KeepUp

Privacy Policy

Last updated: August 29, 2026

1. Controller and contact

KeepUp Cards (“KeepUp,” “we,” “us,” or “our”) operates the website at www.keepupcards.com. For applicable data protection law, KeepUp Cards is the controller of personal information processed through KeepUp, except where a service provider processes information as an independent controller (for example, a payment processor with respect to payment card data).

This Privacy Policy explains how we collect, use, disclose, and protect personal information. It should be read together with our Terms of Service.

Privacy questions and requests: support@keepupcards.com or our Contact page. A postal address for privacy and legal notices is available on request at that email address. If we appoint a representative in the European Union or the United Kingdom, we will publish those details on this page.

2. Scope

This policy applies to personal information about:

  • Visitors who browse the directory
  • People who create a KeepUp account
  • People who submit a shop, claim a listing, or manage a shop
  • People who subscribe to email or contact us
  • Contacts associated with a shop listing (for example, a public shop email address)

3. Categories of information we collect

3.1 Information you provide

  • Identifiers and account details: name, email address, password (stored by our authentication provider), and whether the account is a visitor account or a shop-owner account
  • Shop submissions: shop name, address, description, shop telephone number, shop email, optional website, games, and social links, plus the submitter’s IP address
  • Claims: name, role, email, telephone number, website or social links, verification method, optional message, and related shop identifiers
  • Owner updates: listing copy, hours, photographs, public contact details, and similar shop information
  • Contact form messages: name, email, subject, and message, which we receive by email
  • Newsletter or similar email sign-up: email address, the page on which you subscribed, and IP address
  • Paid sponsored or featured placement: name, email, shop details, and billing identifiers returned by our payment processor (we do not store full payment card numbers)
  • Records of agreement: time, email, document version, account kind, source of the agreement, and IP address when you accept the Terms and this policy

3.2 Information collected automatically

  • Internet and device data: IP address, browser type, device type, and approximate location derived from IP address (not precise geolocation)
  • Usage data: pages viewed, referring site, and approximate time on site, including data collected by analytics tools on the site
  • Session information needed to keep you signed in
  • Shops you save while signed in (stored with your account)
  • Shops you save in your browser before you have an account (stored on your device, and imported into your account if you later sign in)
  • Listing-email tracking: if a unique link in a listing email is used, we may record the first click, including anonymized IP address, browser name, device type, and referring page. We do not use a hidden email-open pixel

3.3 Information from other sources

We may compile or update listings from publicly available sources, from maps or business listings, and from people who submit shops. Public business information on a listing is treated as directory content. Personal email addresses or telephone numbers you send only through a claim or contact form are not published as directory fields unless you ask us to publish them or they already appear as public listing information. A shop’s public listing email or telephone number, when shown on the shop page, is public.

3.4 Required versus optional information

An email address and password are required to create an account. Submitting a shop requires shop name, address, description, telephone number, email, city, state, postal code, and country. Claim and contact forms require the fields marked as required on those forms. Newsletter subscription requires an email address. If you do not provide required information, we cannot provide the related feature. This policy still applies if you use a form without creating an account.

4. Public versus non-public information

Public: shop pages and directory pages are intended to be found by players and by search engines. Business name, address, hours, games, public website, photographs, and the shop telephone number or listing email when we display them on the shop page are public.

Non-public: account passwords, claim telephone numbers, owner login emails when they are not shown on the listing, newsletter lists, agreement logs, payment identifiers, internal send logs, pending shop submissions, and claim files are not published as part of the public directory.

5. Purposes and legal bases

If you are in the European Economic Area, the United Kingdom, or another jurisdiction with similar rules, we process personal information only where a legal basis applies. Checking a box that you agree to the Terms of Service and this Privacy Policy is how we form a contract and record that these documents were presented to you. It is not consent under data protection law for every processing activity described here.

  • Performance of a contract: creating and operating your account, processing a claim, providing owner tools, and providing paid placement you ordered
  • Legitimate interests: operating a public shop directory; keeping listings useful and accurate; preventing fraud and abuse; understanding how the site is used in aggregate; and contacting a shop about its public listing using an email associated with that listing, where that contact is reasonably expected in connection with a business listing. You may object to processing based on legitimate interests as described in Section 12.
  • Consent: optional newsletters and similar marketing email to addresses that subscribed. You may withdraw consent at any time by unsubscribing. Withdrawal does not affect processing already carried out.
  • Legal obligation: keeping records, responding to lawful requests, and meeting tax or accounting requirements for paid features

We use information to:

  • Provide, maintain, and improve the directory and accounts
  • Review submissions and claims, and prevent fraud or false ownership claims
  • Send service email (password reset, claim status, security)
  • Send newsletters you subscribed to, and listing-related email as described in the Terms of Service
  • Honor unsubscribe and suppression requests
  • Measure whether listing-email links were used (clicks), so that we can operate outreach related to the directory and avoid repeated contact where a listing was already visited from a message
  • Process sponsored-placement orders
  • Protect KeepUp, our users, and the public (security, abuse, and legal claims)

6. Email, unsubscribe, and tracking links

Newsletter and listing emails include an unsubscribe link. That link opens our unsubscribe page with a signed token. The page does not accept an email address typed in by itself. You may also email support@keepupcards.com to opt out. We maintain a suppression list so that we do not email an address that has unsubscribed, hard-bounced, or been marked as spam, except where we must send a purely transactional message (for example, a password reset or a claim invitation).

