Privacy Policy
Effective 2026-07-26 · Last updated 2026-07-26
1. Who we are
MindBluff is operated by Busayo Adegbuji (“we”, “us”). Contact: mindblufftrivia@gmail.com.
2. Information we collect
- Account information when you sign up: email address, password (hashed by our authentication provider), display name, avatar emoji, and optional 2-letter country code.
- Gameplay data: rooms you join, scores, correct answers, bluffs, steals, streaks, XP, level, achievements, titles, and per-category stats.
- Guest identifiers: a random session token stored in your browser’s local storage so you can rejoin a game after a refresh. No email is required for guest play.
- Feedback you voluntarily submit through the in-app feedback form, plus diagnostic context (app version, route, viewport size).
- Basic technical data received by any web server: IP address, user-agent, and request timestamps (used for abuse prevention and service reliability, not sold or profiled).
3. Why we collect it
- To operate the game: authenticate you, sync rooms in real time, calculate scores, and award XP.
- To show your profile, achievements, and titles.
- To fix bugs and improve gameplay through feedback and error reports.
- To protect the service from cheating, abuse, and automation.
4. How we store and secure it
Account and gameplay data are stored in a managed Postgres database with row-level security so each user can only read and write their own records. Passwords are handled by our authentication provider and never stored in plaintext. Traffic to the site is encrypted with HTTPS.
5. Services we use
MindBluff currently uses the following third-party processors:
- Supabase (hosting, database, authentication, real-time sync).
- Lovable (application hosting and deployment).
- Lovable AI Gateway (question generation top-ups; no personal data is sent).
We do not currently use advertising networks, payment processors, or push notification providers. If that changes, this page will be updated before the change takes effect.
6. Sharing with third parties
We do not sell your personal data. We share data only with the processors listed above, strictly for operating the service, and only to the minimum extent required. [legal review required for jurisdiction-specific disclosures.]
7. Data retention
- Account data is kept while your account is active.
- When you delete your account, we anonymize your participation in past games so opponents’ match history stays intact, and we permanently remove your profile, achievements, titles, and authentication record. See Account deletion.
- Feedback submissions may be retained after deletion in an anonymized form for product-quality purposes.
8. Your rights
You may access and update your profile at any time from the Profile page, and you may initiate account deletion from within the app or via the Support page. [legal review required for GDPR/CCPA/UK-specific rights language.]
9. Children
MindBluff is designed to be family-friendly, but the service is not directed to children under 13 (or the minimum age in your jurisdiction). If you believe a child has created an account, contact us and we will remove it.
10. Contacting us about privacy
Email mindblufftrivia@gmail.com with the subject line “Privacy request”.
11. Changes to this policy
We will update the “Last updated” date at the top of this page when this policy changes. Material changes will be highlighted in-app before they take effect.