STX reserves the right, at any time, to modify this Privacy Policy. If we make revisions that change the way we collect, use, or share personal information, we will post those changes in this Privacy Policy. You should review this Privacy Policy periodically so that you keep up to date on our most current policies and practices. We will note the date of the latest version of our Privacy Policy at the beginning of this Privacy Policy.

Types of Information We Collect. We collect and use the following information to provide, improve, protect, and promote the Services:

• Account Information. We collect, and associate with your account, the information you provide to us when you do things such as create an account, such information may identify you personally, such as your first and last name, e-mail address, mailing address, telephone numbers, driver’s license number, Social Security number, birth date, billing information credit card or bank account information.

• Profile Information. We will collect a profile photo you upload and user name you choose for your public profile page (“Profile”), to give you a personalized experience of the Services. When you participate in any contest, game or other gaming-related product or promotion through the Site, or Services (each, a “Game” or, collectively, “Games”), other participants (each, a “Player”) will be able to see the information you selected for your Profile.

• Location Information. We may collect your location information, including your geolocation records, for purposes of verifying whether you are eligible to participate in a Game, sweepstakes, or giveaway or to determine if you are otherwise permitted to use the Services. We may also use such information to comply with our legal obligations, protect our legal rights, and address existing or anticipated disputes.

• Survey Information. When you participate in one of our surveys, we may collect additional information about your profile, activity, usage, and preferences related to the Site and the Services, so that we can evaluate your interest in and the quality of our products, Services, and customer and technical support.

• Game, Sweepstakes and Giveaway Information. If you participate in a sweepstakes, Game, or giveaway through the Services, we may collect your email address and phone number, to notify you if you win or not. We may also ask for user’s first and last names and addresses, in order to verify their identities. In some situations we may need to collect other information about user preferences as part of the entry process, such as a prize selection, or in connection with the award of prizes over a certain dollar amount. Such sweepstakes and Games are voluntary. And we recommend that you read the rules for each sweepstakes and contest before you enter it.

• Device Information. We may collect information about the devices you use to access the Services, including the hardware models, operating systems and versions, software, file names and versions, preferred languages, unique device identifiers, advertising identifiers, serial numbers, device motion information, and mobile network information. If you have downloaded our mobile Applications, we may also collect certain information from your mobile device, including information about how you use the Applications. This information is generally used to help us deliver relevant information to you. In the event our Applications crash on your mobile device, we will also receive information about your mobile device model software version and device carrier, which allows us to identify and fix bugs, provide other technical support, and improve and optimize the performance of our Applications.

How We Collect Information. We may collect personal information from you in the following ways:

• By Asking. We may collect some personal information from you by asking that you provide it to us. We may collect account information through various forms and in various places on the Site, including if you create an account or when you otherwise interact with the Services.

• From Referrals. We may also collect personal information from others that you refer to the Services on the Site or that refer you to the Services on the Site.

• Cookies. Like many online services, we use “cookies” to collect technical information. Cookies are small pieces of information that a website sends to your computer’s hard drive while you are viewing the website. We may use both session cookies (which expire once you close your web browser) and persistent cookies (which stay on your computer until you delete them) to provide you with a more personal and interactive experience on the Site, Applications, and the Services. We may use cookies to collect information about your IP address, browser type, operating system, device type and identifiers, platform type, as well as your usage of and activity on our Website and Applications and the performance of our Services. These types of information are collected to make the Site, Applications and the Services more useful to you and to tailor your online experience to meet your special interests and expectations. If you choose, you can set your browser to reject cookies or you can manually delete individual or all of the cookies on your computer by following your browser’s help file directions. However, if your browser is set to reject cookies or you manually delete cookies, you may have some trouble accessing and using some of the pages and features that are currently on the Site, or that we may put on the Site in the future.

