Effective date: 25 October 2026
This policy explains what personal information Spark Detective (sparkdetective.com) collects, why, who receives it, how long we keep it and what your rights are.
1. Who is responsible
Trim Work by Design, a business operated by Nikolay Krantsevich, 99 Mcintyre Drive, Barrie, Ontario L4N 4K6, Canada, is responsible for your personal information (“we”, “us”). For any privacy question or request, write to sovpali.apps@gmail.com.
2. What we collect
- Account: your email address; a temporary sign-in code, which we keep only in hashed form and which expires after 10 minutes; your sign-in sessions; the date and time when you confirmed that you are 18 or older (we check the date of birth you enter but do not store it); your access dates and language.
- Profile: the phone number or Telegram username you give us — at least one of them is required to register — and, if you choose, your gender.
- Purchases: the plan, price, currency, dates and status of your payments, subscription and refunds, and the Stripe references that link them to your account. Card details are entered on Stripe’s checkout page and processed by Stripe; we never see or store your full card number.
- Support: the emails you send us and the problem reports you send from the site: your message, the reply address you give, the page and browser you were using and, if you attach it, a screenshot.
- Invitations: if we invite you to the game, the email address we send the invitation to.
- Technical data: your IP address and the requests your browser makes. On every request we use the IP address to find your country with a database stored on our own server (DB-IP), because the service is not offered in the Russian Federation; no data is sent to DB-IP. Our hosting provider keeps server logs for security and troubleshooting.
Your game progress — the cards you have played and your score — is saved in your browser on your device, not on our server.
3. Why we use it
- To create your account, sign you in and provide the game and the access you paid for — this is needed to perform our agreement with you.
- To take payments, manage subscriptions and refunds and keep the records that tax and accounting laws require.
- To answer your requests and fix problems you report.
- To protect the service and our users, prevent fraud and misuse and apply the country restriction — our legitimate interest and, where it applies, a legal obligation.
- To send you the messages the service needs, such as sign-in codes and notices about payments and access. We send marketing emails only with your consent.
The phone number or Telegram username is required to register; without it we cannot open an account for you. Everything else in your profile is optional.
4. Cookies and browser storage
- A sign-in cookie keeps you signed in for up to 90 days. It is necessary for the service to work.
- A language cookie and your browser’s local storage remember your language, your game progress, your cookie choice and other settings of the site.
We do not use analytics or advertising cookies at the moment. If we add them, we will ask for your consent first and update this policy. You can clear cookies and local storage in your browser at any time; this signs you out and removes the progress saved on that device.
5. Who receives your information
We do not sell your personal information. We share it only with the providers that run parts of the service for us, and only as far as they need it:
- Stripe — payments, subscriptions, the billing page and receipts. Stripe also uses payment data for its own fraud prevention and legal obligations under its privacy policy.
- Railway — hosting of the site, its database and backups.
- Resend — delivery of our emails, such as sign-in codes and invitations.
- Google — our support mailbox (Gmail), which receives your emails and problem reports.
We may also disclose information when the law requires it or when it is necessary to protect our rights, our users or the public.
6. International transfers
We are based in Canada, and our providers may store and process information in the United States, Canada and other countries where they operate. Where the law requires it, these transfers are covered by the providers’ data processing terms and other appropriate safeguards.
7. How long we keep it
- Account and profile information: while your account exists. When you ask us to delete your account, we delete this information, except what we must keep by law.
- Sign-in codes: 10 minutes. Sign-in sessions: up to 90 days, or until you sign out.
- Payment, subscription and refund records: for the period that tax and accounting laws require.
- Support emails and problem reports: as long as needed to handle your request and keep a record of it.
- Backups of the database are kept for a limited time and replaced by newer ones on a rolling basis.
8. Your rights
Depending on the law that applies to you, you can ask us to give you a copy of your personal information, correct it, delete it, restrict or object to its use, or give it to you in a portable format, and you can withdraw a consent you have given. Write to sovpali.apps@gmail.com from the email address of your account. We may ask you to confirm that the account is yours, and we answer within 30 days.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or to the data protection authority of the country where you live.
9. Security
The site works only over an encrypted connection, sign-in codes and sessions are stored in hashed form, and access to the database is limited to the people who run the service. Never send your sign-in code or full card details by email.
10. Adults only
The service is only for people aged 18 or over. We do not knowingly collect information about minors, and we delete an account if we learn that it belongs to a minor.
11. Changes to this policy
We may update this policy by publishing a new version on this page with a new effective date. If a change materially affects how we use your information, we will also tell you by email.