Privacy Policy

1. Who runs BluGame

BluGame is run by elementk, Polish tax ID (NIP) 7590004958. For anything privacy-related, write to contact@blugame.eu.

2. What data the app stores, and where

In the basic version of BluGame there is no game-side server: all gameplay happens directly between phones at the table, over Bluetooth — no game data reaches the internet. The exception is the optional Custom version (for venues and event organizers), which uses a BluGame server and is described in section 5.

Your identity in the app (a secret identity key — created automatically on first launch and never shown to you, player ID, nickname, local stats of games played) is stored exclusively on your own device, in the system's encrypted storage (Keychain on iOS, Keystore on Android) — the same mechanism your phone uses for passwords and other sensitive data. We never write it to a plain, unencrypted file, and never send it anywhere automatically.

3. Why the app asks for permissions

• Bluetooth — required for the game itself: finding tables in range, creating your own table, and communicating with other players at the table.
• Location — on Android versions older than 12, the operating system requires this permission for the app to scan for nearby Bluetooth devices at all. BluGame never reads or stores your actual geographic position — this is purely a formal system requirement for Bluetooth, not a navigation or tracking feature. On those older Android versions the system also requires the device-wide “Location” switch to be turned on. That is a phone setting that you control; granting this permission to BluGame does not give any other app access to your location, and you can turn the switch off after the game.
• Notifications / background service — keeps the Bluetooth connection active while the phone is locked or the app is in the background, so gameplay doesn't get interrupted.

4. The website

blugame.eu and blugame.com.pl are BluGame's information website. We don't use tracking cookies, analytics, or ads. At /app/ we offer a preview of the app in the browser; the only data stored locally by the browser is a technical cache that lets the preview run offline after the first load.

5. Custom BluGame (for venues and organizers)

This section applies only to the optional, paid Custom BluGame version and to the data of its customers (venues and event organizers), not of players. The controller of this data is elementk, Polish tax ID (NIP) 7590004958 (contact@blugame.eu).

What data we process:

• the e-mail address given when buying the subscription,
• a random account identifier and a cryptographic hash of the panel access token (we do not store the token itself),
• your Paddle subscription identifier linked to your venue,
• venue data: identifier, public key, status, and the personalization settings you enter (logo, texts, theme, options) and — if you use it — the quiz question bank,
• during a Custom quiz session: team names, chosen answers and points — kept only in the server's memory while the session lasts,
• technical server events (time, type of operation, venue and account identifiers) used for security — by design without passwords or payment data.

What we do not process: we cannot see your card number or other payment data — Paddle processes it. In the Custom version we do not collect player data: gameplay and personalization are passed between phones locally over Bluetooth (the exception is the Custom quiz described above, where teams send answers through the server).

Purposes and legal bases: performance of the contract and delivery of the service (Art. 6(1)(b) GDPR); security, abuse prevention and defence of claims (Art. 6(1)(f) GDPR). Tax and accounting obligations related to the sale are handled by Paddle as the seller.

Recipients: Paddle — the Merchant of Record, which handles payments, VAT and invoices as an independent controller of payment data (for customers outside the US and Canada this is Paddle.com Market Limited, based in the United Kingdom; Paddle's rules: paddle.com/legal/privacy); the hosting provider of the Custom server (Fly.io, data stored in the Frankfurt region in the EU); the hosting provider of the website. We do not sell data.

Retention: we keep account and venue data while the subscription lasts and for 30 days after it ends, then delete it; technical events are kept for up to 30 days. Billing data is kept by Paddle as required by law.

Browser: the customer panel stores the access token in your browser's local storage only to keep you signed in; we use no tracking or advertising files for this.

Your rights: you have the right of access, rectification, erasure, restriction of processing, objection, data portability and to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). Write to contact@blugame.eu.

6. Your rights

Because your data stays exclusively on your own device, you have full and direct control over it — you can view, edit (e.g. change your nickname), and delete (uninstall the app) it yourself, without going through us. If you have questions about data processing, write to the address in section 1.

7. Changes to this policy

If the app starts actually processing data outside the device, this policy will be expanded accordingly, and the date at the top of the page updated.