Privacy Policy

Who operates Stimpak

Stimpak is operated by Zektek LLC (“Zektek,” “we,” “us,” or “our”). This policy applies to stimpak.com, its account and admin areas, and the API and content services used to operate Stimpak.

Information we collect

Information you provide

• Your name, email address, and password when you register with email and password. Passwords are stored as hashes, not readable passwords.
• Your name, email address, and message if you use the contact form
• Game or event details, links, and images that you submit for a listing through contact or authorized publishing tools

The contact form is delivered through Formspree, a third-party form processor that receives your submission and forwards it to us. Account registration is handled separately by Stimpak’s authentication system. We do not use the details you send for marketing, and we do not add you to any mailing list.

Social sign-in

If you choose Google, Twitch, or Discord sign-in, we receive the account identifier and profile information supplied by that provider, which may include your name or username, email address, email-verification status, and profile image. We store the provider association and authentication tokens supplied for the sign-in flow, including access or refresh tokens where provided. We do not receive your password for Google, Twitch, or Discord.

The provider processes your sign-in request under its own privacy policy and learns that you are using it to sign in to Stimpak. Signing in does not give Stimpak access to your reward progress, private messages, or game library as part of the current login feature.

Information collected automatically

• Standard web server logs (e.g. IP address, browser type) collected by our hosting provider
• Website usage data (e.g. pages visited, referring site) via Google Analytics, which sets cookies such as _ga in your browser
• Browsing-preference cookies that remember choices like card or table view, grouping, and sort order when you change those settings. These contain the selected preferences and are set to last for up to one year
• Authentication cookies for public and administrator sign-in, including cookies used to complete social sign-in and maintain a session. Session records may include your account identifier, expiration time, IP address, and browser or device information

We do not use advertising or marketing cookies on this website.

Why we process this information

We use this information only to:

• provide and maintain the website, create accounts, authenticate users, enforce access permissions, and remember browsing preferences;
• respond to messages and event submissions;
• understand, in aggregate, how the website is used so we can improve it; and
• detect and prevent security issues.

We do not sell personal information, use website data for targeted advertising, or build advertising profiles about you.

Public listings and automated imports

Stimpak displays information about games, events, rewards, and related statistics. This content does not represent an individual visitor’s viewing, playing, or reward history. Public listings may appear on the site and in feeds or API results. Contact email addresses, passwords, and authentication tokens are not part of those listings.

For authorized publishing tools, we also keep operational records such as API-token identifiers, creation sources, and synchronization results to manage access and maintain listing quality.

Service providers

Formspree processes contact-form submissions. Neon stores game, event, account, and authentication records; Stimpak uses Better Auth software to manage authentication. Cloudflare operates API, automated import, and image-storage services. Google Analytics provides usage analytics, and our website hosting provider processes request information to serve the site. Google, Twitch, and Discord also process requests when you choose their sign-in options. Providers receive information relevant to their services and process it under applicable agreements and their privacy policies.

Retention and your choices

We retain account information while your account is active and as needed to operate the service, address security issues, and meet legal obligations. Session and provider-token records are used to support authentication and may expire or be replaced over time. Analytics data is retained according to our Google Analytics configuration. Messages and event submissions are retained for as long as needed to handle your request and keep a reasonable record of our correspondence.

You can control or delete cookies, including opting out of Google Analytics, through your browser settings or an extension such as Google’s Analytics Opt-out Add-on. Blocking cookies will interfere with public and administrator sign-in and prevent browsing preferences from being saved. Public listings can be browsed without creating an account. You can revoke a social provider’s access through that provider’s settings; this does not by itself delete your Stimpak account or its existing sessions. Depending on where you live, you may have rights to access, correct, or delete the personal information we hold about you; to make such a request, please contact us.

You may also contact us to request account closure. We may need to verify that you control the account before acting on a request. Some records may need to be retained for security or legal reasons, and backup copies may remain until replaced through normal backup processes.

Security and children

We use reasonable technical measures to protect the information this website processes. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Stimpak is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

Changes to this policy

We may update this policy as the website changes. We will post the revised policy here and update the effective date above.

Contact us

For questions, privacy requests, or concerns, please contact us.