Stacked

Stacked

Privacy Policy

Last Updated: March 8, 2026

Stacked Insights, Inc.

1. Introduction

Stacked Insights, Inc. (“Stacked,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, retain, and protect personal information in connection with the Stacked platform, including our mobile application, our website located at https://stacked.xyz (the “Site”), and all related features, functionality, and services (collectively, the “Platform”).

Stacked is a performance-based rewards platform that enables users to earn rewards by engaging with sponsored game offers, advertisements, and cashback opportunities. In providing these services, we work with third-party game publishers, advertisers, and attribution technology providers. This Privacy Policy explains what data is collected as part of that process and how it is used.

Please read this Privacy Policy carefully. By accessing or using the Platform, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your information as described herein. If you do not agree with this Privacy Policy, you must not access or use the Platform.

This Privacy Policy is incorporated into and subject to our Terms of Service, available at Terms of Service. Capitalized terms not defined herein have the meanings given to them in the Terms of Service.

2. Users Under the Age of 18

The Platform is intended solely for users who are eighteen (18) years of age or older. We do not knowingly collect, solicit, or maintain personal information from any person under the age of 18. If you are under 18, you may not access or use the Platform under any circumstances.

If we learn that we have inadvertently collected personal information from a person under the age of 18, we will promptly delete that information from our systems. If you believe that we may have collected personal information from a minor, please contact us immediately at hello@stacked.xyz.

Because it may be difficult to verify age online, we encourage parents and guardians to monitor their children’s online activities and to use available parental control tools to limit access to the Platform and similar services.

3. Information We Collect

We collect information about you in the following ways:

3.1 Information You Provide Directly

Account and Registration Information

When you create a Stacked account, we collect the information you provide, which may include your name, email address, phone number, and password, or authentication credentials from a supported third-party sign-in provider (Google or Apple). We use this information to create and manage your account, authenticate your identity, provide access to Platform features, and communicate with you regarding your account.

Payout and Financial Account Information

When you request a Reward redemption via PayPal, Venmo, or another supported payment provider, we collect the payment account information you provide, such as your PayPal email address, Venmo username, or other payment account identifier. We do not store full financial account credentials, card numbers, or bank account details on our servers. Payout transactions are processed by regulated third-party payment service providers subject to their own terms and privacy policies. We may retain records of completed payout transactions for purposes of fraud prevention, regulatory compliance, and tax reporting.

Identity Verification Information

As described in our Terms of Service, we may require identity verification (KYC) as a condition of processing a Reward redemption. In connection with KYC verification, we may collect copies of government-issued identification documents (such as a passport or driver’s license) and such other documentation as required by our third-party verification service provider. Identity verification data is collected and processed only to the extent necessary to verify your identity and satisfy applicable legal and regulatory requirements.

Communications and Support

When you contact us for customer support, provide feedback, or otherwise communicate with us, we collect and retain the content of those communications and any information you provide in connection therewith, including your name, contact information, and a description of your inquiry. This information is used to respond to your inquiry, resolve disputes, and improve our services.

3.2 Information Collected Automatically

Device and Technical Information

When you access or use the Platform, we and our third-party service providers automatically collect certain technical information about your device and connection, including:

  • device type, model, and manufacturer;
  • operating system and version;
  • browser type and version (for web access);
  • IP address;
  • unique device identifiers; and
  • language settings, time zone, and date and time of access.

This information is used to ensure platform compatibility, optimize the user experience, detect and prevent fraud and unauthorized access, and analyze and address technical issues.

Device Advertising Identifiers (IDFA / GAID)

We collect your device’s advertising identifier — the Identifier for Advertisers (IDFA) on iOS devices and the Google Advertising ID (GAID) on Android devices — when you use the Platform. Advertising identifiers are used for the following purposes:

  • to attribute game installs and in-app events to the applicable Stacked offer that prompted the download or engagement, for purposes of verifying offer completion and crediting Rewards to your account;
  • to share attribution data with our third-party Advertiser partners to confirm qualifying user acquisition events;
  • to detect duplicate installs, fraudulent activity, and other forms of offer abuse; and
  • to facilitate the delivery of relevant offers and promotional content within the Platform.

