Privacy Policy

Data controller

The controller of your personal data is Tomasz Hanusiak Party Finder, Tax ID (NIP): 6812070519. Address: Krzczonów 221. For data matters, contact: kontakt@blefuj.pl.

Purposes and legal bases

• Account and Premium, performance of a contract (Art. 6(1)(b) GDPR): your email for login (magic link) and to link Premium access.
• Analytics and ads, only based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Security and, once Premium purchases launch, payment handling: legitimate interest and legal obligations (Art. 6(1)(f) and (c) GDPR).
• If you log in, we use your email address only for login (magic link) and to link your Premium access. Authentication is handled by Supabase.
• If you consent, we use Vercel Web Analytics, cookieless analytics with no cross-site tracking.
• To keep the game free, we may display Google AdSense ads, according to the choice you make in Google's certified consent message (CMP).
• You can change your ads choice at any time, the “Change ads consent” link sits in the footer of the content pages. In the EEA, UK and Switzerland, Google shows a consent message before personalising ads.
• Ads consent (Google's message) is separate from analytics consent (our banner), you can accept one and reject the other.
• Google and its partners may use cookies or similar technologies to serve and measure ads.

Recipients / processors

• Supabase, login, account and Premium status.
• Stripe, payment processing once Premium purchases launch (card data is handled only by Stripe; payments are not live today).
• Google AdSense, ads, only after you consent to ads.
• Vercel, hosting and cookieless, anonymous analytics (after consent).

Local data and game content

• Player names, secret words, Mind Leak secrets, answers and votes stay only on your device, they are never sent to analytics, our backend, Supabase, or Stripe.
• Your game preferences (language, player count, category, theme, rounds played) and local Mind Leak stats may be stored locally in your browser (LocalStorage). They are not sent to any server.
• We only collect aggregate product events: page view, game started/finished, category selected, hint mode, language change, premium category click, “play again”, and errors. We never send player names, the secret word, or who the impostor was.
• The app does not intentionally send player names, the secret word, roles, or voting choices to ad providers.
• Payments have not launched yet. Once they do, Blefuj will not store your card details, only Stripe will.

Retention

Account and Premium data are kept while the account exists or as required by law (e.g. accounting). Consent preferences and local game data stay on your device until you clear them.

Your rights

You have the right to access, rectify, erase, restrict and port your data, to object, and to withdraw consent at any time (without affecting prior lawful processing). To exercise these rights, write to kontakt@blefuj.pl.

Right to complain

You have the right to lodge a complaint with the Polish Data Protection Authority (PUODO), ul. Stawki 2, 00-193 Warszawa.

Transfers outside the EEA

Some processors (e.g. Stripe, Google) may process data outside the European Economic Area, under appropriate safeguards such as standard contractual clauses.