Updated: October 8, 2026.

Gentlemans Cards&Collectibles LLC provides Scalp City. This policy covers the game, website and support. Contact support@scalpcity.app about your information or a privacy request.

We create an account identifier for guest or linked play and keep its creation time, status and permissions. Linking Apple or Google lets us associate your game with that provider's account identifier. We do not receive your provider password. Sign-in responses can contain name or email information even though we do not keep these as ordinary account profile fields. Some Apple browser sign-in information is temporarily stored in encrypted form to complete the sign-in.

We keep session records, device model or operating-system labels, activity times and information needed to restore or end a session. Your device keeps sign-in credentials; the service keeps a protected representation used to check them. Temporary sign-in and restore steps generally expire after five or ten minutes, depending on the step, and are cleared during later sign-in activity. Ordinary accounts and sessions have no fixed automatic expiry.

The game stores saves, action history, inbox messages, preferences and cached game information on your device. The browser also uses local storage for this purpose, including older saved copies. Guest access alone does not recover a game after reinstalling. Use a fictional handle and keep your device secure.

Online saves include your handle, chosen avatar and profile line, game identifiers, actions and inputs, inventory, fictional cash and profit, XP, rank, purchase benefits, game times, timezone offset and app versions. We use these to save and restore progress, run the game, verify shared results, prevent cheating and investigate failures. We also combine these records, together with purchase history, into aggregate statistics about how Scalp City is played, such as how many players return and which features they use, so we can improve the game. Those statistics are for our own use: we do not sell them, share them with advertisers or use them to track you across other apps or websites. Sync records include transfer times, counts, verification results and, for some failures, a limited copy of the affected actions.

Other players and website visitors can see public player identifiers, handles, avatars, profile lines, ranks, selected cosmetics, collectible numbers and game statistics. Social records include follows, preset posts and reactions with their times. Shared drops and markets record participation, orders, bot tasks, fictional sales and outcomes. Conventions record entries, table listings, requests, decisions and game information shared with participants.

Cook groups keep their name, badge, owner, membership history, roles, bans, fictional dues and donations, pot activity, invoices, scores, preset chat lines, emotes and pings. Members can see group chat; public group identity and rankings can appear on profiles and boards. Reports keep the reporter, reported player or group, exact reported names, reason, review outcome and reviewer information. Operator reviewers use these to address conduct and naming issues. Do not put private information in handles or group names.

If you enable supported notifications, we keep your push token, platform, account/session connection, selected categories and delivery attempts, times and results. Apple Push Notification service (APNs) or Firebase Cloud Messaging delivers the alert using its device token and alert information. These services do not receive your game save for notification delivery. You can change categories in Settings and withdraw notification permission in device settings. We do not send marketing pushes.

We keep account-linked product, order and transaction references, purchase times, amounts, payment and subscription status, paid periods, granted benefits, refunds and revocations. Receipt information and purchase tokens may be used to verify purchases. We also keep records that prevent duplicate processing of payments and benefits. These records have no fixed automatic expiry while the account exists; deletion changes their treatment as explained below.

Apple or Google handles purchases through its store. Stripe handles web checkout, including billing addresses, contact information and payment details. We use your selected billing country to check web-shop eligibility. Our own purchase records do not contain full payment-card details or separate billing-address/email fields, but provider responses may contain additional checkout information. Web orders are linked to Stripe customer, checkout, payment, invoice and subscription references. The website currently accepts test payments only.

Our services and hosting providers receive network addresses and request information when you connect. We use a protected network identifier, account identifiers, request counts and time windows to limit abuse. Those application counters do not store the raw network address; hosting providers may process it separately. Old request windows are cleared during later relevant requests.

When crash reporting is configured, release builds send Sentry crash reports and technical app, device, operating-system and build information. Automatic personal-information reporting, screenshots, screen captures and text-bearing activity records are disabled in the app configuration. Native reports may still include an installation identifier, network-derived location or performance information. We have not confirmed every field collected by native reports or Sentry's retention settings, so we do not claim these reports are anonymous.

Support receives your email address, message, handle, app/device details and any screenshots or order references you send. We use these to respond and handle account, purchase or privacy requests. Do not send passwords, sign-in codes, authentication tokens or payment-card details.

Vercel hosts website and service traffic; Neon stores online game records. Apple and Google provide sign-in and store payments, Stripe provides web payments, APNs and Firebase provide notification delivery, and Sentry handles configured diagnostics. Browser sign-in loads Apple or Google services, which may use their own cookies and network information. Support correspondence also passes through email services.

