts, authentication, trading, portfolio).
• To operate leaderboards and social features according to your visibility settings.
• To process subscriptions and prevent abuse or fraud.
• To measure and improve the Service through analytics.
• To display advertising that helps keep the Service free (see “Advertising”).

We use cookies and similar technologies for three purposes:

• Essential — sign-in, session, and security. The Service does not work without these.
• Analytics — to understand how the Service is used (see below).
• Advertising — set by Google and its partners to serve and measure ads (see below).

You can control or delete cookies through your browser settings. Blocking essential cookies may break sign-in and core features.

We use Google AdSense to display advertising on parts of the Service. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.

• Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to the Service and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google Ads Settings.
• You can opt out of a third-party vendor’s use of cookies for personalised advertising via aboutads.info or, in the EU/EEA, youronlinechoices.eu.
• For more on how Google uses data when you use our partners’ sites or apps, see Google’s Privacy & Terms.

If you are in the European Economic Area, the UK, or Switzerland, we ask for your consent through a Google-certified consent message before personalised ads are shown, and you can withdraw or change your choices at any time.

We use Google Analytics to measure usage and improve the Service. IP addresses are anonymised. You can prevent Google Analytics from using your data with the Google Analytics opt-out add-on.

We share data with trusted providers who process it on our behalf:

• Supabase — database, authentication, and file storage.
• Vercel — website hosting and delivery.
• Stripe — subscription payment processing.
• Google — sign-in, Analytics, and AdSense advertising.
• Resend — transactional email delivery.

We do not sell your personal data.

Where the GDPR or UK GDPR applies, we rely on:

• Contract — to provide the Service you sign up for.
• Legitimate interests — to secure, analyse, and improve the Service.
• Consent — for personalised advertising and non-essential cookies (withdrawable at any time).
• Legal obligation — where we must retain or disclose data by law.

Depending on your location, you may have the right to access, correct, delete, or export your data, to restrict or object to certain processing, and to withdraw consent. To exercise these rights, contact privacy@stoxxi.com. You may also delete your account from your settings. If you are in the EEA/UK, you have the right to lodge a complaint with your data protection authority — in the Netherlands, the Autoriteit Persoonsgegevens.

We keep your data for as long as your account is active and as needed to provide the Service, then delete or anonymise it, unless a longer period is required by law.

Some providers process data outside your country, including the United States. Where we transfer data internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses.

The Service is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

We use technical and organisational measures to protect your data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, communicated in the Service.

Questions about this policy or your data? Email privacy@stoxxi.com.