Privacy Policy
Last updated
This policy describes information processed when you use AddictingSports. “We” and “our” refer to the operator of the AddictingSports service. You can play published games without an account, but guest play still creates the records described below.
Accounts and profile information
If you register, we store your email address, a password hash, account identifiers, membership status, and any display name, profile photo, and favorites you provide. Passwords are hashed rather than stored as readable text. Signing in can associate this browser’s guest play and creations with your account.
Gameplay and creations
We store game sessions, answers or guesses, scores, timing, completion history, and settings to operate games and results. Creation features store your brief, generated or submitted game content, drafts, publication status, and generation history. Hosted nights store the host account, lineup, guest display names, answers, and scores. Do not put sensitive personal information in game briefs or questions.
What other people can see
Completed results can appear on public leaderboards under your saved name or an anonymous label. Published community games show their content and creator attribution. Drafts are restricted by ownership controls; publishing makes a game available to others. Room participants can see player names, scores, and revealed game content. Anyone with a shared room code or invite link may be able to join. Public content may be copied or indexed by third parties.
Usage analytics and security
We record page paths, referring hostnames or shared-link sources, game starts and completions, signup and checkout events, error categories, and limited campaign labels from tagged links (source, medium, campaign, and ad variation). We connect campaign visits and subsequent activity to an internal account identifier when you sign in, to measure game completion, return visits, and paid membership. We also record game-card opens, category changes, scroll-depth milestones, visible-page time, coarse device/browser families and viewport buckets, and page-load timing. We do not record screen sessions, typed inputs, or raw user-agent strings. The analytics stream uses a hashed device identifier and does not include raw IP addresses, account emails, names, or payment-card details. Other gameplay and support records use hashed network and browser signals for abuse prevention. Hosting and service providers can process IP addresses and request metadata in their logs. Our current analytics do not collect city/country profiles, age, gender, or device GPS location. Pins placed in Globe are game guesses, not a request for your physical location.
Payments
Stripe processes payments and payment-method details. We store Stripe customer and subscription identifiers, membership and billing-period status, and payment event records needed to manage access and resolve billing issues. Our application does not collect or store full payment-card numbers.
Service providers and AI
We use Render for hosting and databases, Stripe for payments, Resend for email notifications, OpenAI for AI-assisted research and game generation, and Mapbox for maps. Information needed for each function is processed by that provider. Game briefs and related content can be sent to the AI provider; support messages may be included in email notifications. Map requests can expose network and browser information to the map provider. Providers handle information under their own applicable terms and privacy policies.
Advertising and outside links
When Google AdSense advertising is enabled for free play, Google and its partners may use cookies or similar technologies for advertising, measurement, and fraud prevention. Their handling of information is described in Google’s policies. Paid ad-free membership does not disable the first-party gameplay and usage records above. Following a source or external link takes you to another provider’s service.
Optional X advertising measurement
If X measurement is enabled on this site, we ask before loading its pixel. If you allow it, X can receive page visits, successful account creation, a first completed game, and confirmed membership purchase events including amount, currency, and a random-looking conversion identifier. The pixel can process your IP address, browser details, page URL, and cookies or ad-click identifiers to attribute visits to ads. We do not provide account emails or names to the pixel. You can decline or change your choice using Ad measurement on game pages. We also disable the pixel when your browser sends Global Privacy Control or Do Not Track. This choice does not disable the first-party service analytics above. Revoking permission stops future pixel loading; it does not retract data already received by X.
Support and other disclosures
Contact forms store the email, optional name, message, category, and page link you submit, together with protective hashed signals and delivery status. We use them to respond, investigate issues, and operate the service. We may disclose relevant records to comply with legal obligations, respond to valid legal process, prevent fraud, or protect people and the service.
Retention and security
We keep account, game, creation, and support records while needed to provide the service, address disputes, and meet legal or accounting obligations. Our analytics retention target is 180 days. Backups and operational logs can have separate retention periods. We use access controls and other safeguards, but no storage or transmission method is completely secure.
Your choices and requests
You can edit your player name, update or remove your profile photo, and manage billing from Account. Use Contact to request access, correction, deletion, or help with other privacy rights available under applicable law. We may need to verify ownership and retain records required for legal, security, or billing reasons. Account deletion and subscription cancellation are separate requests; specify both if you want both. Privacy rights and response obligations depend on where you live.
Children and international processing
The service is intended for people aged 13 and older and is not directed to children under 13. Contact us if you believe a child under 13 has provided personal information so we can investigate. Our providers may process data in the United States or other countries where they operate; protections can differ from those in your location.
Changes and contact
We will update the date on this page when the policy changes and provide additional notice when required. Send privacy questions through Contact; choose Account, billing, privacy or feedback.