Privacy Policy — Paper Parlay

Effective date: August 25, 2026 Last updated: August 25, 2026

Paper Parlay ("the App") is operated by Amun Studios LLC ("we," "us," "our"), a limited liability company organized in California, United States. This policy explains what we collect, why, who we share it with, and what you can do about it.

1. The App is for adults 21 and over

Paper Parlay is a fake-money sports betting simulator restricted to users 21 years of age or older. We do not knowingly collect personal information from anyone under 21, and we do not direct the App to children.

If we learn that we have collected information from someone under 18, we delete it promptly. If you believe a minor has given us information, write to info@amun-studios.com and we will remove it.

2. What we collect

Information you give us

Data When Notes Email address and password Only if you create or link an email account Passwords are hashed by our authentication provider; we never see them in readable form Display name / username When you set one Visible to other players on leaderboards and in leagues Anonymous account identifier Automatically, if you play as a guest A random ID with no email or name attached League names and join codes When you create or join a league Visible to other members of that league Support messages When you contact us Includes whatever you choose to tell us

Information generated by playing

Simulated bets, stakes, selections, bankroll balance, profit and loss history, record and win rate, league membership, and leaderboard standing.

Information collected automatically

Device model, operating system version, app version, language, general region inferred from IP address, IP address in server logs, crash and performance diagnostics, and in-app events such as screens opened and bets placed.

Advertising identifiers

The Advertising Identifier (IDFA on iOS, Advertising ID on Android) and related signals used to serve and measure ads. On iOS we only access the IDFA if you grant permission through Apple's App Tracking Transparency prompt.

3. What we do NOT collect

No real-money payment information. The App does not accept deposits, does not pay out, and does not process any payment. We never see or store card numbers or bank details.
No precise GPS location.
No contacts, photos, microphone or camera data.
No government ID, Social Security number, or financial account information.
No health, biometric, or sensitive category data.

4. Why we use it

To create and maintain your account, including keeping your bankroll and bet history attached to it
To run the core simulation: grading bets, updating profit and loss, ranking leaderboards, operating leagues
To display sports schedules and odds
To serve advertising, including measuring whether ads work
To diagnose crashes, fix bugs, and understand which features get used
To respond to your support requests
To enforce our Terms of Service, prevent abuse and multi-accounting, and comply with law

Where the GDPR applies, our legal bases are: performance of a contract (running your account and the game), legitimate interests (security, abuse prevention, product analytics), consent (personalized advertising, and tracking under ATT where applicable), and legal obligation.

5. Who we share it with

We do not sell your personal information for money. We share it only with the service providers below, and only so they can do their job for us.

Provider Role What they receive Supabase Database, authentication and backend hosting (United States) Account records, gameplay data, league data Google AdMob Advertising Advertising identifier, device and app data, ad interaction data — see Google's policies at policies.google.com/technologies/partner-sites Apple App Store / Google Play App distribution and crash reporting Whatever the platform collects under its own policy Odds data aggregator Sports schedules and odds, reflecting lines from DraftKings, FanDuel, BetMGM, Caesars, PointsBet (US) and Bovada Nothing about you — we request market data, not user data RevenueCat Purchase and subscription management — not active in this release, and only if and when in-app purchases launch A pseudonymous app user ID and purchase status

We may also disclose information when required by law or valid legal process, to protect our rights or someone's safety, or in connection with a merger, acquisition or sale of assets — in which case we will say so before your information becomes subject to a different policy.

6. Advertising choices

The App is free and supported by ads served through Google AdMob.

iOS: If you decline the App Tracking Transparency prompt, we do not access your IDFA and you will see non-personalized ads. You can change this any time in Settings → Privacy & Security → Tracking.
Android: You can reset or delete your Advertising ID in Settings → Google → Ads, and opt out of ad personalization there.
EEA / UK / Switzerland: We show a consent prompt (Google's UMP SDK) before any personalized advertising. You can change your choice in the App's settings.
Non-personalized ads still involve limited data, such as coarse location from IP address and the fact an ad was shown, to serve and measure the ad.

7. How long we keep it

Account and gameplay data: kept while your account is active, and deleted within 30 days of your deletion request.
Anonymous guest accounts: deleted on request, and automatically after [12] months of inactivity.
Server and security logs: up to 90 days.
Support correspondence: up to 24 months.
Backups purge deleted data on their normal rotation, within [30] days.

8. Deleting your account

You can delete your account and all associated data from inside the App: Profile → Settings → Delete account. This works for anonymous accounts too.

You can also email info@amun-studios.com from your registered address with "Delete my account" in the subject line. For anonymous accounts, include the account identifier shown in Profile → Settings. Deletion removes your bankroll, bet history, league memberships and leaderboard entries. It cannot be undone, and we cannot restore an anonymous account once deleted.

9. Anonymous accounts and linking

You can play without giving us an email. When you play as a guest we create a random identifier and store your gameplay against it — we do not know who you are.

If you later add an email address, that identifier is linked to your new credentials and your existing bankroll, bets and leagues carry over. From that point the data is associated with your email. You can also create an email account first and never use guest mode. Once linked, an account cannot be un-linked back to anonymous.

Anonymous accounts live on our servers, not only on your device. If you delete the App without linking an email, that progress is generally unrecoverable.

10. Security

Data is transmitted over TLS and stored in Supabase with row-level security so accounts can only reach their own records. Authentication credentials are hashed. We limit internal access to what is needed to operate the App. No system is perfectly secure, and we cannot guarantee absolute security.

11. Where your data is processed

We operate in the United States and our providers store data on US infrastructure. If you use the App from outside the United States, you understand your information is transferred to and processed in the US, which may have different data protection laws than your country. Where required, we rely on Standard Contractual Clauses or an equivalent transfer mechanism.

12. Your California privacy rights

If you live in California, the CCPA/CPRA gives you the right to know what we collect, to request deletion, to request correction, and to not be discriminated against for exercising those rights.

Categories collected in the last 12 months: identifiers (email, device and advertising IDs), internet or network activity (in-app events, crash data), commercial-adjacent information (simulated gameplay records), and inferences drawn for advertising.

Selling and sharing: We do not sell personal information for money. Serving personalized ads through AdMob may qualify as "sharing" for cross-context behavioral advertising under California law. You can opt out by declining the ATT prompt on iOS, by turning off ad personalization on Android, or by emailing info@amun-studios.com with "Do Not Sell or Share My Personal Information" in the subject line.

To exercise any right, contact info@amun-studios.com. We will verify your request against your account credentials and respond within 45 days.

13. Your rights in the EEA, UK and other regions

Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing, to data portability, and to withdraw consent at any time. You also have the right to complain to your local supervisory authority. Contact info@amun-studios.com and we will respond within the period your law requires.

14. Changes to this policy

We will post any changes here with a new "Last updated" date. For material changes we will give notice in the App before they take effect. Continuing to use Paper Parlay after that means you accept the updated policy.

15. Contact

Amun Studios LLC Los Angeles, California, United States info@amun-studios.com

If gambling is causing problems for you or someone you know, free confidential help is available 24/7 at 1-800-GAMBLER.