1. Who is responsible for your data
BridgeDuel is operated by Vasiliki Nika, Athens, Greece, who is the data controller for the personal data described in this policy.
For privacy questions or to exercise your rights, contact contact@bridgeduel.com.
2. Data we collect
•
Account and identity data, such as your email address, username, account identifier and, if you choose Google Sign-In, the information Google provides for authentication.
•
Game data, including tournament and Duel participation, deals played, scores, rankings, progress, game history and related timestamps.
•
Guest and session data needed to let you play before creating an account and to maintain your current game or browser session.
•
Support data you choose to send us. AI Help can include your question, recent AI Help messages and limited context about the screen and game feature you are using.
•
Technical and security data needed to detect errors, abuse or unauthorised access.
3. Why we use your data
We process data when necessary to provide the service you request, when required by law, and for our legitimate interests in security, service integrity, troubleshooting and improvement, provided those interests do not override your rights.
•
To authenticate accounts, maintain guest sessions and provide BridgeDuel features.
•
To calculate and display scores, rankings, standings, results and game history.
•
To operate Duels, tournaments, practice tools and invitation links.
•
To answer support requests and provide AI Help when you choose to use it.
•
To protect the service, prevent abuse, diagnose faults and maintain fair play.
•
To comply with legal obligations and establish, exercise or defend legal claims.
4. Public and shared information
Your username, scores, results, rankings and tournament or Duel participation may be visible to other players. Do not use a username that reveals information you do not want to make public.
Anyone who receives or is forwarded a Duel invitation link may be able to open the invitation.
5. Service providers and transfers
We use Supabase for authentication, databases and server functions; Google if you choose Google Sign-In; OpenAI when you choose AI Help; Papaki for the contact mailbox; and hosting or infrastructure providers.
Some providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision, contractual safeguards or another lawful transfer mechanism.
6. Storage on your device
BridgeDuel uses browser or device storage that is strictly necessary for authentication, session continuity, game progress, navigation and security. We do not currently use optional advertising or analytics cookies.
If optional tracking is introduced, this policy and any required consent choices will be updated before it is used.
7. How long we keep data
We keep account and game records while needed to provide your account, history, standings and competition integrity. Security and technical records are kept only as long as reasonably needed for troubleshooting, abuse prevention and legal obligations.
After a deletion request, we will delete or anonymise personal data unless it must be retained for legal obligations, dispute resolution, security, or the integrity of completed competitions and shared results.
8. Your rights
Subject to applicable law, you may ask for access to, correction of, deletion of, restriction of, or portability of your personal data, and may object to processing based on legitimate interests.
Send requests to contact@bridgeduel.com. We may need to verify your identity and will normally respond within one month. You may also complain to the Hellenic Data Protection Authority at dpa.gr.
9. Security and children
We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security. Keep your credentials confidential and tell us promptly if you suspect unauthorised access.
BridgeDuel is not directed to children who cannot lawfully consent to the processing of their data. A parent or guardian should contact us if they believe data was provided without required permission.
10. Changes to this policy
We may update this policy when the service, our providers or legal requirements change. The current version and effective date will be published here.