Privacy Notice
Last updated: 2026
1. Who we are
Baphora ("we", "us") operates the Baphora game and is the data controller for the personal data described here. Contact: support@baphora.com.
2. What we collect and why
Account data (email address, username, password credentials handled by our authentication provider) to create and secure your account — necessary to perform our contract with you. Gameplay data (tables played, hands, decisions, XP, level, rating, streaks) to run the game, show your progress and statistics, and rank players — contract performance. Technical data (IP address, device and browser information, error logs, usage events) for security, fraud and anti-cheat prevention, and to improve the product — our legitimate interests. Support messages you send us, to answer you. Subscription status linked to your account, so we know whether Pro features are unlocked. Card and billing details are collected and processed by Paddle, not by us.
3. Who we share it with
Service providers acting on our instructions: hosting, database and authentication infrastructure, and error monitoring. Paddle.com, our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing. Professional advisers such as legal and accounting, where needed. Public authorities where required by law. We do not sell personal data.
4. International transfers
Our providers may process data outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.
5. Retention
We keep account and gameplay data for as long as your account exists and for a short period afterwards to handle disputes and abuse. Technical logs are kept for a limited period. Transaction records are retained as long as tax and accounting law requires. When data is no longer needed it is deleted or anonymised.
6. Your rights
Subject to local law, you may request access to your data, correction, erasure, restriction, portability, and object to processing based on legitimate interests. Where we rely on consent, you can withdraw it at any time. Email support@baphora.com and we will respond within one month. If you are in the UK or EEA you may also complain to your supervisory authority.
7. Security
We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls on our database, and restricted administrative access.
8. Cookies and local storage
We use strictly necessary cookies and browser storage to keep you signed in, remember your chosen difficulty and onboarding state, and secure the checkout. Our payment provider sets cookies needed to process your order. We do not use advertising cookies. You can clear or block storage in your browser settings, but sign-in will stop working.