This Privacy Policy explains how Spintiq LLC ("Spintiq," "we," "us," or "our") collects, uses, and protects your information when you use the REWIND website at rewindcard.com and related services (the "Service"). We are the data controller for the personal information described here.
| Category | What it includes | Why |
|---|---|---|
| Account information | Your name, email address, and password (stored only as a salted hash — never in plain text). | To create and secure your account and sign you in. |
| Gameplay data | Your game timelines, results, and game history. | To run the game and show your progress. |
| Technical data | Your IP address, and basic browser/device information, and a session token stored in your browser's local storage. | To keep you signed in, prevent abuse and rate‑limit sign‑ups/logins, and (with the app) match "now playing" signals to your session. |
| Communications | Emails we send you, such as password‑reset messages. | To operate your account and respond to you. |
| Payment data (if you subscribe) | Handled by our payment processor. We do not store your full card details. | To process subscription payments. |
Where the GDPR applies, we process your information to perform our contract with you (running your account and the game), for our legitimate interests (security, abuse prevention, improving the Service), to comply with legal obligations, and with your consent where required (for example, accepting these terms at sign‑up).
We do not sell your personal information. We share it only with service providers who help us run REWIND, under agreements that protect your data:
We may also disclose information if required by law, to protect our rights or users' safety, or in connection with a business transfer. Song previews are played by the separate REWIND mobile app through third‑party music providers (such as Apple and Deezer); their handling of data is governed by their own policies.
We operate from the United States, and your information may be processed on servers in the U.S. and other countries. Where required, we rely on appropriate safeguards for international transfers.
We keep your account information for as long as your account is active. When you delete your account, we delete your account information and gameplay data. Some limited records may be retained where necessary to comply with legal obligations or resolve disputes.
You can exercise these rights directly in your profile settings, or by contacting us:
Depending on where you live, you may also have rights under laws such as the EU/UK GDPR, the Nigeria Data Protection Act/NDPR, and U.S. state privacy laws (e.g., California). To make a request, email hello@rewindcard.com. You also have the right to lodge a complaint with your local data‑protection authority.
We protect your data with measures including password hashing (PBKDF2), encrypted connections (HTTPS), and access controls. No system is perfectly secure, but we work to keep your information safe and to notify you of significant incidents where required by law.
REWIND is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, contact us and we will delete it.
We use a small amount of browser local storage to keep you signed in (your session token). We do not use third‑party advertising cookies.
We may update this Privacy Policy from time to time. We will update the effective date above and, for material changes, provide additional notice where appropriate.
Questions or requests? Email us at hello@rewindcard.com.