Privacy policy

Who is responsible

Bible Party is operated by John Carl Javier, the personal information controller for this service. Our initial launch is for hosts in the Philippines. For privacy questions or requests, email privacy@playbibleparty.com.

This policy covers the Bible Party website, host accounts, cloud workspaces, feedback, and connected team phones.

Adult hosts and younger players

You must be at least 18 years old to create a host account. Younger players can participate in games supervised by an adult without creating accounts. We do not ask players for a date of birth or identity document.

For younger players: use a team nickname, not your full name. Do not put your address, school, phone number, or other private details into a game or feedback message. Ask your parent, guardian, or host for help if something worries you.

Hosts should avoid entering personal information about children or sensitive information about anyone, including religious beliefs, in team names, questions, or shared content. Parents and guardians can contact us about information concerning a child.

Local games and team phones

You can play locally without an account. The host’s browser saves game progress, settings, and custom questions. A team phone remembers its selected room and team. Clearing site data removes those browser copies, but does not delete content already saved to a cloud workspace.

When a host enables phone play, Supabase Realtime relays team names, game information, questions, team answers, and buzzer events between connected devices. People with the room code can access the room. The host and projector may also display game information to people at the event. Do not treat a room code as a private account password.

Accounts and shared workspaces

Creating an account sends your display name, email address, and password to Supabase Authentication. We use your account identifier and authentication session to sign you in, verify your email, recover access, and operate account features.

Workspace features store workspace names, memberships, roles, invitations, and plan access. A host may supply your email address to invite you. Cloud saving stores named game setups and their settings. An optional import copies selected local setups and custom questions to your chosen workspace.

Workspace content is available to other members according to their permissions. Only add other people’s information when you have a lawful reason to do so and have informed them appropriately.

Feedback and service information

Feedback includes your message, category, page path, submission time, and an optional contact email. If you are signed in, the submission is associated with your account identifier. We use it to investigate problems, improve the service, and reply when appropriate. Feedback is not displayed as public comments.

Requests to our hosting and backend services include technical information such as your IP address and request details. Providers may maintain operational and security logs to deliver and protect the service.

Visitor and game analytics

We use Cloudflare Web Analytics to understand visits, page views, referral sources, device and browser types, and page performance. Its visitor measurement does not use analytics cookies or a persistent visitor identifier.

We also record game starts and completions in Supabase to understand which games are played. These records use a random identifier for each game, the game type, team count, and event times. We do not include account identifiers, team names, room codes, questions, or answers in these game analytics records. Team counts are not counts of individual people.

Analytics may be unavailable when you play offline or block tracking. We respect your browser’s Do Not Track and Global Privacy Control signals for these analytics. Game analytics failures do not prevent you from playing.

Why we process information

We process information needed to provide the account and game features you request. We also use proportionate information for legitimate purposes such as keeping the service secure, troubleshooting, and responding to feedback, subject to your rights. Where processing requires consent, we must obtain it separately; reading this policy does not itself give consent. We may retain or disclose information where required by law.

Browser storage and providers

Browser storage remembers local games, preferences, sign-in sessions, workspace selection, cached account access, import choices, and the feedback cooldown. Signing out does not clear every locally saved game. On a shared device, sign out and clear site data when appropriate; export local content you want to keep first.

We use Vercel for website hosting and Supabase for authentication, cloud data, and connected phone play. These providers and their subprocessors may process information outside the Philippines. Email providers also process account messages and correspondence you send us. We remain responsible for choosing appropriate arrangements for personal information handled on our behalf.

See Vercel’s privacy policy, Supabase’s privacy policy, and Cloudflare’s privacy policy for their handling of information. We do not use the current application to serve targeted advertising.

How-to videos on our pages are hosted on YouTube. Nothing loads from YouTube until you press play, apart from the video’s preview image; the player then comes from YouTube’s privacy-enhanced domain and is covered by Google’s privacy policy.

How long we keep information

• Accounts: while used or needed to provide an ongoing service. We review accounts after 24 months without sign-in and give at least 30 days’ notice before deletion for inactivity. Active subscriptions and shared-workspace ownership require a separate review.
• Feedback: up to 12 months after receipt, unless an unresolved support or security matter requires it longer. We can retain product lessons after removing identifying details.
• Invitations: unnecessary invitation details are removed within 30 days after expiry, revocation, or acceptance. Membership records needed to operate the workspace are separate.
• Local browser data: until you or your browser remove it. We cannot remotely erase every offline browser copy.
• Logs and backups: retained according to the providers’ configured retention cycles. Deleted live data may remain in restricted backups until those copies expire; we do not promise immediate removal from every backup.

We may retain limited information longer where necessary for a legal obligation, a dispute, or a documented security need. Shared content may need to be transferred to another workspace owner or separated from your identity instead of deleting other members’ work.

Your choices and rights

You can play locally without an account, leave the feedback email blank, choose whether to connect phones, and choose whether to copy local content to a workspace. Account settings let you update supported profile and sign-in information.

Under applicable Philippine privacy law, you may request information about processing, access to your personal information, correction, erasure or blocking, portability where applicable, and object to processing. You may withdraw consent where processing relies on it. These rights are subject to applicable conditions and exceptions.

Email privacy@playbibleparty.com with your request. Do not send a password or sign-in code. We may ask for proportionate information to verify your identity. We aim to complete eligible deletion requests within 30 days after verification and will explain any necessary exception or delay. This is a service target, not a limit on your legal rights.

You may also raise a complaint with the National Privacy Commission and exercise other remedies available under applicable law.

Changes to this policy

We will update the date above when this policy changes. For material changes, we will provide appropriate notice before new processing takes effect and obtain consent separately where required.