Privacy Notice

What we collect and why

• Account details — your email address, sign-in method (email, Google or Apple), password credentials held in encrypted form, and display name. Used to create and secure your account and to let you sign in on any device. Basis: performance of our contract with you.
• Game data — player and group name, chosen avatar, room codes, roles, tasks, votes, scores and results. Used to run the game, show leaderboards and keep your results. Basis: performance of our contract.
• Purchase record — the fact that your account unlocked the paid stories, the order reference from Paddle and whether it was refunded. Used to give you the access you paid for. Basis: performance of our contract. We never see or store your card details.
• Support messages — what you send us when you ask for help. Used to answer you. Basis: our legitimate interest in supporting players.
• Technical data — IP address, device and browser information, error reports and basic usage statistics. Used to keep the game secure, spot abuse and fix problems. Basis: our legitimate interest in a safe, working service.
• Language and preferences — your chosen language and settings, stored on your device. Used to show the game the way you like it.

We do not sell your personal data and we do not use it for advertising profiling. We only send you marketing email if you ask for it, and you can stop it at any time.

Who we share it with

• Service providers — our hosting, database, authentication and error-monitoring providers, who process data only on our instructions.
• Paddle.com — our Merchant of Record, which handles the sale, checkout, payment, invoicing, tax compliance and refunds. Paddle handles your payment details under its own privacy notice.
• AI translation and narration providers — story and interface text sent for translation or narration when you use those features. We do not send your account details.
• Professional advisers and authorities — legal or accounting advisers, and public authorities where the law requires it.
• Other players — your display name, avatar, role and scores are visible to people in your room, and names may appear on public leaderboards.

Some providers are outside your country, so data may be transferred internationally. Where that happens we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision.

How long we keep it

Account and game data are kept while your account is active. If you delete your account or ask us to, we delete or anonymise your data within a reasonable period, except where we must keep records longer — for example order and tax records, which Paddle and we keep for the period required by law. Unfinished game rooms are cleared automatically after they expire.

Security

We use appropriate technical and organisational measures, including encrypted connections, encrypted password storage, access controls and row-level database rules so players can only reach their own data. No system is perfectly secure, but we take these obligations seriously.

Cookies and local storage

We use only essential cookies and browser storage: keeping you signed in, remembering your player name, language and the rooms you joined. We do not use advertising or tracking cookies. You can clear this data in your browser settings, though you will then need to sign in again.

Your rights

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form, and you may withdraw consent where we relied on it. You can change your name and email in Settings at any time. We answer requests within one month. If you are in the UK or EEA, you may also complain to your local data protection authority.

Contact

To exercise any of these rights or ask a privacy question, contact Last choice using the details in your receipt email. For payment or invoice data held by our reseller, contact Paddle at paddle.net.