Providers receive the information needed for their services and may keep their own account, payment, request, log or backup records under their terms. Their locations, independent uses and retention are not fully established in this policy. We cannot promise that deleting your Scalp City account erases those records. Contact us about provider-held information or a related deletion request. Providers may process information outside your country.

The game does not include an advertising or attribution service, request your contacts, collect GPS gameplay location, or upload camera/microphone recordings. This does not mean third-party services receive no device or network information. We may disclose information when required by law, to investigate abuse or protect players, or during a business transfer subject to applicable privacy obligations.

Active accounts, game saves, social and group records, moderation records and purchase history generally have no fixed automatic expiry. Starting over can retain up to three previous games. Detailed failed-verification actions expire after 14 days; summary records can remain. Group chat is reduced to the latest 500 messages when another message is sent. Convention records become eligible for removal at least 91 days after the convention ends.

Notification cleanup is designed to remove tokens not refreshed for 90 days or connected to ended/pending sessions, and delivery records seven days after completion or expiry. Invalid tokens may be removed earlier. An expiry makes a record eligible for cleanup; removal can occur later when that cleanup runs. These periods do not describe provider logs or backups. We have not established a fixed support-mail retention period.

At public launch, players start a fresh game and choose a new handle, while logins remain. Beta saves, handles, activity and group records are archived with expiry 90 days after launch. First-backup and collectible-eligibility records remain separately without a fixed expiry. Beta cash, rank and ordinary inventory do not carry over. An eligible beta account may receive a Day Zero collectible. This reset is not account deletion.

Use Settings > Delete account in the app, or visit Delete your account. Both guests and linked accounts can use in-app deletion. The website also offers an email request if you cannot sign in. We verify ownership and require confirmation; linked Apple accounts need fresh Apple authorization to revoke access. If verification or revocation fails, deletion is not complete. Temporary information used for Apple revocation expires after 24 hours if it is still pending and is removed when revocation succeeds.

Successful deletion removes the account and provider links, sessions, game saves and archives, social posts/follows/reactions, public profile and associated notification records. Current public views are updated when next requested. You leave your cook group; leadership passes to the longest-standing remaining member, or an empty group closes. Group totals and activity needed for remaining members can stay without your account link. Your Day Zero entitlement is removed, and its number remains reserved without an account mapping.

Convention history keeps game results and decisions while replacing your handle, avatar and player identifier with neutral display information and new identifiers that have no saved link to your account. Those records remain until the convention cleanup described above. This does not recall information another person has already downloaded or saved.

Some records remain after deletion. We keep a separate payment/refund history for seven years after deletion, including product, platform, transaction/order/subscription references, amounts, times and status. It excludes your Scalp City account identifier, Stripe customer identifier and stored purchase-verification token. Payment providers can still connect transaction references to their records, so this history is not guaranteed anonymous. Later payment or refund updates do not extend that expiry or recreate your game account.

A deletion audit record with a random event identifier and deletion time expires after 90 days. A separate limited confirmation record has no fixed expiry so a device returning after a long time offline can confirm deletion and finish local cleanup. It does not contain your account identifier, handle, network address or device label, but a device holding the original request credentials can connect it to that request. These seven-year and 90-day periods are selected retention periods, not claims that a law requires those exact durations. Expired records are removed through cleanup, which may occur after expiry.

The device completing deletion clears its local game information and credentials after server confirmation. Other devices or copies you made may retain information until their own cleanup. Provider payment records, logs and backups, and support emails are not automatically erased by account deletion. Contact us to discuss those records and any further request.

Account deletion does not cancel a Scalpers Union subscription. Manage or cancel with Apple, Google Play or the Stripe portal available from the web shop before deleting. You may delete immediately without waiting for the paid period to end. If you have already deleted your account or cannot open Stripe's portal, contact support. A receipt may also include a billing-management link.

Email support@scalpcity.app to request access, correction, deletion or information about rights where you live. Include enough information to identify your account safely; we may verify ownership. Depending on your location, rights may include objection, restriction, portability, consent withdrawal, using an authorized representative or complaining to a privacy regulator. We respond under applicable law and do not penalize you for exercising privacy rights. Removing the app or choosing Start over does not delete server records.

Scalp City is not directed to children under 13. The game does not currently collect a birth date or verify age. Store content ratings can differ by platform or region; they are not age verification or a substitute for local age requirements. If you believe a child has provided personal information, contact us so we can assess the request and address the information under applicable requirements.

We will date policy updates and notify players of material changes as required. Game cash and products are fictional, with no cash-out or physical delivery; optional purchases use real money when offered.

These pages were reviewed against comparable games' policies. This review is not legal advice.