Who We Are

SQUADUP is a gaming matchmaking platform operated as an independent project. For data protection purposes, SQUADUP acts as the data controller for the personal information you provide.

Privacy inquiries: privacy@sqdup.gg  ·  General support: support@sqdup.gg

Information We Collect

Account Information

When you sign in with Discord, Google, or Apple, we receive your email address, your display name from that service, and a unique user identifier. If you use Sign in with Apple and choose to hide your email, we receive a private relay address from Apple instead of your real email.

Age Check

Before you can use SQUADUP, we ask for your date of birth to confirm you are at least 13. We store only your birth year and the date you accepted our Terms; the full date of birth is not saved.

Profile Information

Information you voluntarily provide when building your Gamer Card:

• Gamer ID (username), age range, and bio text
• Games you play, genres, and platforms
• Timezone, play frequency, and play times
• Preferred role, playstyle, and competitive intensity
• Languages spoken and microphone availability
• Private gamer tags — only revealed to mutual matches

Usage Data

• Swipe actions (pass or invite on other profiles)
• Match history and squad connections
• Poke interactions between matched players
• Reports you submit about other players, and players you block
• Views, taps, and dismissals of SQUADUP promo cards in the deck (which card, and when)
• App usage events, such as pages viewed and whether you accepted the notification or install prompts (collected with PostHog and linked to your account ID)

Technical Data

• Push notification tokens (OneSignal), on the website and in the iPhone and Android apps — only if you opt in
• IP addresses — temporarily, for rate limiting and security only
• Session tokens stored on your device for authentication
• Error reports and performance data (Sentry), including, for a small share of sessions, a replay of on-screen activity with text and form inputs masked

How We Use Your Information

• To provide matchmaking and profile features — Legal basis: Contract
• To confirm you meet the minimum age — Legal basis: Legal obligation
• To send push notifications about matches and pokes — Legal basis: Consent
• To protect the platform from abuse and enforce rate limits — Legal basis: Legitimate interests
• To respond to support and privacy requests — Legal basis: Legal obligation
• To improve the platform based on usage patterns and to find and fix bugs — Legal basis: Legitimate interests
• To show SQUADUP promo cards and measure how they perform — Legal basis: Legitimate interests

Third-Party Services

We share data with the following providers as necessary to operate the platform:

Promo Cards and Advertising

The swipe deck may occasionally show SQUADUP's own promo cards, for example to follow us on social media or invite friends. These cards are chosen by us, not by an ad network.

• We record when a card is shown, tapped, or dismissed, linked to your account, to measure how cards perform and avoid showing the same card too often.
• We do not use third-party advertising networks, and we do not track you across other companies' apps or websites.
• Tapping a card may open a third-party website or app, which has its own privacy policy.

Data Retention

• Profile and account data — retained until you delete your account
• Removed matches — retained for 30 days to prevent re-matching, then deleted
• Poke notifications — expire automatically after 48 hours
• IP addresses for rate limiting — expire automatically via Upstash TTL (typically within minutes)
• Promo card views and taps — when you delete your account, they are unlinked from it and kept only as anonymous counts
• Analytics and diagnostic data — kept for a limited period under PostHog's and Sentry's retention settings, then deleted automatically

Your Rights

To exercise any of these rights, contact privacy@sqdup.gg. We will respond within 30 days.

International Data Transfers

SQUADUP uses third-party services primarily based in the United States. If you are in the EU, UK, or other regions, your data may be transferred to and processed in the United States. Where required by law, these transfers are protected by Standard Contractual Clauses (SCCs) provided by our service providers.

Children's Privacy

SQUADUP is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you are under 16 and in the EU, you must have parental consent to use SQUADUP.

If we become aware that we have collected personal data from a child without appropriate consent, we will delete it immediately. Contact privacy@sqdup.gg if you believe we have collected data from a minor.

Data Security

• Row Level Security (RLS) on all database tables
• Private gamer tags only accessible to confirmed mutual matches via server-side enforcement
• All connections encrypted via HTTPS/TLS
• API endpoints rate-limited to prevent abuse

While we implement these measures, no method of transmission over the internet is 100% secure.

Cookies and Local Storage

SQUADUP uses local storage on your browser or device to keep you signed in and remember your preferences, such as dismissed prompts. Our analytics provider, PostHog, also stores an identifier so usage events can be linked to your account. We do not use advertising cookies or cross-site tracking. On the website you can clear local storage at any time through your browser settings, which will log you out.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date and, where appropriate, by sending a notification through the app's mailbox system. Continued use of SQUADUP after changes are posted constitutes acceptance of the updated policy.