Privacy Policy

This Privacy Policy explains how Fanbaze ("Fanbaze", "we", "us") handles personal data when you use the Fanbaze website at fanbaze.com, the Fanbaze mobile app for iOS and Android, and any related services (together, the "Service"). It applies to visitors who play as guests, to members with an account, and to anyone who contacts us.

By using the Service you agree to the practices described here. If you do not agree, please do not use the Service. Our Terms of Service govern your use of the Service itself.

We collect only what the games and the community need to work. In practice that is:

• Account details. Your email address and a password (stored only as a secure hash by our authentication provider), or the name and email address Google shares with us if you sign in with Google. Apple Sign In may be offered in the mobile app; Apple shares only the name and email you approve, which can be a private relay address.
• Profile. The display name you choose, an optional avatar image, and the teams you follow. Your display name and avatar are visible to other users.
• Guest play. You can play on the web without an account. When you do, we create an anonymous account with a random identifier so your results can be saved. It holds no name or email. If you later sign up, that guest account and its results become your account.
• Game activity. Your answers, scores, Rank Points, streaks, play times, which puzzles you have completed, and how far you got in each game. Scoring happens on our servers, so submitted answers are checked and stored there.
• Community content. Posts, comments, reactions, the fans you follow and who follows you, the users you block, and any reports you file about other people's content.
• Purchases (mobile app). If paid passes are offered, the app store handles your payment. We receive a purchase record from Apple, Google and our subscription provider (see Section 5) so we can unlock what you bought. We never see your card number.
• Support messages. Anything you send to support@fanbaze.com and the email address you sent it from.
• Technical data. IP address, device and browser type, operating system, app version, language, time zone, crash reports, the pages and screens you open, and the approximate country derived from your IP address. Some of this is collected automatically by the hosting and analytics services described in Section 5.

We use personal data to:

• Run the daily games, score your results, keep streaks and show your progress.
• Operate global, league and team leaderboards, which show your display name and points to other users.
• Publish your game results and text posts to the feed and team pages, and let other fans react, comment and follow you.
• Keep the community safe by enforcing our rules, reviewing reports, hiding content and suspending accounts where needed.
• Unlock passes and archive content you have paid for, and restore purchases on a new device.
• Send account emails such as sign-up confirmation and password resets. We do not send marketing email without asking you first.
• Understand how the games are played, fix bugs, prevent cheating and abuse, and improve the Service.
• Comply with legal obligations and respond to lawful requests.

Where data protection law requires a legal basis, we rely on the performance of our contract with you (running the Service you asked for), our legitimate interests (keeping the Service secure, fair and improving), your consent (analytics cookies and personalised ads, where required), and compliance with legal obligations.

Fanbaze is a community, so some of your activity is visible by design:

• Your display name, avatar and the teams you follow.
• Your position and points on leaderboards.
• Your posts, comments and reactions, including result posts that the Service creates from your game results.
• Your followers and who you follow.

You control some of this from Settings. You can set your profile to followers only, choose whether new followers need your approval, and ask to be prompted before a result is posted on your behalf. You can also block other users, which hides your content from them and theirs from you. Your email address, password, purchases and IP address are never shown to other users.

Please remember that anything you post can be seen, copied or shared by others, and may remain in search engine caches or screenshots after you delete it.

We do not sell your personal data and we do not share it with third parties for their own marketing. We share data only with providers that process it on our behalf, under contract, for the purposes above:

• Supabase hosts our database, authentication and file storage.
• Vercel hosts the website and keeps standard server logs.
• Google provides Sign in with Google, and Google Tag Manager and Google Analytics on the website to measure how the site is used.
• Google AdMob may show ads in the free tier of the mobile app. Where the law requires it, the app asks for your consent before personalised ads are shown, and you can change that choice in Settings.
• Apple, Google Play and RevenueCat process in-app purchases and keep the record that lets us restore what you bought.
• Automated review tools, including AI models from third-party providers, may help sort and prioritise reported content. They never make a final decision on their own; a person reviews anything that is removed or leads to a suspension.
• Email delivery providers send account emails on our behalf.

We may also disclose data if the law requires it, to protect the rights and safety of users or the public, or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your data.

The website uses a small number of cookies and browser storage entries:

• Essential. A session cookie that keeps you signed in (including as a guest), a cookie that remembers the league you last viewed, and local storage that holds unsent results while you are offline. The Service does not work without these.
• Analytics. Google Tag Manager and Google Analytics cookies that tell us which pages and games are used and how people arrive at the site. Where required by law these are set only after you agree.

You can clear or block cookies in your browser settings. Blocking essential cookies will sign you out and stop results from saving. The mobile app does not use browser cookies; it stores your session on the device so you stay signed in.

We keep your account data for as long as you have an account. Game results and leaderboard history stay with your account so streaks and rankings remain accurate. Guest accounts that never sign up may be removed after a long period of inactivity.

When you delete your account, your profile, results, posts, comments, reactions, follows and blocks are deleted and your leaderboard entries are removed. Copies in encrypted backups expire within a short period afterwards. We may keep a minimal record where the law requires it, for example purchase records for tax purposes or a record of a suspension needed to enforce our rules.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you and receive a copy of it.
• Correct data that is inaccurate. You can change your display name, avatar and teams in Settings at any time.
• Delete your data. You can delete your account yourself from Settings in the app or on the website.
• Object to or restrict certain processing, and withdraw consent where processing is based on consent.
• Opt out of the sale or sharing of personal data. We do not sell or share personal data in the sense used by US state privacy laws.
• Complain to your local data protection authority.

To exercise any of these rights, email support@fanbaze.com from the address on your account. We will respond within the time the applicable law allows, usually within 30 days, and we will never treat you differently for exercising a right.

Data is encrypted in transit and at rest. Passwords are hashed and never stored in plain text. Access to production data is limited to the people who need it to run the Service, and every database table is protected by row-level access rules so users can only read and write what they are allowed to. No system is perfectly secure, so please use a unique password and tell us at support@fanbaze.com if you believe your account has been accessed without permission.

The Service is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact support@fanbaze.com and we will delete it. In some regions the minimum age for consenting to data processing is higher, and users below that age need a parent or guardian to agree to this policy.

Our providers may store and process data in countries other than the one you live in, including the United States. Where required, we rely on recognised safeguards such as standard contractual clauses so your data receives a comparable level of protection wherever it is processed.

We may update this policy as the Service changes. The date at the top shows the latest version. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect. Continued use after that date means you accept the updated policy.

Questions, requests and complaints about privacy go to support@fanbaze.com. We read every message.