Last updated: 2026-06-19
Plyzor is operated by Superstar Technologies, Inc. ("we," "us," "our"), 131 Continental Dr, Suite 305, Newark, DE 19713. For privacy questions, including data-access or deletion requests, email [email protected]. For users in the EEA/UK, Superstar Technologies, Inc. is the data controller for the personal data described here.
When you sign up we collect your email address and the username you choose. We ask for your date of birth at signup only to confirm you meet our 13+ age requirement; we keep a record that the check passed, not the date of birth itself. As you use Plyzor we collect content you upload (photos, videos, audio, GIFs, drawings, text), bids you place, items you collect, your follow graph, and the direct messages you send. We also collect device and technical data: your push-notification token (if you enable push), your time zone (for quiet hours), a device identifier (Apple's identifier-for-vendor) used to prevent same-device vote fraud in contests, an Apple DeviceCheck token used to enforce bans across app reinstalls, and standard log/technical data such as your IP address and app/device version at the time of a request (used transiently for security, abuse-prevention, and rate-limiting).
We use your data to operate Plyzor: running auctions, paying out coins, surfacing featured content, sending notifications you've opted into, preventing fraud and abuse, and enforcing our Terms. Where the GDPR applies, our legal bases are: performance of our contract with you (providing the app and your account); our legitimate interests (keeping the service secure, preventing abuse, and improving the product); your consent (for push notifications and any optional features); and compliance with legal obligations. You can withdraw consent at any time (for example, by turning off push in Settings). We do not sell your personal data and we do not use it for cross-context behavioral advertising. If we ever send you a promotional email, it will include an unsubscribe link, and you can turn off non-essential notifications at any time in Settings.
We share data only with service providers (processors) that help us run Plyzor, and only as needed: Supabase (database, storage, and authentication, hosted on AWS); Vercel (app hosting and Vercel Analytics); Cloudflare (Turnstile bot protection); Apple (push notifications via APNs, and DeviceCheck for reinstall-proof bans); PostHog (product analytics); Sentry (crash and error diagnostics); Giphy (when you search GIFs, your search query is sent to Giphy to return results); and Resend (email delivery). We may also disclose data to law enforcement or others when required by valid legal process or to protect rights, safety, or the integrity of the service. We do not sell your personal data. We require these providers to process your data only on our instructions and to protect it to a standard at least equivalent to this policy.
We are based in the United States and our providers are primarily in the United States, so using Plyzor involves transferring your data to the U.S. Where we transfer personal data of EEA/UK users, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
We retain your data for the lifetime of your account. When you delete your account from Settings, we permanently remove your personal data, except: (a) content you uploaded that others have already won, which remains on the winners' profiles with your username attached as attribution; and (b) limited records we are required to keep for legal, security, or fraud-prevention purposes. Encrypted backups are purged on a rolling basis after deletion.
You can edit your profile, change your email or password, and delete your account from Settings at any time. Depending on where you live, you may also have the right to access a copy of your data, correct it, delete it, restrict or object to processing, port it to another service, and withdraw consent; and, under the CCPA, to know what we collect, to delete it, to correct it, to opt out of any "sale" or "sharing" (we do neither), and not to be discriminated against for exercising these rights. To make a request, email [email protected]; we may need to verify your identity first. EEA/UK users also have the right to lodge a complaint with their local data-protection authority.
Account data is protected by row-level access controls, encrypted transport (HTTPS), and encryption at rest for our database and backups. No system is perfectly secure, but we work to protect your data and limit access to it to what's needed to run the service.
Plyzor is intended for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us and we will remove the account.
We use first-party cookies and local storage for authentication and to remember your settings. We use PostHog and Vercel Analytics for product and usage analytics, and Sentry for crash and error diagnostics, all used solely to operate and improve Plyzor. We do not run third-party advertising trackers, we do not sell your data, and we do not use these analytics to track you across other apps or websites.
To stop spam and automated abuse at sign-up and sign-in, we use Cloudflare Turnstile, which runs a silent verification in the background with no challenge shown to you. Its use is governed by Cloudflare's Turnstile Privacy Addendum.
We may update this policy occasionally. Material changes will be communicated in-app or by email at least 14 days before taking effect.
Questions? Reach us at [email protected], or by mail at Superstar Technologies, Inc., 131 Continental Dr, Suite 305, Newark, DE 19713.