Privacy policy

Data controller

Bitsy - [controller name / company name], [address], reachable at privacy@bitsy.world. (To be completed with the controller’s real details.)

What data we collect

• Whoever creates a gift (the buyer): email address, username, login credentials, uploaded content (photos, messages, dedications, game texts).
• Whoever receives a gift (the recipient): name and email address provided by the buyer, game progress and scores.
• Technical data: IP address, device type and security logs, processed by our hosting and email providers.

Purposes and legal bases

• Performance of the contract: providing the service, that is creating, delivering and running the gift.
• Legitimate interest of the buyer in delivering the gift: sending the recipient the invitation, the access code and the result.
• Legitimate interest and legal obligation: security, abuse prevention and compliance with the law.

Third party data (the recipient)

When you create a gift you enter another person’s name and email address: you confirm you are entitled to do so. We give the recipient this policy in the first email, along with the right to object to processing by writing to privacy@bitsy.world.

Who processes data for us (processors)

• Supabase: database, authentication and photo storage (EU region, Ireland).
• Vercel: website hosting, with standard contractual clauses for any transfers outside the EU.
• Oracle Cloud (OCI): sending emails (EU region, Milan).
• Atlassian (Jira): internal handling of bug reports.

Bug reports

If you use the "Report a bug" form, alongside the title and description you write we collect a few minimal technical details that help us reproduce the problem: the page you reported from, browser type and screen size, and the app version at that moment. If you are logged in we include your email address so we can get back to you; if you are anonymous we collect no identity at all and do not ask you to log in. We do not store the IP address in this data. Reports are handled internally on Jira (Atlassian).

Retention

We keep data for as long as it takes to provide the service. The photos and content of a gift are deleted after a period of inactivity (roughly 12 months after completion) or on request. You can delete your account and content at any time from your profile settings.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to lodge a complaint with the competent supervisory authority. To exercise them, write to privacy@bitsy.world.

Cookies

We only use essential technical cookies (login session and the language you picked). No profiling or third party cookies. Details in the Cookie policy.