This draft notice describes the product’s current data boundaries while the formal privacy policy is under legal review. Host accounts use Lovable Cloud/Supabase authentication and store an email address, account identifier, and optional display name.
Participants join with a room code and nickname without creating an account. Gameplay stores room-scoped participation, rankings, team assignments, scores, and progress needed to run the session. Participant identity uses a secure, HTTP-only browser cookie. Participant and operator access uses scoped, expiring credentials; raw access secrets are not included in public pages.
Public scenario pages expose only publication-safe summaries. They do not publish reference rankings, scoring secrets, facilitator explanations, private creator assets, room data, or moderation records.
First-party product analytics are limited to allowlisted operational events and are designed to fail without interrupting gameplay. They exclude room secrets, protected scenario content, and ranking payloads. Facilitator recaps are aggregate-only and accessed through revocable links.
Public creator submissions remain disabled until reviewed Creator Terms and publication policies are activated. A complete policy, including contact, retention, deletion, and rights-request procedures, must be approved before production launch.