Skip to content
Start Free

Legal / Do Not Sell My Personal Information

Do Not Sell or Share My Personal Information

Last updated: April 2026

Your California Privacy Rights

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the right to opt out of the "sale" or "sharing" of their personal information, to limit the use of sensitive personal information, and to exercise other statutory rights described below. This page is the canonical reference for how GAMB·8 handles your data under these laws.

We Do Not Sell or Share Your Data

GAMB·8 does not sell your personal information, and we do not "share" it for cross-context behavioural advertising as those terms are defined under CPRA §1798.140(ad) and (ah). We do not participate in data-broker networks, advertising exchanges, or data cooperatives.

Specifically:

  • We do not sell your name, email, or account data with third parties for their marketing purposes.
  • We do not use advertising networks or serve targeted ads based on your activity across other websites.
  • Affiliate attribution cookies (gamb8_ref, gamb8_referral) track which partner link brought you to us; they do not follow you across other sites and contain no personal data.
  • Analytics data (PostHog) is used only to improve our own product. We do not share it with any third party for their independent use.

Limit the Use of My Sensitive Personal Information

Under CPRA §1798.121, California residents may limit our use of certain categories of sensitive personal information (SPI) to what is necessary to perform the service. SPI on GAMB·8 may include:

  • Account credentials (hashed password, MFA secret, backup codes)
  • Precise geolocation (we do not collect this intentionally, but IP-based approximate location is processed at request time)
  • Encrypted OAuth tokens for linked providers (Google, Discord, X, Kick)
  • Tax identification information supplied during affiliate onboarding

We already limit our use of SPI to the purposes described in our Privacy Policy — authentication, fraud prevention, statutory tax compliance for affiliates, and service delivery. We do not infer characteristics about you from SPI, and we do not disclose SPI to third parties beyond the processors listed below.

To formally record a "limit use" request anyway — or to confirm the above in writing — email privacy@gamb8.com with "CPRA Limit SPI Request" in the subject line.

Global Privacy Control

GAMB·8 honours the Global Privacy Control (GPC) browser signal. When a GPC signal is detected from a visitor whose IP maps to California, we treat it as a valid request to opt out of the sale or sharing of personal information, consistent with California Attorney General guidance. This preference is recorded under the localStorage key gamb8:gpc-opt-out.

Notice of Financial Incentive

Under CPRA §1798.125(b), we must disclose programs that offer a financial incentive or price/service difference in exchange for data processing. GAMB·8 operates two such programs:

  • XP, streaks, and achievements. Paid subscribers and active free-tier users accrue XP and streak bonuses tied to product usage. These are loyalty features based on tenure and activity; they do not require you to provide additional sensitive data beyond your account. Opt out by cancelling your account.
  • Affiliate / partner program. Approved partners receive tiered commissions (see Affiliate Disclosure) in exchange for providing tax-identification data required for payouts. Tier is based on referred-user volume, not on additional data processing about you as a consumer.

We calculate the value of these programs using the expected lifetime value of an engaged user (for loyalty features) and the contractual commission paid (for partners). Neither program conditions participation on selling or sharing your personal information to third parties.

Third-Party Services

We use a limited number of third-party services that process data on our behalf (not for their own purposes):

  • PostHog — anonymized product analytics (opt-in for EU/UK users)
  • Stripe — payment processing (governed by their own privacy policy)
  • Cloudflare — security and performance (no personal data stored)
  • Sentry — error tracking (anonymous error reports only)
  • OAuth providers — login only, when you choose to connect

None of these services receive your data for the purpose of "selling" or "sharing" it as defined under CCPA/CPRA.

Your Rights

As a California resident, you have the right to:

  • Know what personal information we collect and how it's used
  • Delete your personal information (subject to certain exceptions)
  • Opt out of the sale or sharing of personal information
  • Non-discrimination for exercising your privacy rights
  • Correct inaccurate personal information
  • Limit use of sensitive personal information

Since we do not sell or share your personal information, there is no sale or sharing to opt out of. However, you can exercise your other rights at any time.

How to Exercise Your Rights

We will respond to verifiable consumer requests within 45 days, as required by CCPA/CPRA. For faster response on routine requests, we aim to resolve within 30 days in line with our GDPR process. We will not discriminate against you for exercising any of these rights.

Authorised Agents

You may designate an authorised agent to submit a CCPA / CPRA request on your behalf. To do so, send us:

  • Written permission signed by you, giving the agent authority to act on a specific request
  • Enough information to verify your identity (e.g. the email address on your account)
  • The specific right being exercised (know, delete, correct, opt out, limit SPI)

We verify the agent's authority before responding; this is required by CPRA §1798.135(c) and is intended to protect you from unauthorised requests.

Contact

If you have questions about your California privacy rights, contact us at privacy@gamb8.com. We do not charge a fee for exercising your rights.