We've kept this in plain language. In short: what we collect, why, how we handle it, and your rights — all below. We may update this policy; we'll notify you of material changes in the app or on the site.
1. What personal data we collect
You provide: email, password (stored encrypted; we can't read it), handle, display name. Generated through use: match/tournament records, posts and uploaded images, replies, likes, who you've blocked. For notifications: push token (FCM). Automatically: device model, version, crash diagnostics, basic usage logs.
2. Why we collect it
Account creation and authentication, showing the community feed and rankings, push notifications, handling abuse reports, fraud prevention and safety, service improvement. We don't use your data for purposes beyond these.
3. What's public
Please note: your handle, posts, uploaded images, replies and records are public — anyone (including signed-out visitors) can see them, and they may be indexed by search engines.Don't post anything you don't want public. When you report content, the report is sent to our admins (via Telegram) for review.
4. Third parties we share with
We use these processors, who may only handle your data on our instructions: Google Firebase (account, database, storage), Sentry (error monitoring), Resend (system email), Telegram (admin alerts), Stripe (payments, web only; card data handled by Stripe, we don't store card numbers). We do not sell your personal data.
5. Cross-border processing
These providers (including Google) may run servers outside Hong Kong, including the United States. This means your data may be stored and processed outside Hong Kong. We contractually require these providers to protect your data in line with this policy and applicable law.
6. Retention
We keep your data while your account is active. After you delete your account, your identity, handle, records, posts, replies and uploaded images are deleted or anonymised immediately; financial records (payments, withdrawals, article purchases) are retained as required by law and audit, marked as belonging to a deleted user.
7. Your rights
You may request access to or correction of the personal data we hold about you. Email us (see §13). The law permits a fee not exceeding what is necessary for an access request.
8. Account & data deletion
You can delete your account anytime in the app (Profile → "Delete Account"). For help or a web-based deletion request, see the deletion page on topcut-hk.com. What's removed vs retained: see §6.
9. Security
We use transport encryption, access controls and other measures. Honestly: no system can guarantee absolute security, and we won't claim it can. We'll handle any breach affecting you as the law requires.
10. Minors
TopCut HK is for people aged 13 or older only.You must confirm you're 13+ at sign-up. If we find an account holder is under 13, we'll delete the account. If you're a minor, please use TopCut HK with a parent or guardian's awareness.
11. Cookies & local storage
We use cookies and local storage to remember your login and preferences. We do not use them for third-party ad tracking.
12. Policy updates
We may revise this policy from time to time. Material changes will be announced in the app or on the site.
13. Contact / complaints
Privacy contact: privacy@topcut-hk.com. If you believe we've breached the Personal Data (Privacy) Ordinance, you may complain to the Hong Kong Privacy Commissioner for Personal Data (PCPD).
See also: Terms & Trademark Notice