Privacy policy — PartyGames

1. Controller and contact

This policy covers the PartyGames app and web game. The data controller is Massimo Verzeni, the developer of PartyGames, who can be reached at massimoverzeni@gmail.com.

Use the same address for privacy questions, requests about your data, or reports concerning the safety of minors.

2. Data we process

PartyGames does not require an account. In short, this is what is processed and where it ends up:

Data	Where it lives
Age band, online-play authorisation status, hash of the parental PIN	On the device only
Local profile: display name, avatar, preferences, recent players, Premium status, settings	On the device only
Online rooms: room code, display name, avatar, game state, answers, votes, drawings	Room service, until the room expires
Technical data: IP address, date and time, network information, security logs	Infrastructure providers
Camera, only on request to scan a QR code	No image is stored or sent
Purchases: the information needed to recognise the Premium entitlement	Google Play or Apple handle the payment

Age band and parental control

On first launch we ask for a date of birth for the sole purpose of deriving an age band. The full date is not stored. The device keeps the band, the online-play authorisation status and a non-reversible hash of the parental PIN.

Local profile

Display name, avatar, preferences, recent players, Premium status and settings are kept on the device.

Online rooms

When you create or join a room, the service processes the room code, display name, avatar, game state, answers, votes and drawings needed for the session. That content is visible to the other players in the same room.

Technical data

Infrastructure providers may process IP address, date and time, network information and security logs needed to transmit and protect the session.

Camera

It is used only on request, to read a QR code. Images are never stored or sent by PartyGames.

Purchases

Google Play or Apple handle the payment. PartyGames only receives the information needed to recognise the Premium entitlement.

3. Purposes and legal bases

Every processing activity has a legal basis under Article 6 of Regulation (EU) 2016/679 (GDPR):

Purpose	Legal basis
Running local and online play, saving your preferences	Performance of the service you asked for (Art. 6(1)(b))
Checking the age band and handling parental authorisation	Legal obligations and store policies protecting minors (Art. 6(1)(c)) and the best interest of the child
Service security, abuse prevention, error diagnostics	Our legitimate interest in keeping the service stable and safe (Art. 6(1)(f))
Recognising the Premium purchase	Performance of the contract (Art. 6(1)(b)) and legal obligations (Art. 6(1)(c))
Showing ads in the age bands where they are allowed	Consent (Art. 6(1)(a)), collected through the Google User Messaging Platform form and withdrawable at any time

4. Providers and transfers outside the EU

To run the service we rely on providers that, depending on the feature, may process data on our behalf or as independent controllers:

Cloudflare — website hosting and the online room service.
Google Play — Android distribution and purchases.
Google AdMob and User Messaging Platform — advertising and consent collection.
Apple App Store — iOS distribution and purchases.

Some of these providers are based, or run infrastructure, outside the European Economic Area, in particular in the United States. In those cases the transfer relies on an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework) or on the standard contractual clauses adopted by the Commission, as set out in the respective agreements and provider policies.

We do not sell personal data.

5. Ads and children

Advertising is switched off entirely for anyone who states they are under 13 and for anyone who does not give an age. For the other bands Google AdMob may be used, subject to the applicable privacy choices. On Android PartyGames requests neither the AAID nor the Privacy Sandbox permissions for identifier, attribution or Topics. For minors eligible for ads, a maximum content rating of G is requested and the user is flagged as being under the age of consent.

For the under-13 band, or when no age is given, online play is blocked by default. A parent or guardian has to read the safety notice, authorise the feature and set a PIN.

6. Retention and deletion

Local preferences stay on the device until the app is uninstalled or its data is cleared. Online rooms expire after one hour of inactivity or six hours of total duration; on expiry the room data is deleted. Providers may keep technical and security logs for as long as strictly necessary under their own policies.

You can delete local data by clearing the app data or uninstalling the app. There is no central PartyGames account to delete.

7. Your rights

Within the limits set by the GDPR you can exercise the right to:

access the data concerning you (Art. 15);
rectify inaccurate data (Art. 16);
erasure (Art. 17);
restriction of processing (Art. 18);
data portability (Art. 20);
object to processing based on legitimate interest (Art. 21).

You can also withdraw your consent to advertising at any time from the app settings, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights write to massimoverzeni@gmail.com: we reply within the statutory deadline, normally one month. If you believe the processing infringes the law, you have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the supervisory authority of your country of residence.

8. Staying safe online

Communication with the service runs over encrypted connections and we collect the bare minimum. On your side: only use rooms with people you know, and never put full names, contact details, school, address or other personal information into nicknames, answers or drawings.

9. Changes

This policy may be updated when features, providers or legal obligations change. The date of the last change is shown at the top of the page.