winstep operates winstep.io, a free skill-and-chance competition platform where users complete tasks and play games to earn points and compete for prizes. The operator is based in the Republic of Georgia. For any privacy questions or requests, contact us at team@winstep.io.
We use cookies and similar technologies in the following categories:
| Type | Purpose | Consent |
|---|---|---|
| Strictly necessary | Login sessions and security (e.g., authentication). Required for the Service to work. | Not required (info only) |
| Analytics | Understanding how the Service is used (e.g., Google Analytics). | Consent required (EU/UK) |
| Advertising | Showing and measuring ads via our advertising partners. | Consent required (EU/UK) |
Where required by law (for example in the EU/EEA and UK), we ask for your consent before setting non-essential (analytics and advertising) cookies. Our cookie banner offers "Accept All" and "Reject All". If you choose "Reject All", analytics and advertising trackers are not loaded. You can change your choice at any time via the cookie settings on the site.
We do not sell your personal data for money. We share limited data with service providers who help us operate the Service, each under their own privacy terms:
We may also disclose information if required by law or to protect our rights, our users, or the Service.
Where the GDPR applies, we process your data on the following bases: performance of our contract with you (to provide the Service), your consent (for non-essential cookies, advertising, and marketing), our legitimate interests (security, fraud prevention, and improving the Service), and compliance with legal obligations.
The operator is located in the Republic of Georgia, while our service providers (such as Supabase and Vercel) and our users may be located in the United States, the European Union, and elsewhere. This means your data may be transferred across borders. Where required, such transfers rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms.
Depending on your location, you may have the right to access, correct, delete, or export your personal data, to object to or restrict certain processing, and to withdraw consent at any time. EU/EEA/UK users may also lodge a complaint with their local data protection authority. To exercise any of these rights, use the controls in your profile or email team@winstep.io.
California residents have the right to know what personal information we collect, to request deletion, and to opt out of the "sale" or "sharing" of personal information. Because we use advertising partners that may track users across sites, our use of advertising cookies may be considered "sharing for cross-context behavioral advertising" under California law. California residents may opt out using the "Do Not Sell or Share My Personal Information" link in our site footer, or by emailing team@winstep.io. We do not discriminate against you for exercising these rights.
You can delete your account and associated personal data at any time from your profile page, or by emailing team@winstep.io. Deletion is permanent and removes your account, points, and activity, except where we must retain limited information to comply with legal obligations or prevent abuse.
We keep your personal data for as long as your account is active or as needed to provide the Service and run the competition. After account deletion, we remove or anonymize your data within a reasonable period, except where retention is legally required.
The Service is intended for users aged 18 and older and is a general-audience service that is not directed to children. We do not knowingly collect personal information from anyone under 18, and in particular not from children under 13 (in line with the U.S. Children's Online Privacy Protection Act, "COPPA") or below the applicable age of digital consent in the EU (GDPR, 13–16 depending on the country). If we become aware that we have collected data from a child, we will delete it promptly. If you believe a child has provided us data, contact team@winstep.io.
We use reasonable technical and organizational measures to protect your data, including encrypted connections and access controls. However, no method of transmission or storage is completely secure.
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you. Continued use of the Service after changes means you accept the updated policy.
Questions about this policy or your data? Email team@winstep.io.