Privacy Policy

War Room LLC ("War Room," "we," "us," or "our") operates a sweepstakes casino intelligence platform accessible via our website at war-rooms.com, a Chrome browser extension, the Sweep Coins — Powered by War Room (iOS), and the Sweep Coins — Powered by War Room (Android) (collectively, the "Services").

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have regarding your information. By using any of our Services, you agree to the practices described in this policy.

War Room LLC is a Colorado limited liability company. Our Services are intended for users in the United States who are of legal age to participate in sweepstakes promotions in their jurisdiction.

• Account registration — email address, username, and password when you create a War Room account.
• Subscription information — when you subscribe to a paid tier, payment is processed by LemonSqueezy. We receive confirmation of your subscription status and tier level but do not store your full payment card details.
• Communications — if you contact us for support, we retain the content of that communication.

• Authentication tokens — JSON Web Tokens (JWTs) stored securely in your browser's local storage or the device's secure storage.
• Claim history — records of which sweepstakes casino bonuses you have claimed, including timestamps and site identifiers.
• Usage data — pages visited, features used, time spent, and interaction patterns within the Services.
• Device and browser information — browser type and version, operating system, device type, and unique device identifiers when accessing via mobile apps.
• IP address — collected for security, fraud prevention, and geographic access verification. We do not sell IP address data.
• Referral and affiliate click data — when you click a casino link through our redirect system (go.war-rooms.com), we log the click for analytics and affiliate commission tracking. The destination affiliate URL is never exposed to your browser.

• Supabase — our database provider stores your account information and claim history on our behalf.
• LemonSqueezy — our payment processor provides us with subscription status, plan tier, and renewal dates. We do not receive full payment card numbers.
• Cloudflare — our infrastructure provider processes all web traffic and may log request metadata for security purposes.

• To provide the Services — authenticate your account, display your personalized dashboard, track bonus claims, and serve content appropriate to your subscription tier.
• To process subscriptions — verify your clearance level, gate content by tier, and update your access when you subscribe or cancel.
• To improve the platform — analyze usage patterns to fix bugs, prioritize features, and improve the user experience.
• To communicate with you — send transactional emails such as account confirmation, subscription receipts, and password resets. We do not send marketing emails without your explicit consent.
• To protect security — detect fraud, prevent abuse, enforce our Terms of Service, and protect the integrity of our affiliate relationships.
• To comply with legal obligations — respond to lawful requests from government authorities and comply with applicable law.

War Room operates a tiered access system (Unclassified, Confidential, Secret, Top Secret). Your subscription tier determines which casino sites and features are visible to you. This gating is enforced server-side — your clearance level is stored in our database and verified on every API request. No sensitive casino data is stored on your device.

• We use httpOnly secure cookies to store your authentication session. These cookies are not accessible to JavaScript and cannot be read by third-party scripts.
• We may use localStorage for non-sensitive UI preferences such as sort order and filter settings.

• The extension uses chrome.storage.local to store your JWT authentication token and user preferences. This data never leaves your browser except as part of authenticated API requests to api.war-rooms.com.

• The Sweep Coins app uses expo-secure-store, the platform's encrypted secure storage, to store your JWT authentication token.
• We do not use advertising identifiers (IDFA on iOS, GAID on Android).

• We do not use Google Analytics, Facebook Pixel, or similar third-party tracking scripts. All analytics are first-party, collected through our own Cloudflare infrastructure.

• Supabase — database and authentication infrastructure. Your account data and claim history are stored in Supabase's US East region. Supabase is SOC 2 Type II compliant.
• Cloudflare — DNS, CDN, and serverless compute infrastructure. All traffic to war-rooms.com and our APIs passes through Cloudflare.
• LemonSqueezy — subscription billing and payment processing. LemonSqueezy is the merchant of record for all transactions.
• Apple — if you download Sweep Coins from the Apple App Store, Apple's privacy policy applies to that transaction.
• Google Play — if you download Sweep Coins from Google Play, Google's privacy policy applies to that transaction.

• Account data — retained for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.
• Claim history — retained for the life of your account to power your dashboard and analytics features.
• Payment records — subscription transaction records are retained for 7 years as required for tax and accounting compliance.
• Security logs — IP addresses and request logs are retained for up to 90 days for security and fraud prevention purposes.

• Access — request a copy of the personal information we hold about you.
• Correction — request correction of inaccurate or incomplete information.
• Deletion — request deletion of your account and associated personal data.
• Portability — request your claim history and account data in a machine-readable format.
• Opt-out of communications — unsubscribe from any non-transactional emails at any time.
• Alert preferences — control notification and alert settings directly within the War Room interface.

To exercise any of these rights, contact us at privacy@war-rooms.com. We will respond within 30 days.

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, contact us immediately at privacy@war-rooms.com and we will delete it promptly.

• All data in transit is encrypted using TLS 1.2 or higher.
• Authentication tokens expire after 24 hours and are rotated on refresh.
• Sensitive credentials are stored in encrypted environment variables and never exposed to client-side code.
• Affiliate URLs are processed server-side only and never transmitted to any client device.
• Row Level Security (RLS) is enforced at the database level — users can only access their own data.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

War Room is an intelligence and tracking platform. We do not operate, own, or control any sweepstakes casino. EV (expected value) figures shown in the platform are estimates based on publicly available information and user-reported data. They are provided for informational purposes only and do not constitute financial advice.

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this document. For material changes, we will notify you by email or by displaying a prominent notice within the Services.

This Privacy Policy is governed by the laws of the State of Colorado, United States, without regard to its conflict of law provisions. Any disputes arising under this policy shall be resolved in the courts of Colorado.