• Tracking Technologies. In order to improve, personalize, and optimize our Services and meet our legal obligations, we may automatically track certain information about your visits to and usage of the Site, Applications, and the Services, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), device identifier, domain name, clickstream data, referring/exist pages, geolocation, and a date/time stamp for your visit. We also use this information to analyze trends, administer the Site, gather demographic information about our user base, deliver advertising, perform research, provide technical and customer support, inform our product development efforts, protect our legal rights, address disputes, and prevent our Services from being used to commit harmful or unlawful activities, including fraud. Some of this information may also be collected so that when you use the Site, Applications, or the Services again, we will be able to recognize you and optimize your experience accordingly.

• Pixel Tags. In addition, we use “pixel tags” (also referred to as clear gifs, web beacons, or web bugs). Pixel tags are tiny graphic images with a unique identifier, similar in function to cookies, that are used to track online movements of web users. In contrast to cookies, which are stored on a computer’s hard drive or web browser, pixel tags are embedded invisibly in web pages. Pixel tags are often used in combination with cookies, trigger the placing of cookies, and transmit information to us or our service providers. This enables two websites to share information. The resulting connection can include information such as a device’s IP address, the time a person viewed the pixel, an identifier associated with the browser or device, the type of browser being used and the URL of the web page from which the pixel was viewed. Pixel tags also allow us to send email messages in a format that users can read, tell us whether emails have been opened, and help to ensure we are sending only messages that may be of interest to our users. We may also use this information to reduce or eliminate messages sent to a user.

• Web Beacons. A web beacon is an electronic file on a web page that allows us to count and recognize users who have visited that page. Among other things, a web beacon can be used in HTML-formatted email to determine responses to our communications and measure their effectiveness. For instance, if you get an email from us and click on a link in that email to go to the Site. You can generally avoid web beacons in email by turning off HTML display and displaying only the text portion of your email.

• Web Server Logs. Web server logs are records of activity created by the computer that delivers the webpages you request to your browser. For example, a web server log may record the search term you entered or the link you clicked to bring you the webpage. The web server log also may record information about your browser, such as your IP address and the cookies set on your web browser by the server.

• Enhanced Information. We also may enhance the personal information we collect from visitors with other information from third party Data Sources, as defined below.

• Third Party Data Sources. In addition to the information that we collect from you directly, we may receive information about you from third parties, such as our vendors, business partners, our affiliates, data providers, data partners or publicly available sources (“Data Sources”). We allow Data Sources to send us marketing information that they have collected from both online and offline sources. This may include information from customer lists, website memberships, or other information created from a third-party’s own technology (such as proprietary modeling or matching technology of other companies).

Why We Collect Information. We collect and use personal information for various purposes, including:

• Set up your Account, verify your identity, and provide you with the Services.
• Complete or process transactions for you and send you confirmations and receipts.
• Verify whether you are eligible to participate in a Game, sweepstakes, or giveaway or to determine if you are otherwise permitted to use the Services.
• Comply with our legal obligations, protect our legal rights, and address existing or anticipated disputes.
• Recognize or identify you when you return to the Site.
• Evaluate your interest in and the quality of our products, Services, and customer and technical support.
• Tell you about updates to your account and the Services.
• Answer questions and respond to your customer service requests.
• Monitor the usage and performance of the Site and the Services, and determine aggregate information and usage patterns.
• Make the Site and the Services easier to use, help diagnose problems with the Site or the Services, or enhance the Site and the Services for optimal user experience.
• Help us deliver relevant information to you.
• Identify and fix bugs, provide other technical support, and improve and optimize the performance of the Site, Applications and the Services.
• We may use your personal information to advertise and market the Services (and those of our partners) to you, for example, to present targeted advertisements on the Site and other third party websites, in email marketing, and in direct mail marketing. We also use your personal information to analyze the effectiveness of our advertisements, and to determine whether you would be interested in new features or services we may offer.

