Privacy policy

HEIST NIGHTS — PRIVACY POLICY Last updated: September 8, 2026

1. Introduction

Heist Nights ("we," "us," or "our") operates the Heist Nights mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the App. Please read this policy carefully. If you do not agree with its terms, please discontinue use of the App.

2. Information We Collect

Account Information. When you create an account, we collect your email address, username, and password (stored as a secure hash). If you sign in with Google or Apple, we receive your name and email address from those providers.

Profile Information. Any username, display name, avatar, biography, or other profile details you choose to provide.

User-Generated Content. Messages posted to The Board, squad finder posts, direct chat messages, live stream interactions, and any other content submitted within the App.

Device and Usage Data. We may collect device type, operating system version, app version, crash reports, and general usage analytics to maintain and improve the App's performance and stability.

Purchase Information. If you make purchases through the App (merchandise, in-app items, drops), payment processing is handled by Stripe, Inc. We do not store your full payment card number — only a transaction reference and order details.

Location Data. We do not collect precise geolocation data. Region selection (e.g., NA East, EU West) is chosen manually by you.

Communications. If you contact us directly (e.g., via the in-app Contact form), we retain your message and email address in order to respond to your inquiry.

3. How We Use Your Information

To create and administer your account
To display your username and posts to other users within the App
To process purchases and send order confirmations
To moderate content and enforce our Community Guidelines
To maintain and improve App performance and resolve technical issues
To send service-related notifications (e.g., account security, order updates)
To detect and prevent fraud, abuse, and violations of our Terms of Service
To comply with applicable legal obligations

4. Disclosure of Your Information

We do not sell your personal information. We may disclose personal information to the following categories of recipients:

Supabase — our database and authentication provider (data stored in the EU/US)
Stripe — payment processing
Google / Apple — where you elect to use social sign-in
Shopify — where you purchase merchandise through our store
Law enforcement or regulatory authorities — where required by applicable law, court order, or other valid legal process, or to protect the safety of users or the public

All third-party service providers are contractually obligated to handle personal information securely and solely for the purposes we specify.

5. Data Retention

We retain account data for as long as the associated account remains active. You may request deletion of your account and associated personal data by contacting us at admin@heistnights.com. Board messages and squad posts may be retained in anonymized form following account deletion for moderation and safety purposes.

Purchase records are retained for seven (7) years as required by applicable tax and accounting law.

6. Children's Privacy

Heist Nights is not directed at children under the age of 13 (or under 16 within the European Economic Area). We do not knowingly collect personal information from individuals below these ages. If you believe a child has provided us with personal information without parental or guardian consent, please contact us immediately at admin@heistnights.com, and we will take steps to delete such information promptly.

7. Security

We employ industry-standard security measures, including:

Encrypted connections (HTTPS/TLS) for data in transit
Bcrypt-hashed passwords — plaintext passwords are never stored
Row-level security (RLS) on our database, restricting users to their own data
Periodic security review of our infrastructure

No method of transmission over the internet is completely secure, and we cannot guarantee absolute security. We take commercially reasonable steps to protect your information.

8. Your Rights

Subject to applicable law and certain exceptions, you may have the right to:

Access the personal information we hold about you
Correct inaccurate or incomplete information
Delete your account and associated personal data ("right to erasure")
Object to or restrict certain processing activities
Receive a copy of your data in a portable, machine-readable format
Withdraw consent at any time where processing is based on consent

California residents (CCPA): You have the right to know what personal information we collect, the right to request its deletion, and the right to opt out of its sale (we do not sell personal information).

EEA/UK residents (GDPR): Our lawful bases for processing include: performance of a contract (account and purchase management), legitimate interests (security, fraud prevention, App improvement), and compliance with legal obligation (tax recordkeeping).

To exercise any of these rights, contact us at admin@heistnights.com. We will respond within thirty (30) days.

9. Third-Party Links

The App may contain links to third-party websites or services (e.g., game store pages, social platforms). We are not responsible for the privacy practices of such third parties and encourage you to review their respective privacy policies.

10. International Data Transfers

Your information may be transferred to, and processed in, countries other than your country of residence, including the United States. Where required, we implement appropriate safeguards (such as Standard Contractual Clauses) for such transfers in accordance with applicable law.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date above and, where appropriate, an in-app notification. Continued use of the App following such changes constitutes acceptance of the revised policy.