Your Data Rights

We process your personal data under the following legal bases:

• Contract performance — to provide the game and subscription services you signed up for
• Legitimate interests — to improve the platform, prevent fraud, and ensure security
• Consent — where explicitly obtained (e.g., marketing communications)
• Legal obligation — to comply with applicable laws and regulations

• Account information: name and email address
• Game data: sessions, moves, team selections, votes cast
• Payment information: processed by Base44 Payments — we do not store card details
• Device & log data: IP address, browser type, OS, timestamps
• Voluntary feedback: ratings and contact form submissions

As an EEA resident, you have the following rights:

• Right of Access — request a copy of your personal data
• Right to Rectification — correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten") — request deletion of your data
• Right to Restriction — limit how we process your data
• Right to Data Portability — receive your data in a machine-readable format
• Right to Object — object to processing based on legitimate interests
• Right to Withdraw Consent — at any time, without affecting prior processing

We retain your personal data for as long as your account is active or as needed to provide the Service. Upon account deletion, personal data is removed within 30 days unless retention is required by law.

Your data may be transferred to and processed in countries outside the EEA. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

You have the right to lodge a complaint with your local data protection supervisory authority. In the EU, you may contact the authority of your country of residence or the Irish Data Protection Commission if applicable.