Listing emails may include a unique link to the shop page. Use of that link (a click) indicates that someone visited the listing from that message. We may store limited technical data about that first click, as described in Section 3.2. We do not use this information to sell a browsing profile to advertisers, and we do not record whether an email was opened unless the recipient uses the link.

7. Disclosures of information

We do not sell personal information for monetary consideration. In the twelve (12) months before the date of this policy, we have not sold personal information for money.

We may disclose information to:

  • The public: listing content we publish, as described above
  • Service providers (processors): companies that host the site, store data, send email, process payments, provide analytics, or otherwise help us operate KeepUp, under instructions and appropriate contracts
  • Independent controllers: for example, a payment processor with respect to payment card data
  • Professional advisers and public authorities: where required by law, to protect rights and safety, or in connection with a dispute
  • A successor: if KeepUp is transferred, information may transfer with it, subject to this policy or a successor notice

KeepUp may link to third-party websites or community spaces. Those services have their own privacy practices. We are not responsible for them.

Certain analytics technologies can be treated as “sharing” under some U.S. state laws because they help measure or improve the site. We do not use personal information to show you ads for unrelated products on third-party sites. You may limit many of these technologies through your browser settings. You may also email us to request an opt-out of such sharing to the extent required by applicable law.

8. Additional U.S. state privacy information

Depending on your state of residence, you may have rights to know, access, correct, delete, and opt out of the “sale” or “sharing” of personal information, and not to be discriminated against for exercising those rights. We will not deny you the public directory because you made a privacy request.

Categories of personal information we collect are described in Section 3 (identifiers; commercial information related to paid placement; internet and electronic activity; coarse location derived from IP address; and professional or employment-related information in a claim). We collect them for the purposes in Section 5. We do not collect Social Security numbers, financial account numbers (other than processor tokens), or precise geolocation.

Account login credentials are treated as sensitive personal information where that term applies. We use them only to provide the account and to secure KeepUp. We do not use sensitive personal information to infer characteristics about you. We do not currently detect or honor “Do Not Track” or Global Privacy Control browser signals automatically. You may email us to request an opt-out of analytics sharing to the extent required by applicable law. Authorized agents may submit requests where the law allows, with proof of authorization.

9. International transfers

KeepUp is operated from the United States. If you access KeepUp from another country, your information may be processed in the United States or in other countries where our service providers operate. Those countries may not provide the same legal protections as your home country. Where required by applicable law, we use appropriate safeguards for such transfers, including standard contractual clauses approved for international transfers, or another lawful transfer mechanism.

10. Cookies and similar technologies

Essential: we use cookies or similar storage to keep you signed in and to protect the site. These are necessary to provide the service you request. The site may not function correctly if you block them.

Analytics: we use analytics tools on the site, including PostHog, Google Analytics, and Vercel Analytics, that may set cookies or read device identifiers to understand traffic and improve the directory. Some tools are configured to reduce identifiability (for example, by not storing a full IP address where the tool allows). These cookies are not strictly necessary. We do not currently display a cookie-consent banner, and analytics may load when you visit. You may block non-essential cookies in your browser. Blocking analytics cookies will not usually prevent you from browsing public shop pages. If you want us to limit analytics related to you, email support@keepupcards.com.

On your device: if you save shops before creating an account, that list may be stored locally in your browser until you import it into an account or clear your browser data.

11. Retention

We retain personal information only for as long as needed for the purposes described in this policy, including:

  • Account and owner records: for the life of the account, and a reasonable period afterward as needed to resolve disputes, prevent abuse, or meet legal requirements
  • Public listings: for as long as the shop remains in the directory
  • Claims: during review and for a period afterward for security and audit
  • Newsletter records: until you unsubscribe; we retain suppression records so that we do not email you again in error
  • Email send and click logs: for as long as reasonably needed to operate campaigns and honor do-not-contact preferences, after which we delete or anonymize them
  • Payment and tax records: for the period required by law
  • Server and security logs: for a short period unless needed for an investigation

12. Your rights

Depending on where you live, you may have some or all of the following rights: access; correction; deletion; restriction of processing; objection to processing based on legitimate interests; objection to direct marketing (including listing campaigns) at any time; portability of data you provided; withdrawal of consent; and the right to lodge a complaint with a supervisory authority.

In the United Kingdom, you may complain to the Information Commissioner’s Office. In the EEA, you may complain to the data protection authority in your member state. You may also contact us first so that we can try to resolve the matter.

To make a request, email support@keepupcards.com. We may need to verify your identity (for example, that you control the email address on the account). We will respond within the time required by applicable law (typically one month in the EEA and United Kingdom, and about forty-five days in certain U.S. states, with a possible extension as the law allows). Unsubscribing from email does not by itself delete your account or a public listing. To request deletion of an account, email us. We do not currently offer a self-service account-deletion button.

13. Children

KeepUp is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you create an account or send us personal information, you represent that you are at least 16 years old. We do not independently verify age. If you believe we have collected personal information from a child under 13, or from anyone under 16 in violation of these rules, contact us and we will delete it.

14. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects concerning you. Claim approvals and similar decisions involve human review.

15. Security

We use administrative, technical, and organizational measures designed to protect personal information, including restricted access to administrative tools and encrypted connections to the site. No method of transmission or storage is completely secure. If we become aware of a breach that requires notice under applicable law, we will notify affected individuals and regulators as required.

16. Changes to this policy

We may update this Privacy Policy. We will post the revised version on this page and change the “Last updated” date. For material changes, we may provide additional notice. The updated policy applies from the effective date stated on this page.

17. Contact

Privacy requests and questions: support@keepupcards.com. You may also use our Contact page.