Privacy Policy

Cutthroat Inc. is operated from Denmark. For any privacy matter, contact us at support@cutthroatinc.com - we are the data controller for the personal data described below.

Account data. Your email address, an optional display name, and - if you sign in with Google - the name Google shares with us. Legal basis: performance of contract (we cannot give you an account without it).

Game data. Everything your companies do: businesses, products, transactions, achievements, coin balance. This is the game itself. Company names and valuations appear on the public leaderboard; your email and identity do not.

Payment data. If you buy BizCoins, payment is handled entirely by Stripe. We never see or store your card number - we store only the purchase record (what you bought, when, and that it was paid).

What we do NOT collect: no advertising trackers, no analytics cookies, no location data, no selling or sharing of data with advertisers. Ever.

We use strictly necessary cookies only: the session cookie that keeps you signed in. No consent banner is needed for strictly necessary cookies - and we have nothing else to ask consent for.

Cutthroat Inc. is an AI-powered game. When you create a business or call a board meeting, your game data (company setup, in-game financials - never your email or payment details) is sent to Anthropic's Claude API to generate the response. Anthropic processes this as our data processor and does not use API data to train its models.

We use a small set of processors to run the game: Supabase (database and authentication), Vercel (hosting), Stripe (payments), Anthropic (AI), and Google (optional sign-in). Each processes data only on our instructions under GDPR-compliant data processing agreements.

Your data is kept while your account is active. Inactive accounts (no sign-in for an extended period, no purchases) may be deleted as part of routine cleanup. When your account is deleted - whether by you or by us - all your personal data and game data is permanently removed. Purchase records may be retained where bookkeeping law requires it.

Under GDPR you can request: access to your data, correction, deletion ("right to be forgotten"), a portable copy, and restriction of processing. Email support@cutthroatinc.com and we will respond within 30 days. You may also complain to the Danish Data Protection Agency (Datatilsynet, www.datatilsynet.dk) or your local supervisory authority.

Cutthroat Inc. is not directed at children under 13. If you believe a child has created an account, contact us and we will delete it.

If this policy changes materially, we will note it here with a new date. Continued use of the game after changes means acceptance.