⚠ DRAFT. Not legal advice and not yet reviewed by a lawyer. Do not rely on it until it has been.
Privacy notice (draft)
Last updated: 2026-10-08. Operator: [OPERATOR NAME AND CONTACT EMAIL, to be filled in].
What we collect
- Email address when you ask for a beta invite or sign in. Used to send your invite and one-time sign-in links. Nothing else.
- Cloud saves if you choose to use them: your game save files. They contain your company name and game progress.
- Technical data your browser sends (IP address, browser type) is processed by our host to serve the site and stop abuse. We keep a short-lived, hashed IP counter for rate limiting (up to a day).
- Session cookie (
plb_sid), strictly necessary, to keep you signed in for up to 30 days. No advertising or tracking cookies.
Play stats (only if you agree)
If you tick “Send anonymous play stats” at signup (or say yes when the game asks once), the game sends us, from your browser to our own server, how long you play, how far you get (game day, first bid, first win and similar), which screens and buttons you open, which choices you make on decision cards, errors, and which screen and objective you were on when you stopped acting for 3 minutes. It holds no save contents and no text you type. It is tied to your account id, not shown publicly, and read only by the operator in an admin page, to fix and balance the game. No third-party trackers. It is deleted after 90 days, and when you delete your account. Say no, or change your mind, any time by writing to the contact address above.
What we do not do
We do not sell or share your email, and we do not use it for anything unrelated to the game. Game saves stay on your device unless you turn on cloud saves.
Who processes data for us
Cloudflare (hosting, database, storage) and [email provider, to be named] (sending sign-in emails). Data may be stored and processed in Canada, the United States or other countries where they operate.
Your choices
- Ask us to see, correct or delete your data at the contact address above, or use Delete account in the game menu (removes your cloud saves, sessions and account; ask us to remove the waitlist entry as well).
- Withdraw consent to emails at any time by replying "stop"; we will remove you from the list.
Canada (PIPEDA, CASL) and US (CCPA/CPRA)
We collect the minimum personal information needed, with your consent, for the purposes above, and keep it only while needed. Invite emails are sent only to people who asked for them. We do not sell or share personal information as those terms are used in California law. Players under 13 should not sign up. [Lawyer to confirm wording, breach notice, retention periods, and any provincial law (e.g. Quebec Law 25).]
Changes
We will post changes here and change the date above.