Privacy Policy
Eligibility
You must be at least 13 years old to create an account and use Squishy Butter Co. By using the app, you confirm that you meet this requirement. We don't knowingly collect personal data from children under 13.
What we collect
When you create an account, we collect your email address and the authentication method you used (Apple, Google, or email). We do not collect or store passwords.
When you make a purchase, payment is handled by the platform you're on. On iOS, payments are processed by Apple through the App Store — we never see or store your card details. On the web, payments are processed by Stripe — we receive a transaction record but never see or store your card details.
We collect basic usage data — things like which butters you own, your pull history, and squish activity — to run the collection and leaderboard features. If you opt in to the public leaderboard (via your profile settings), your username and squish statistics will be displayed publicly on squishybutter.app. You can turn this off at any time from your profile — your data is removed from the leaderboard immediately.
What we don't do
- We don't sell your data to anyone.
- We don't send marketing email unless you've opted in.
- We don't share your collection or activity publicly without your consent.
- We don't collect data from children under 13 — see Eligibility above.
How we use your data
Your email is used to sign you in and send transactional messages (purchase receipts, authentication codes). Your collection data is used to render your collection and generate serial numbers and Certificates of Authenticity. Your squish activity (total squish count, last squish date) is used to power leaderboards and to send you relevant push notifications if you've opted in.
Butter Coins and virtual currency
Squishy Butter Co. uses a virtual currency called Butter Coins. Coins can be purchased with real money or earned through the app. Coins have no cash value, are non-refundable, and cannot be transferred or exchanged for real currency. Coin balances are tied to your account and will be lost if your account is deleted.
Push notifications
If you allow notifications, we store a device token — a unique identifier generated by Apple — that lets us send you alerts about new drops, milestones, and app updates. We may also use your in-app activity (such as your last squish date and squish count) to send you relevant notifications — for example, a re-engagement message if you haven't played in a while, or a recognition message if you're one of our most active players. We don't use your device token or activity data for any purpose other than sending you notifications. You can turn off notifications at any time from your Profile settings or from your device's Settings app. When you disable notifications, your device token is removed from our system.
Third-party services
We use the following third-party services to operate the app. Each has its own privacy policy.
- Supabase — our backend database and authentication provider. Stores your account, collection, and purchase records.
- Stripe — processes web payments. Stripe handles your card details directly; we never see or store them. Stripe may collect billing information and device data subject to their own privacy policy.
- RevenueCat — manages in-app purchase validation on iOS. RevenueCat may collect a device identifier for purchase validation.
- Apple / Google — if you sign in with Apple or Google, those providers share a user identifier and, optionally, your name and email with us, subject to their own privacy policies.
- Resend — sends transactional emails (authentication codes). Resend may record when links in those emails are clicked, in aggregate, to measure deliverability. This is not linked to your account profile.
- Google Analytics — measures basic site traffic (pages visited, session length, referral source). This data is aggregated and not linked to your account. You can opt out via Google's opt-out tool.
- Microsoft Clarity — records anonymized session replays and heatmaps (clicks, scrolls, navigation patterns) to help us understand how people use the site. Input fields such as email addresses are masked and never recorded. This data is not linked to your account. See Microsoft's Privacy Statement for details.
Data retention and deletion
Your account and collection data are kept as long as your account is active. You can delete your account directly in the app from your Profile — your account and all associated data (collection, purchase history, squish activity) are removed immediately. You can also request deletion by emailing hello@squishybutter.app and we'll complete it within 30 days.
Cookies
We use a session cookie to keep you signed in and Google Analytics cookies for traffic measurement. We don't use advertising or targeting cookies.
Contact
Questions about this policy: hello@squishybutter.app