Privacy Policy

Last updated: May 3, 2026

Barajitas: Football Sticker Tracker ("the App", "we", "us", or "our") is a FIFA World Cup 2026 sticker album tracking application for iOS. This Privacy Policy explains what information we collect, how we use it, and your rights regarding that information.

By using the App, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

We collect only the minimum information necessary to operate the App:

• Account information: When you sign in with Google or Apple, we receive your email address and display name from those providers. We do not receive or store your password.
• Profile data: Your display name and avatar URL (if provided by your sign-in provider).
• App usage data: Which stickers you have marked as owned or duplicate, and trade requests you initiate or receive. This data is required for core app functionality.
• Push notification token: A device token used to send you notifications about trade requests and friend activity. You can disable push notifications at any time in your device's Settings app.
• Friend connections: Friend codes you add or accept within the App.

We do not collect:

• Precise location data
• Contacts or address book data
• Browsing history or data from other apps
• Sensitive personal information (health, financial, etc.)

2. How We Use Your Information

• To create and manage your account
• To sync your sticker album across devices
• To enable trading stickers with other users
• To send push notifications about trades and friend activity (only if you grant permission)
• To manage your subscription status if you purchase a premium plan

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

3. Third-Party Services

The App uses the following third-party services, each with their own privacy policies:

• Google Sign-In — used for authentication. Google Privacy Policy
• Sign In with Apple — used for authentication. Apple Privacy Policy
• RevenueCat — used to process and manage in-app subscriptions. RevenueCat may receive your app user ID and subscription transaction data. RevenueCat Privacy Policy
• Expo Push Notifications — used to deliver push notifications to your device. Expo Privacy Policy
• Google Cloud (Cloud Run & Cloud SQL) — our backend infrastructure runs on Google Cloud. Your data is stored in a PostgreSQL database hosted on Google Cloud SQL in the United States. Google Cloud Data Processing Terms

4. Data Retention

We retain your account and album data for as long as your account is active. If you request deletion of your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

5. Data Security

All communication between the App and our servers uses HTTPS/TLS encryption. We use industry-standard security measures to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

6. Children's Privacy

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

7. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Opt out of push notifications at any time via device Settings

To exercise any of these rights, contact us at the email below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date at the top of this page. Continued use of the App after changes are posted constitutes your acceptance of the updated policy.