1. About this policy
This policy describes how the PlayBrandy service handles personal information when you browse our website, create an account, manage a workspace, or join an interactive campaign.
Campaign organizers are responsible for the information they collect through their own campaigns. If an organizer requests contact details or marketing permission, review the privacy notice shown with that campaign as well as this policy.
2. Information we collect
- Account information: your name, email address, organization, profile preferences, email verification status, and a password hash if you set a password. Passwords are not stored in plain text.
- Google sign-in information: your Google account identifier, name, verified email address, and the information needed to complete sign-in. Google access and refresh tokens are not retained by the current sign-in implementation.
- Workspace information: your account ownership and allocated workspace, brand assets or information you submit, product details, campaign configurations, and related activity records. Legacy membership and invitation records may be retained, but no longer grant shared-account access.
- Campaign participation: a nickname or participant identifier, gameplay actions, scores, session timestamps, and engagement events such as product clicks.
- Optional contact information: your name and email if you submit a campaign contact form, together with the consent choice and policy version recorded at submission. Participation does not automatically grant marketing permission.
- Operational information: authentication attempts, session identifiers, security events, and technical logs needed to operate and protect the service.
3. How information is used
We use information to create and verify accounts, authenticate users, manage workspaces and permissions, run live experiences, display campaign results, send requested account emails, and investigate abuse or service problems.
Verification, welcome, and password recovery messages are account-related communications. An organizer's promotional messages require their own applicable permissions and notices; simply playing a game is not consent to receive marketing.
4. Cookies and browser storage
The service uses essential cookies and browser storage for its core functionality. When configured, it also uses Google Analytics on public marketing and legal pages:
- Sign-in: a session cookie keeps you signed in; server-side login sessions normally expire after seven days.
- Google sign-in: a short-lived cookie connects the sign-in request to the same browser and expires after ten minutes.
- Preferences and participation: local storage can remember your light/dark theme and information used to resume a participant session.
- Website analytics: Google Analytics can use cookies and browser, device, and request information to measure visits to our Home, Pricing, Live Demo, Privacy Policy, and Terms & Conditions pages. It loads immediately when enabled, without an in-app consent prompt. Our page-view events omit URL query strings and fragments, and do not identify account holders or track account, dashboard, invitation, password recovery, or gameplay routes. Advertising personalization and Google signals are not enabled by this integration.
You can clear cookies and local storage, block analytics using browser privacy tools, or use Google's Analytics opt-out browser add-on. Analytics cookie lifetimes and data retention depend on the configured Google Analytics property. Clearing essential storage may sign you out, reset your preferences, or prevent you from resuming a game session.
5. Sharing and service providers
Account workspace information is available to its single account owner, not invited collaborators. Restricted platform support access remains separate. Campaign organizers can access the participation information their campaign provides.
We use service providers to operate the platform, including Google for Google sign-in and, when configured, website analytics; Brevo for transactional account emails; and the database and hosting infrastructure used for the deployment. These providers receive the information needed to perform their services. Information may also be disclosed when required by applicable law or to protect the service and its users.
Where a provider or deployment processes information in another country, applicable transfer and privacy requirements must be considered. An organizer's external website or product link has its own privacy practices.
6. Security and retention
Controls include password hashing, restricted workspace access, expiring account links, and encryption of contact-form names and emails in the application database. No online system can guarantee absolute security.
We retain account, workspace, campaign, and operational information for the purposes described here, including service operation, security, and applicable legal obligations. Retention can differ by data type and deployment; this policy does not promise a single automatic deletion period for all records.
Verification links expire after 24 hours and password recovery links after 30 minutes. Expiration prevents use of a link; it does not mean the associated account or all related records have been deleted.
7. Your choices and requests
You can update supported profile preferences in Settings, change your password, disconnect a browser session by signing out, and choose whether to provide optional campaign contact information or marketing permission.
Depending on the laws that apply to you, you may be able to request access, correction, deletion, restriction, or a copy of your personal information, or withdraw consent. Contact the PlayBrandy team through the support channel supplied with your workspace or service agreement. We may need to verify your identity before acting on a request.
For contact information collected by a campaign organizer, contact that organizer using the details in their campaign notice. Requests may be subject to legal obligations and the rights of others; not every action is available as a self-service feature.
8. Changes to this policy
We may update this policy as the service and its providers change. The date above identifies the latest version. Review this page and any campaign-specific notices before providing personal information.
Use of the service is also described in our Terms & Conditions.