You may limit the collection of your advertising identifier by adjusting your device privacy settings. On iOS, you can disable personalized advertising or reset your IDFA via Settings > Privacy & Security > Tracking. On Android, you can opt out of personalized ads or reset your GAID via Settings > Privacy > Ads. Please note that limiting advertising identifier collection may affect your ability to complete Game Offers and receive associated Rewards.

Game Install and In-App Event Data

The Platform is designed to track and verify user engagement with third-party games and applications offered through the Platform. When you install a game or complete an in-app milestone in connection with a Stacked Game Offer, we and our third-party attribution partners collect data about that event, including:

  • the identity of the game or application installed;
  • the date and time of installation and subsequent in-app events;
  • in-app progress milestones relevant to offer completion requirements (e.g., reaching a specified level or completing a specified in-game action);
  • your device advertising identifier and IP address at the time of the event; and
  • other technical parameters required by the attribution platform to verify the event.

This data is used solely to verify offer completion and credit Rewards to your account, to detect and prevent fraudulent attribution, and to fulfill our reporting obligations to Advertiser partners.

We use the following third-party attribution and advertising technology partners in connection with offer tracking:

  • Singular (singular.net) — mobile attribution and analytics;
  • IronSource / Unity LevelPlay (is.com / unity.com) — offer mediation and attribution; and
  • AppLovin (applovin.com) — offer mediation and user acquisition analytics.

Each of these partners operates under its own privacy policy and data processing terms. We encourage you to review their privacy policies to understand how they process data in connection with the Platform.

Geolocation Data

We collect approximate geolocation information derived from your IP address and, where you have granted permission, precise geolocation data from your mobile device’s GPS or location services. Geolocation data is used for the following purposes:

  • to determine your eligibility for specific Game Offers, Cashback Offers, and Redemption Prizes, which may be restricted to users in certain geographic regions;
  • to comply with applicable laws and regulations, including restrictions on sweepstakes participation, cryptocurrency redemption, and other activities that may vary by jurisdiction;
  • to detect and prevent fraud, including the use of VPNs or proxy services to misrepresent your geographic location; and
  • to deliver localized content and offers.

You may disable precise location access through your device settings. Disabling location services may affect the availability of certain offers and Platform features.

Browser and Web Activity Data

When you access the Platform through a web browser, we and our third-party analytics providers collect data about your web activity on the Site, including:

  • pages viewed and links clicked;
  • time spent on pages and navigation paths;
  • referral URLs (the webpage from which you arrived at the Site);
  • browser type, version, and screen resolution; and
  • interactions with Platform features and content.

This data is collected using cookies, pixel tags, and similar tracking technologies, as further described in Section 7 below. Web activity data is used to analyze Platform usage, optimize user experience, personalize content and offers, and measure the effectiveness of our promotional activities.

Usage and Engagement Data

We collect data about how you interact with the Platform, including the offers you view and engage with, your Rewards earning and redemption history, your session duration, and other engagement metrics. This data is used to operate and improve the Platform, detect fraudulent activity, and personalize your experience.

3.3 Information Collected from Third Parties

We may receive information about you from third parties, including:

  • Authentication providers (Google, Apple): When you register or sign in using a third-party authentication service, we receive basic profile information from that provider (such as your name and email address) in accordance with your privacy settings on that platform.
  • Attribution and analytics partners: As described in Section 3.2 above, we receive install and event data from our attribution partners (Singular, IronSource/Unity LevelPlay, AppLovin) to verify offer completions.
  • Fraud prevention and identity verification providers: We may receive identity verification results and fraud risk signals from third-party verification service providers used in connection with our KYC process.
  • Payment providers: We may receive confirmation of completed payout transactions and fraud alerts from our third-party payment service providers.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

Platform Operation and Service Delivery

We use your information to create and manage your Account, authenticate your identity, process your Reward earnings and redemptions, verify offer completions, facilitate payouts, and provide customer support.

