Privacy Policy

1. Data we collect

• Account data: display name, email, hashed password, country, age confirmation.
• Gameplay data: answers, response times, scores, leaderboard placement, rewards and earnings history.
• Device data: IP address, device type, OS, app version, language, time zone.
• Communications: support tickets, in-app chat moderation logs.
• Payment data (where premium rounds are available): handled by our payment processor; we receive only transaction status and last 4 digits.

2. How we use data

• Operate the Service: matchmaking, scoring, leaderboards, rewards.
• Prevent fraud, multi-accounting, automation, and abuse.
• Comply with legal, tax, and regional eligibility obligations.
• Send service messages and, with consent, product updates.
• Improve the Service through aggregated analytics.

3. Legal bases (GDPR / UK GDPR)

Contract (operating your account and rounds), legitimate interests (security, abuse prevention, product improvement), legal obligation (tax, age and region verification), and consent (marketing, optional analytics).

4. Sharing

We share data with vetted processors: hosting, analytics, customer support, payment processors, fraud-prevention vendors, and law enforcement when legally required. We do not sell personal data.

5. International transfers

Where data is transferred outside your country, we use Standard Contractual Clauses and other safeguards required by applicable law.

6. Retention

Account and gameplay data are kept while your account is active and for up to 24 months after closure for fraud-prevention and legal record-keeping. Financial records are retained as required by tax law (typically 5–10 years).

7. Your rights

• Access, rectify, delete, or port your data.
• Object to or restrict certain processing.
• Withdraw consent for marketing at any time.
• Lodge a complaint with your local data protection authority.

Submit requests via /support. We respond within 30 days.

8. Children

The Service is not directed to children under 13. Premium rounds and reward conversion are 18+. We delete accounts found to belong to underage users.

9. Security

Encryption in transit (TLS), encryption at rest for sensitive fields, hashed credentials, least-privilege access, regular audits, and incident-response procedures.

10. Cookies

We use strictly necessary cookies for authentication and security, and optional analytics cookies with consent. See our Cookie Policy in-app for details.

11. Changes

We will notify you of material changes via the app or email. The “Last updated” date above always reflects the current version.