Last updated: 4 July 2026
Stakeout is operated by Loneli Apps, a company registered in France ("we", "us", "our"). We are the data controller for personal data collected through the Stakeout application and website (trystakeout.com). Contact: support@trystakeout.com
We collect the following categories of personal data: — Account data: email address, age confirmation, display name. — Goal data: goal types, stake amounts, session durations, timestamps, completion status. — Proof submissions: photos taken with the in-app camera during active sessions. Photos are captured at random intervals while a session is running (the app tells you before the session starts) and when you submit proof, including the challenge code overlay. Photos are stored in a private bucket, are visible only to you and our review team, and are never used for any other purpose. — Payment data: we do not store card numbers. Stripe stores your payment method. We store only a Stripe Customer ID and payment method identifier (last 4 digits, card brand). — Device and usage data: app version, device type, IP address, crash logs, and usage patterns collected for service improvement. — Support communications: messages you send us via the Help & Disputes feature, including any attached evidence.
We use your data to: — Provide and operate the Stakeout service. — Verify goal completion and process stake forfeiture. — Review disputes and support requests. — Process payments via Stripe. — Send transactional emails (goal outcomes, dispute decisions). — Detect fraud and maintain platform security. — Comply with legal obligations.
For users in the European Union, our legal bases are: — Contract: processing necessary to operate your account and fulfill our service. — Legitimate interests: fraud prevention, security, and service improvement. — Legal obligation: compliance with applicable laws. — Consent: where explicitly requested (e.g. optional marketing communications).
We share data with the following third parties: — Stripe, Inc. (USA): payment processing. Stripe is certified PCI DSS Level 1. Data transfer to the USA is covered by Standard Contractual Clauses. See stripe.com/privacy. — Supabase, Inc.: database, file storage, and authentication infrastructure. Data is stored on servers in the EU where possible. — Resend, Inc. (USA): transactional email delivery (e.g. dispute decisions, password resets). Only your email address and the message content are shared. — Expo (650 Industries, Inc., USA): push notification delivery. Only an anonymous device push token is shared. We do not sell your personal data to any third party, and we do not share it with advertisers or data brokers.
We retain your data for as long as your account is active. If you delete your account: — Account and profile data is deleted within 30 days. — Goal and submission data is anonymised and retained for up to 12 months for fraud prevention and dispute resolution. — Payment records are retained for 7 years to comply with French accounting law. — Support communications are retained for 2 years.
Under GDPR and applicable French law, you have the right to: — Access: request a copy of your personal data. — Rectification: correct inaccurate data. — Erasure: request deletion of your data ("right to be forgotten"), subject to legal retention obligations. — Restriction: request that we limit how we process your data. — Portability: receive your data in a structured, machine-readable format. — Object: object to processing based on legitimate interests. — Withdraw consent: at any time, where processing is based on consent. To exercise any of these rights, contact us at support@trystakeout.com. We will respond within 30 days. You also have the right to lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés) at cnil.fr.
The Stakeout app does not use cookies. The website (trystakeout.com) uses only essential session cookies required for the card setup flow. No tracking or advertising cookies are used.
We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.
Stakeout is strictly for adults aged 18 and over, because real money is at stake. You must confirm you are 18 or older to create an account, and our Terms prohibit use by anyone younger. We do not knowingly collect or process personal data from anyone under 18, and in particular from children under 16 (or the applicable age of digital consent in your country — 15 in France). We do not direct the app at children, do not show it in children's categories, and do not use its data for profiling or advertising of any kind. If we become aware that an account belongs to someone under 18, we will close the account, refund any charges where legally required, and delete all associated data — including proof photos — immediately. If you believe a minor is using Stakeout, contact us at support@trystakeout.com and we will act within 72 hours.
We may update this Privacy Policy from time to time. We will notify you of significant changes via the App or email. The date at the top of this page indicates when it was last revised.
For any privacy-related questions or to exercise your rights: Email: support@trystakeout.com Loneli Apps France