Fraud Prevention and Security

We use device identifiers, advertising IDs, IP addresses, geolocation data, and behavioral signals to detect and prevent fraudulent activity, including bot activity, use of VPNs or emulators to circumvent geographic restrictions, duplicate account creation, manipulation of offer tracking, and unauthorized redemption attempts.

Attribution and Advertiser Reporting

We use game install and in-app event data, advertising identifiers, and related technical data to verify user acquisition events and report confirmed offer completions to our Advertiser partners. This is a core function of the Platform.

Regulatory Compliance and Legal Obligations

We process your information as necessary to comply with applicable laws and regulations, including tax reporting obligations (e.g., IRS Form 1099 reporting for qualifying Reward redemptions), anti-money laundering and KYC requirements applicable to financial payouts, and other legal obligations.

Analytics and Product Improvement

We analyze aggregated and de-identified usage data to understand how the Platform is used, identify areas for improvement, develop new features and offers, and assess the performance of our Rewards Program.

Communications

We use your contact information to send you transactional communications (such as Reward confirmations, redemption notifications, and account security alerts), which are necessary for the operation of the Platform and cannot be opted out of. We may also send you promotional communications about new offers, features, and promotions, subject to your communication preferences. You may opt out of promotional communications at any time by clicking the unsubscribe link in any such communication or by adjusting your notification preferences in your account settings.

Legal Claims and Dispute Resolution

We may use your information to establish, exercise, or defend legal claims, including in connection with Reward disputes, fraudulent activity investigations, and arbitration proceedings.

5. How We Share Your Information

We do not sell your personal information to third parties for their own marketing purposes. We may share your personal information in the following circumstances:

5.1 Advertiser Partners

We share limited data with our third-party Advertiser partners (game publishers and other offer sponsors) solely as necessary to confirm verified offer completions and facilitate the user acquisition campaigns they sponsor through the Platform. The data we share with Advertisers for this purpose typically includes your advertising identifier, install timestamp, in-app event milestones, and device type. We do not share your name, email address, or payout account information with Advertisers.

5.2 Attribution and Technology Partners

As described in Section 3.2, we work with Singular, IronSource/Unity LevelPlay, and AppLovin as attribution and offer mediation partners. These partners receive install and event data from your device in connection with their SDKs embedded in or accessed by the Platform and the games you play through it. Each partner processes data under its own privacy policy and, where applicable, data processing agreements with us.

5.3 Payment Service Providers

We share your payout account information (e.g., PayPal email or Venmo username) and payout transaction details with our third-party payment service providers solely as necessary to process your Reward redemptions. These providers operate under their own terms of service and privacy policies.

5.4 Identity Verification Providers

We share identity documentation and related information with our third-party KYC verification service providers solely as necessary to verify your identity in connection with a redemption request. These providers are bound by confidentiality obligations and data processing agreements and may not use your identity information for any other purpose.

5.5 Service Providers and Contractors

We engage third-party service providers and contractors to support our business operations, including cloud hosting, data analytics, fraud detection, customer support, and communications. These service providers process personal information on our behalf under binding contractual obligations that restrict them to processing data only in accordance with our instructions and for no independent purpose.

5.6 Business Transfers

In the event of a merger, acquisition, reorganization, asset sale, bankruptcy, or other corporate transaction involving Stacked, your personal information may be transferred to the acquiring or successor entity as part of the transaction. We will notify you of any such transfer and any material changes to the processing of your personal information that may result from it.

5.7 Legal Requirements and Protection of Rights

We may disclose your personal information if we believe in good faith that such disclosure is necessary to: (a) comply with any applicable law, regulation, court order, or governmental request; (b) enforce our Terms of Service or other agreements; (c) detect, prevent, or address fraud, security issues, or technical problems; or (d) protect the rights, property, or safety of Stacked, our users, or the public.

