Privacy Policy

Data controller

The controller of your personal data is Tomasz Hanusiak Party Finder, Tax ID (NIP): 6812070519. Address: Krzczonów 221. For data matters, contact: kontakt@blefuj.pl.

Purposes and legal bases

• Account and Premium, performance of a contract (Art. 6(1)(b) GDPR): your email for login (magic link) and to link Premium access.
• Anonymous analytics, only based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Fulfilling and accounting for a Premium purchase: performance of a contract and legal obligations, including tax (Art. 6(1)(b) and (c) GDPR). Service security: legitimate interest (Art. 6(1)(f) GDPR).
• If you log in, we use your email address only for login (magic link) and to link your Premium access. Authentication is handled by Supabase.
• If you consent, we use Vercel Web Analytics, cookieless analytics with no cross-site tracking.
• Blefuj shows no ads and uses no ad networks. The game is funded by one-time Premium purchases, so there are no advertising scripts here and no profiling for them.

Recipients / processors

• Supabase, login, account and Premium status.
• Stripe, payment processing for Premium; card data is handled only by Stripe.
• Vercel, hosting and cookieless, anonymous analytics (after consent).

Local data and game content

• Player names, secret words, Mind Leak secrets, answers and votes stay only on your device, they are never sent to analytics, our backend, Supabase, or Stripe.
• Your game preferences (language, player count, category, theme, rounds played) and local Mind Leak stats may be stored locally in your browser (LocalStorage). They are not sent to any server.
• We only collect aggregate product events: page view, game started/finished, category selected, hint mode, language change, premium category click, “play again”, and errors. We never send player names, the secret word, or who the impostor was.
• Blefuj never sees or stores your card details. You enter them on Stripe's page, and all we receive back from Stripe is confirmation that the order was paid.

Retention

Account and Premium data are kept while the account exists or as required by law (e.g. accounting). Consent preferences and local game data stay on your device until you clear them.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time (without affecting prior lawful processing). To exercise these rights, write to kontakt@blefuj.pl.

Right to complain

You have the right to lodge a complaint with the Polish Data Protection Authority (PUODO), ul. Stawki 2, 00-193 Warszawa.

Transfers outside the EEA

Some processors (e.g. Stripe, Google) may process data outside the European Economic Area, under appropriate safeguards such as standard contractual clauses.