Privacy Policy

Last updated: July 20, 2026

1. Who we are (Data Controller)

This Privacy Policy explains how Hopper for Gaming ("we", "us", "our") collects, uses, and protects your personal data when you use our services at hopperforgaming.com and related sub-domains.

The data controller is Hopper for Gaming, a sole proprietorship registered in Israel under registration number 300316635, located at Hapalmah 11, Givatayim, Central District, Israel. Contact: henlachmani@hopperforgaming.com · +972 52 665 6161.

We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the UK GDPR, Israel's Protection of Privacy Law, and other applicable laws.

2. Key definitions

Personal data — any information relating to an identified or identifiable person.
Processing — any operation performed on personal data (collection, storage, use, disclosure, erasure, etc.).
Processor / service provider — a third party that processes personal data on our behalf and under our instructions.

3. Data we collect

We collect only what we need to run the service:

Account & contact data — your name (if provided) and email address, collected through our authentication provider, Clerk, when you create an account.
Credit-balance data — a user identifier and your credit balance, stored in our database to operate the credit system. This contains no name or email.
Your inputs to the AI — the prompts and text you submit are transmitted to our AI provider (Google, "Gemini") to generate a response. We do not store the content of your AI conversations on our own systems.
Payment data — when you buy credits, your payment details (e.g. card information) are collected and processed by Paddle, which acts as our Merchant of Record. We never receive or store your full card details.
Connection & usage data — technical data such as IP address and request logs (via our host, Vercel), and aggregate, cookieless usage statistics (page views, approximate country, device type) via Vercel Web Analytics.

We do not carry out advertising profiling or automated decision-making that produces legal effects about you, and we do not serve targeted advertising.

4. Why we process your data, and our legal bases

Purpose	Legal basis (GDPR Art. 6)
Create and manage your account; provide the AI service and credits	Performance of a contract
Process purchases of credits (via Paddle)	Performance of a contract
Keep the service secure and prevent fraud/abuse	Legitimate interests
Understand aggregate usage to improve the service (cookieless analytics)	Legitimate interests
Comply with tax, accounting, and other legal obligations	Legal obligation
Send optional service-related or marketing emails, where offered	Consent (which you may withdraw at any time)

5. Who we share data with (service providers)

We do not sell or rent your personal data. We share it only with the service providers needed to run the service, each bound by a data processing agreement:

Provider	Role	Location
Vercel Inc.	Hosting, request logs, cookieless analytics	United States
Neon Inc.	Database (credit balances)	United States
Clerk Inc.	Authentication / account management	United States
Google LLC ("Gemini")	AI processing of the inputs you submit	United States
Paddle.com Market Ltd.	Payments (Merchant of Record), invoicing, tax	United Kingdom / EU

We may also disclose data to public authorities where required by law, and to a successor entity in the event of a merger, acquisition, or sale of assets (in which case we will ensure equivalent protection).

6. International data transfers

Some providers are located in the United States, so your data may be transferred outside the EEA/UK/Israel. Where this happens we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) and, where the provider is certified, the EU-U.S. Data Privacy Framework (DPF) (for example, our host Vercel is DPF-certified). You may request a copy of the safeguards by contacting us.

7. How long we keep data

Account & credit data — for as long as your account is active, and up to 3 years after your last use, unless a longer period is required by law.
Transaction / payment records — retained by Paddle, and by us in pseudonymized form, for as long as required by tax and accounting law (typically up to 7 years).
AI conversation content — not stored by us.

When you delete your account we remove your authentication profile and credit balance; see the Terms of Use for the deletion procedure.

8. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. To exercise any right, email henlachmani@hopperforgaming.com. We will respond within the timeframes required by law.

9. Data security

We use appropriate technical and organizational measures, including encryption in transit and at rest, access controls, and data minimization. No system is perfectly secure; in the event of a personal-data breach we will notify affected users and the relevant authorities as required by law.

10. Cookies

We use only strictly necessary cookies (for authentication and security). We do not use analytics, advertising, or social-media cookies, and therefore do not display a cookie consent banner. See our Cookie Policy for details.

11. Children

Our services are intended for users aged 18 and over and are not directed to minors, and we do not knowingly collect the personal data of anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.

12. Changes to this policy

We may update this policy from time to time. Material changes will be posted here and, where appropriate, notified by email. The "last updated" date reflects the latest version.

13. Contact & complaints

Questions or requests: henlachmani@hopperforgaming.com · +972 52 665 6161 · Hapalmah 11, Givatayim, Central District, Israel.

You may also lodge a complaint with a supervisory authority — in Israel, the Privacy Protection Authority (PPA); in the EU/UK, your local data protection authority.