Privacy policy

Controller: [TITULAR_NOMBRE], tax ID [TITULAR_NIF], [TITULAR_DOMICILIO]. Contact: [TITULAR_EMAIL].

What data we process

• To play: an anonymous identifier generated on your device and your answers. Playing without an account requires no personal data.
• Account (optional): your username, a hash of your password (never the password itself) and your game history so you can recover it on other devices. We do not ask for an email. If you sign in with Google, instead of a password we store your Google account identifier; we do not receive your email, your name or your picture.
• Leagues: the nickname or username you play under and your daily points.
• Sponsors: email, brand details and billing details.
• Reminders: your email, only if you ask for them.

Purposes and legal bases

• Providing the game and saving your progress: performance of the service you request.
• Keeping your account and your leagues: performance of the service you request.
• Managing sponsorships: performance of a contract and tax obligations.
• Measuring usage with cookieless analytics: legitimate interest.
• Showing ads and sending reminders: your consent, which you can withdraw at any time.

Retention

Results tied to the anonymous identifier are kept for 90 days. Account data, while the account is active. Billing data, for the periods required by law. The consent log, 24 months.

Processors and transfers

Vercel (hosting), Upstash (data), Google (sign-in, only if you choose it), Resend (email), Stripe (sponsor payments), Google AdSense (ads, only with your consent) and, for cookieless analytics, Vercel Web Analytics and Plausible. Some may process data outside the European Economic Area under the safeguards provided by the GDPR, such as standard contractual clauses.

Minors

In Spain, children under 14 cannot consent to the processing of their data (LOPDGDD, art. 7). To create an account or join leagues you must confirm you are 14 or older; to sponsor, 18.

Your rights

You can access, rectify, erase, object to, restrict the processing of and port your data by writing to [TITULAR_EMAIL]. You can delete what is stored from Settings, “Delete my data”. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (AEPD).

The Spanish version of this policy prevails in case of discrepancy.