How we Share Information. We may share personal information for the purposes described below:

• Parties You Share With. When you use the Site, Applications, or the Services, the personal information you openly provide with others will be shared with parties you allow to receive such information. For example, you may elect to communicate personal information with other users who are participating in the same Game as you.

• Service Providers. We may share your personal information with certain service providers to: provide you the Services we offer through the Site and Applications; conduct quality assurance testing; facilitate the creation of accounts; provide account authentication and user verification services; provide technical and customer support; geolocate users; personalize, customize, and improve your use and experience of the Services; process payments to you and other financial transactions; send email and push notifications; enable security support and technical maintenance; send you newsletters, surveys, messages, and promotional materials related the Services or on behalf of other companies; verify your identity; prevent harmful or unlawful uses of our Services, including fraud; deliver you customized or personalized content, information, and advertising; understand when users have installed our Applications; monitor the health and performance of code on user’s devices; request user feedback; send users links to download our Applications; monitor the health of our servers; manage search engine optimization; and improve and optimize the performance of the Services.

• Internal Revenue Service and Other Taxing Authorities. If your earnings from Games exceeds a certain threshold, in accordance with our interpretation of applicable law, we will disclose the amount of your earnings and related information to the United States Internal Revenue Service and other appropriate taxing authorities.

• Professional Financial and Legal Advisers. From time to time, we may also need to share your information with professional advisers, including lawyers, auditors, bankers, insurers and consultants, in order to obtain advice or other professional services from them. Such advisers are bound by legal and/or contractual duties of confidentiality and other prohibitions against disclosure of personal information.

• Threat Detection. We use certain service providers to provide threat detection, user authentication, and fraud prevention services. These service providers may automatically collect certain information about your visits to the Site and Applications, as well as the device you use to connect to the Services, in order to monitor for potential threats or bad actors. This information may include, among other things, your IP address and your device’s unique identifiers.

• Advertising. We may use certain vendors to serve ads on the Site and Applications. In connection with the delivery of advertising, certain vendors may automatically collect information about your visits to this and other websites, including your IP address, internet service provider, unique personal identifiers, and the browser you use to visit the Site. They do this by using cookies, beacons, pixel tags, clear gifs, or other technologies. The information collected may be used, among other reasons, to deliver advertising targeted to your interests and to better understand your usage of, preferences on, and visitation of the Site, Applications, and the Services and other sites tracked by these vendors. This Privacy Policy does not apply to, and we are not responsible for, cookies, pixel tags and like technologies used in connection with other parties ads, and we encourage you to check the privacy policies of advertisers and ad services to learn about their use of such technologies. If you would like more information about these practices to understand your options for not having your information collected and used by such companies, please click here: http://www.aboutads.info/choices or https://www.networkadvertising.org/.

• Analytics. We use a number of service providers, such as Google Analytics, to help analyze how people use the Services (“Analytics Companies”). Analytics Companies use cookies and similar technologies to collect information pertaining to how people use our Website and Applications, what pages they visit, and what other sites they may have used prior to using our Services. We use the information we get from Analytics Companies to improve and optimize the Site, Applications, and the Services.

• Permitted by Law. We may share your information with others as required by, or permitted by, law. This may include sharing your information with governmental entities, or third parties in response to subpoenas, court orders, other legal process, or as we believe is necessary to exercise our legal rights, to defend against legal claims that have been brought against us, or to defend against possible legal claims that we determine in our sole discretion might be brought against us.

• Corporate Transaction.   Personal information may be disclosed or transferred as part of, or during negotiations of any purchase, sale, lease, merger, amalgamation, or any other type of acquisition, disposal, securitization or financing involving STX.

• Aggregated, Anonymized or De-identified Data. We may also share aggregated, anonymized or de-identified information, which cannot reasonably be used to identify you.

• Affiliates. We may share your personal information with our corporate affiliates (e.g., parent company, sister companies, subsidiaries, joint ventures, or other companies under common control).

