Privacy Policy

Who is responsible

The data controller for Tête-à-tête is:

What this covers

This policy covers the marketing site at https://tete-a-tete.cards, the web app at https://app.tete-a-tete.cards, and the Tête-à-tête iOS and Android apps. One brand, one controller, one policy.

What we collect

• Account data. Your email address, display name, a hash of your password (never the password itself), whether your email is verified, your language, whether you have confirmed you are 18 or older (yes or no; we do not store a birthdate), and when the account was created and last updated. Accounts created with Google or Apple sign-in have no password.
• Sign-in with Google or Apple. The provider gives us your email address, your name, and an account identifier. On the web it also gives us your profile picture URL and the sign-in tokens it issued, which the sign-in library stores. We never see your Google or Apple password.
• Game data. The games you start (deck, selected categories, card order, progress), the names you type for the people you play with, the online rooms you host or join, the messages you send in online chat, and a log of when you started, finished or bought a game.
• Purchases. Purchases are made through the App Store or Google Play. We receive the product and transaction identifiers, never your payment details.
• Push tokens. If your device registers a push token with us, we store it. No notifications are sent today.
• Technical data. Your IP address is held in memory for about a minute to limit how often one address can call the app; it is not written to the database. Our hosting providers keep request logs: Vercel logs the IP address, time, URL and user agent of requests to the marketing site, and the app server writes the same kind of request log to its container output.
• What stays in your browser or on your device. The marketing site keeps your chosen language (landing-locale) and light or dark theme (theme) in your browser's local storage and never sends them anywhere. The web app keeps its own local storage (theme, language, music on or off). The iOS and Android apps keep your sign-in tokens, your account details, your language and your music setting on the device.

Why, and the legal basis

• Contract (GDPR Art. 6(1)(b)): running the game, your account, online play and your purchases.
• Legitimate interests (GDPR Art. 6(1)(f)): keeping the service secure and preventing abuse, which is what the rate limit and the request logs are for.
• Consent (GDPR Art. 6(1)(a)): push notifications, if you allow them on your device.

Where it is stored

The app and its database run on a server rented from Hetzner Online GmbH in Germany. The marketing site is hosted by Vercel in its Frankfurt region. Both are in the European Union.

Who we share it with

Only the companies we need to run the service:

• Apple and Google — sign-in and in-app purchases, if you use them.
• Resend — sends the password-reset email. It is the only email we send.
• Pusher (EU cluster) — online play: your account ID, display name, chat messages and game state.
• Cloudflare — serves deck artwork and music, so it sees the request when your device loads them.
• Vercel — hosts the marketing site.
• Hetzner Online GmbH — hosts the app and the database.

We do not sell, rent or share personal data with advertisers, analytics providers or data brokers. No analytics or error-monitoring service runs on the site or in the apps.

How long we keep it

• Account and game data: while your account exists.
• Web sign-in: 30 days.
• App sign-in: 7 days, with a refresh token that lasts 60 days and is replaced each time it is used.
• Password-reset code: 15 minutes.
• IP address used for the rate limit: about 60 seconds, in memory only.

Deleting your account

Go to Settings → Delete account on the web or in the iOS app, or email us at hello@red-phoenix.team. Deletion is immediate: your account, sign-in records, sessions, tokens, purchase records, the games you own (including their players, cards and chat) and your activity log are erased at once.

Messages you sent in games owned by other players stay in those games, with your name removed.

The Android app has no delete screen yet, and deleting from the app requires your password. If you use Android, or your account has no password because you signed in with Google or Apple, email us and we will delete the account for you.

Your rights

Under the GDPR you can ask us for:

• access to the personal data we hold about you (Art. 15);
• correction of data that is wrong (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• a copy of your data in a portable format (Art. 20);
• to object to processing based on legitimate interests (Art. 21).

Where we rely on consent, you can withdraw it at any time; for push notifications, turn them off in your device settings.

You can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, https://www.aki.ee) or to the data protection authority where you live. If you are in the United Kingdom, the same rights apply under the UK GDPR, and you can complain to the Information Commissioner's Office.

California residents

This is our notice at collection under the California Privacy Rights Act. In the last twelve months we have collected these categories of personal information, for the purposes described above:

• identifiers: email address, display name, account ID, IP address;
• commercial information: records of decks you bought;
• internet activity: request logs and your game activity log;
• content you create: the names you type for co-players and your chat messages;
• device identifiers: a push token, if your device registers one.

We do not sell or share personal information. You have the right to know what we hold, to delete it, and to correct it. We will not treat you differently for exercising these rights. To use them, email us; we will verify the request against the email address on the account.

Canada

Under PIPEDA you can ask to see and correct the personal information we hold about you by emailing us. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

Age

Tête-à-tête carries an 18+ age label: some decks contain candid questions on intimate topics intended for adults. The service is not directed at children under 16. On the web, decks marked 18+ open only after you confirm that you are 18 or older; we store that yes-or-no answer and nothing else about your age.

Changes

When this policy changes, we post the new version on this page with a new effective date.

Contact

Asking what is held, asking for deletion, or anything else about your data: hello@red-phoenix.team.