5.8 Aggregated and De-Identified Data

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for any purpose, including industry research, analytics, and marketing.

6. Data Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. The criteria we use to determine retention periods include:

  • Account data is retained for the duration of your account and for a reasonable period thereafter to address any post-termination inquiries or disputes, or as required by applicable law.
  • Offer completion and Rewards data is retained for a period sufficient to resolve disputes, comply with tax reporting obligations, and satisfy audit requirements.
  • Identity verification documents are retained only as long as necessary to complete the verification process and comply with applicable anti-money laundering and KYC regulations.
  • Transaction and payout records are retained as required by applicable financial recordkeeping and tax laws.
  • Fraud detection and security logs are retained for a period sufficient to investigate and address suspected fraudulent activity.

When personal information is no longer needed, we will delete or anonymize it in accordance with our data retention schedules and applicable legal obligations.

7. Cookies and Tracking Technologies

We and our third-party partners use cookies, pixel tags, software development kits (SDKs), and similar tracking technologies to collect information about your use of the Platform, as described in this Section.

7.1 Types of Technologies Used

Cookies

Cookies are small text files stored on your device by your web browser. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted or expired). We use cookies to authenticate users, maintain session state, remember your preferences, analyze Platform usage, and deliver relevant content.

Pixel Tags

Pixel tags (also known as web beacons or clear GIFs) are tiny, invisible images embedded in web pages or emails. We use pixel tags to track page visits, measure the effectiveness of email communications, and collect usage data.

Mobile SDKs

Our mobile application incorporates third-party software development kits (SDKs) from our attribution and advertising technology partners (Singular, IronSource/Unity LevelPlay, and AppLovin). These SDKs collect advertising identifiers and install/event data as described in Section 3.2 above.

7.2 Categories of Cookies

We use the following categories of cookies on the Site:

  • Strictly Necessary Cookies: These cookies are essential for the Platform to function and cannot be disabled. They are used for authentication, security, and session management.
  • Functional Cookies: These cookies enable enhanced functionality and personalization, such as remembering your language preferences and account settings.
  • Analytics Cookies: These cookies collect information about how you use the Site, such as which pages you visit and how long you spend on each page. This data is used in aggregate to improve the Platform.
  • Advertising and Attribution Cookies: These cookies are used to track offer engagement and attribute game installs and other conversion events to your Stacked account.

7.3 Managing Cookies

You may manage your cookie preferences through our cookie management panel, accessible via the cookie banner displayed upon your first visit to the Site. You may also disable cookies through your browser settings; however, disabling certain cookies may affect the functionality of the Platform. Our Site does not respond to browser “Do Not Track” signals.

8. Data Security

We implement and maintain reasonable and appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, destruction, or loss. These measures include encryption of data in transit and at rest, access controls and authentication requirements, regular security assessments, and vendor security review processes.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information, and we disclaim any liability for unauthorized access or disclosure that occurs despite our reasonable security measures.

In the event of a data breach that creates a risk to your rights and interests, we will: (a) assess the scope and nature of the breach; (b) notify affected users within the timeframes required by applicable law; (c) report the breach to relevant data protection authorities where required; and (d) take appropriate corrective measures. If you suspect that your account has been compromised or that your personal information has been subjected to unauthorized access, please contact us immediately at hello@stacked.xyz.

9. International Transfers of Personal Information

Stacked is based in the United States, and your personal information will be stored and processed in the United States. If you access the Platform from outside the United States, your personal information will be transferred to and processed in the United States, which may have data protection laws that differ from those in your country of residence.

For users located in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on appropriate transfer mechanisms to ensure that any transfer of personal information to the United States complies with applicable law, including Standard Contractual Clauses as approved by the European Commission where applicable.