How We Secure Personal Information. The security of your information is important to us. We use reasonable administrative, technical, and physical procedures, practices, and safeguards designed to protect personal information we collect from unauthorized access, use, alteration, exfiltration, or destruction. Additionally, we will keep your information for only as long as it is needed to achieve its purpose or meet our legal obligations. We make concerted, good faith efforts to maintain the security of your information. Although we work hard to ensure the integrity and security of our systems, it must be recognized that no information system is 100% secure and, therefore, we cannot guarantee the security of such information. Outages, attacks, human error, system failure, unauthorized use, or other factors may compromise the security of user information at any time.

Do Not Track (DNT). Various browsers, including Internet Explorer, Firefox and Safari, currently offer a “Do Not Track” or “DNT” option that relies on a technology known as a DNT header, which sends a signal to websites visited by the user about the user’s browser DNT preference setting. Please note that, at this time, we do not honor “DNT” signals or other mechanisms that may allow you to opt out of the collection of information across networks of websites and online services as there is no standard for how online services should respond to such signals. As standards evolve, we may develop policies for responding to DNT signals that would be described in future versions of this notice. For more information on DNT options, please visit https://www.allaboutdnt.org.

California’s “Shine the Light” Law. A California customer who has provided personal information to a business with whom such customer has established a business relationship for personal, family, or household purposes is entitled to request information about whether the business has disclosed personal information to any third parties for the third parties direct marketing purposes. In general, if the business has made such a disclosure of personal information, upon receipt of a request by a CA customer, the business is required to provide a list of all third parties to whom personal information was disclosed in the preceding calendar year, as well as a list of the categories of personal information that were disclosed.

However, under the law, a business is not required to provide the above-described lists if the business adopts and discloses to the public (in its privacy policy or notice) a policy of not disclosing customer’s personal information to third parties for their direct marketing purposes unless the business gives users a mechanism to opt out of having their personal information disclosed to third parties for their direct marketing purposes. Rather, the business may comply with the law by notifying the customer of his or her right to prevent disclosure of personal information and providing a cost-free means to exercise the right.

We have opted for this alternative approach. As stated in this notice, we give customers a mechanism to opt out of having their personal information disclosed to third parties for their direct marketing purposes. Therefore, we are not required to maintain or disclose a list of third parties that received your personal information for marketing purposes. If you wish to opt-out of sharing your personal information with third parties for their direct marketing purposes, please email us at contactus@stxapp.io and describe your request as “Re: Opt-out”.

Note to International Users. The Site and Applications are hosted in the United States and are intended for and directed to users in the United States. If you are a user accessing the Services from the European Union, Asia, or any other region with laws or regulations governing personal data collection, use, and disclosure that differ from United States laws, please be advised that through your continued use of the Site or Applications, which are governed by U.S. law, this Privacy Policy, and our Terms of Use, you are transferring your personal information to the United States and you consent to that transfer. The Site and Applications are not intended to subject us to the laws or jurisdiction of any state, country or territory other than those of the United States. Your information may be stored and processed in any country where we or our affiliates have facilities or in which we engage service providers and, by using the Site, Applications, or Services, you consent to the transfer of information to countries outside of your country of residence, including the United States, which may have different data protection rules than those of your country.

Updates to this Privacy Policy. We may change this Privacy Policy from time to time. We encourage you to periodically review this page for the latest information on our privacy practices. The “Effective Date” at the top of this Privacy Policy indicates when this Privacy Policy was last revised. Any changes will become effective when we post the revised Privacy Policy on the Site. Your use of the Site and/or the Services following these changes means that you accept the revised Privacy Policy.

How to Contact STX. If you have any questions or concerns regarding this Privacy Policy, or if you would like to opt-out, delete, or unsubscribe from our use of your personal information, you may reach us by email at: contactus@stxapp.io or by mail at:

STX
2700 Patriot Blvd Ste. 140
Glenview, IL 60026