DRAFT · provisional text pending legal review

Privacy

Controller: BARREJON LTD (London). Contact: to be completed.

What we keep

• The identifier given by the door you sign in through (Google, Discord, X or a link to your email). We don't keep your email: only an encrypted fingerprint (hash) to recognise that two doors belong to the same person, and the domain (for example gmail.com) to stop fake accounts. If you sign in with a link, your email is used once to send it and is not kept.
• To stop spam, an encrypted fingerprint of your IP (never the IP) in the sign-up log, deleted after 30 days, and sending counters deleted after 24 hours.
• Your game name, your language and the city you choose (if you choose one).
• Your answers to the dilemmas, with the date, and the KiSS you earn.
• If you choose to complete your profile, and only with your explicit consent: gender identity, whether you are trans, orientation, how you take part, what you are looking for and year of birth. All optional, never shown to anyone or on the card, only used to tailor the game, and you can delete it anytime from "Complete your profile". It is deleted with your account.
• Your subscription status (level and expiry date) and your Square customer and subscription identifiers. Payment data is handled by Square; we never see or store your card.

What we don't keep

No plain IP address, no email, no real name, no GPS location. No Google analytics and no third-party cookies.

Measurement

We count, in aggregate, how the game is used (front-page visits, sign-ups by door, dilemmas played, bets, shared cards, creator and venue links) to improve it. Each count carries at most an encrypted account identifier that cannot tell who you are, and never your IP, email or name. Per person we only keep what you already see in your account: your KiSS and your Respect. Nothing to accept: there are no measurement cookies.

If you turn on phone notifications, we keep that notification's technical address (given by your browser) only to tell you your partner has played; it is deleted when you turn notifications off.

Only exception: if you ask «Tell me when it opens», we keep that email only for the opening notice; then it is deleted.

Cookies

Strictly necessary cookies only: session (sk_s), language (sk_lang), sign-in security (sk_oauth, 10 minutes) and preview access (sk_preview).

Your rights

You can ask for access, correction or deletion of your account: channel to be defined.