Privacy Policy

[Haznar's registered legal name], [Registered address], is the controller of the personal information described here. Questions about privacy go to admin+privacy@haznar.co.

If you host. Hosts have an account. We keep:

• your email address and password (the password is stored hashed by our sign-in provider, never in plain text);
• the sessions you create: their titles, the games you picked, teams, players' display names and scores;
• custom games you write, including any images you upload to them;
• the email addresses of people you share a custom game with or add as a co-host;
• your plan, and the billing records Paddle sends us when you subscribe (see "Payments" below).

If you play. Players don't create an account. To join a game you enter a display name, which the host and other players in that session can see. During play we handle the answers, votes, drawings and team chat messages you send. Team chat is relayed live and not stored. Some answers are saved with the session so the host can see the results and the session recap afterwards.

Technical information. When something breaks in your browser, TeamPlay sends us an error report: the error message, the page, the session it happened in and your browser type. Error reports are built to leave out names, answers and chat. Like every website, our hosting provider also logs the IP addresses of incoming requests.

Visit statistics. We use Cloudflare Web Analytics to count visits: which pages are viewed, the site that referred you, and your country, browser and device type. It sets no cookies, doesn't use local storage, and doesn't build a profile of you or follow you to other sites.

• We don't show ads, and we don't use advertising trackers or cross-site tracking.
• We don't sell or rent personal information, or share it for anyone else's marketing.
• We don't read your sessions or custom games, except to fix a problem you've reported or where the law requires it.

• To run the service you asked for: signing you in, running live games, keeping your sessions and custom games, and processing your plan (performance of a contract).
• To understand how the site is used: cookieless visit counts that show which pages people use and how they found us (our legitimate interest in improving TeamPlay).
• To keep TeamPlay working and secure: error reports, logs and abuse prevention (our legitimate interest in a reliable, safe service).
• To meet legal obligations, such as keeping billing records.
• To contact you about your account: confirmation emails, and important changes to the service or these terms. We'll only send marketing email if you've opted in.

TeamPlay doesn't set advertising or tracking cookies. It uses your browser's local storage to keep you signed in, to let a player rejoin their own team after a dropped connection or a closed tab, and to remember a game you're setting up. Clearing your browser's site data removes all of it.

We use a small number of service providers, who process information only on our instructions:

• Supabase: sign-in, our database and image storage.
• Render: hosting for the app and its servers, including its network provider.
• Paddle: payments. Paddle is the merchant of record for TeamPlay plans, so it collects your payment details directly under its own privacy notice. We never see your card number.
• Cloudflare: cookieless visit statistics (Cloudflare Web Analytics).
• Google Fonts: the typefaces the site loads, which means your browser contacts Google's servers.

Inside a game, what you share is visible to the people in it: your display name to everyone in the session, your answers and team chat to your team and the host.

• Sessions and custom games: until the host deletes them or closes their account.
• Player names and answers: as part of the session they belong to, so until the host deletes that session.
• Error reports: [90 days].
• Billing records: as long as tax and accounting law requires.

Depending on where you live, you can ask to see the personal information we hold about you, correct it, delete it, restrict or object to how we use it, or receive a copy. Hosts can delete sessions and custom games themselves. To close an account or make any other request, email admin+privacy@haznar.co. If you played in someone else's session, you can also ask the host, who controls that session.

You also have the right to complain to your local data protection authority.

Our providers may process information in countries other than yours. Where the law requires it, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

Connections to TeamPlay are encrypted, and our database can't be reached directly from the browser. No system is perfectly secure, so if you think something's wrong, please tell us.

TeamPlay is built for workplaces and is not directed at children. Hosts must be at least 18, and we don't knowingly collect information from children under 16.

If we change this policy in a way that matters, we'll update the date at the top and, for significant changes, let hosts know by email before they take effect.