By using the Platform, you acknowledge and consent to the transfer of your personal information to the United States and to its processing there as described in this Privacy Policy.

10. Your Privacy Rights

10.1 General Rights

Depending on your jurisdiction, you may have the following rights with respect to your personal information:

  • Right of Access: the right to request confirmation of whether we process personal information about you and, if so, to receive a copy of that information.
  • Right to Correction: the right to request correction of inaccurate or incomplete personal information.
  • Right to Deletion: the right to request deletion of your personal information, subject to certain exceptions (such as our obligations to retain information for legal, regulatory, or fraud prevention purposes).
  • Right to Restriction: the right to request that we restrict the processing of your personal information in certain circumstances.
  • Right to Data Portability: the right to receive your personal information in a structured, commonly used, machine-readable format.
  • Right to Object: the right to object to certain types of processing, including processing for direct marketing purposes.
  • Right to Withdraw Consent: where we rely on your consent to process personal information, the right to withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please submit a request to hello@stacked.xyz. We will respond to your request within the timeframe required by applicable law. We may need to verify your identity before processing your request.

10.2 California Residents — CCPA/CPRA Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act (collectively, “CCPA/CPRA”), in addition to those described in Section 10.1. These rights include:

  • The right to know the categories and specific pieces of personal information we have collected about you and the purposes for which it is used.
  • The right to delete personal information we have collected from you, subject to certain exceptions.
  • The right to correct inaccurate personal information.
  • The right to opt out of the “sale” or “sharing” of your personal information as defined under the CCPA/CPRA. We do not sell personal information for monetary consideration. However, our sharing of advertising identifiers and attribution data with Advertiser partners and attribution technology providers may constitute “sharing” for cross-context behavioral advertising purposes under the CCPA/CPRA. You may opt out of such sharing by adjusting your device advertising identifier settings as described in Section 3.2, or by contacting us at hello@stacked.xyz.
  • The right not to receive discriminatory treatment for exercising your CCPA/CPRA rights.

To submit a verifiable consumer request under the CCPA/CPRA, please contact us at hello@stacked.xyz. We will verify your identity prior to processing your request. You may also designate an authorized agent to submit a request on your behalf, provided that such agent provides proof of your written authorization.

For complaints that have not been resolved to your satisfaction, California residents may contact the California Privacy Protection Agency (cppa.ca.gov) or the California Attorney General’s office.

10.3 EEA, UK, and Swiss Residents — GDPR Rights

If you are located in the European Economic Area, the United Kingdom, or Switzerland, your personal information is processed subject to Regulation (EU) 2016/679 (the “GDPR”) or equivalent applicable legislation. In addition to the rights described in Section 10.1, you have the right to lodge a complaint with the data protection supervisory authority in your country of residence.

Our legal bases for processing personal information include: (a) performance of our contract with you (e.g., account management, Reward delivery, payout processing); (b) compliance with legal obligations (e.g., KYC, tax reporting); (c) our legitimate interests (e.g., fraud prevention, attribution, platform security and improvement); and (d) your consent (e.g., promotional communications, non-essential cookies).

For the purposes of the GDPR, Stacked Insights, Inc. is the data controller of personal information processed in connection with the Platform.

11. Links to Third-Party Websites and Applications

The Platform may contain links to third-party websites, applications, and services, including the games offered through our Game Offers. This Privacy Policy does not apply to any third-party website, application, or service. We are not responsible for the privacy practices or content of any third party, and we encourage you to review the privacy policies of any third-party service you access through the Platform before providing any personal information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or the features of the Platform. When we make changes, we will update the “Last Updated” date at the top of this page and post the revised Privacy Policy on the Platform.

For material changes, we will provide more prominent notice, such as an in-app notification or an email to the address associated with your account, prior to the change taking effect. Your continued use of the Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices. If you do not agree to any changes, you should discontinue your use of the Platform.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Stacked Insights, Inc.
Email: hello@stacked.xyz
Website: https://www.stacked.xyz