Privacy Policy

Last updated: 2026-10-11

Witbolt is a short, fair head-to-head quiz game. This policy explains what the Witbolt app collects, why, how long it is kept and how you can have it deleted. We collect only what the game needs to run, rate players fairly and stay reliable.

What we collect and why

Account and gameplay data

When you open the app we create an anonymous account with our backend provider (Supabase). This gives you a random player ID. We store, linked to that ID: your battle attempts (your answers and how long each took), results, ratings, challenges you send or accept, and the matches you play. We use this to run Battles, score them on our servers, calculate ratings and show your history and Mind Profile.

A display name is part of the profile record but the app does not currently ask you for one.

Sign-in, only if you add it

You can optionally save your progress with Apple, Google or an email address so you can sign in again on another device. For email we send a 6-digit sign-in code to that address. For Apple and Google the sign-in happens on your device with that provider; Witbolt asks Apple for no personal details and asks Google only for the basic sign-in profile (email address, name and profile picture). Our backend provider (Supabase) receives and stores what the provider returns, and we use it only to recognise your account. We never see your Apple or Google password. If you never save your progress, we hold no email address for you. Our hosting and authentication infrastructure may also log technical data such as IP address and session details for security and operations.

Product analytics

We use an analytics provider (PostHog) to understand which parts of the game work. We send a fixed list of product events (for example, a battle started or finished) with simple values such as counts and categories. Events are tied to your internal player ID, never to your email. The analytics SDK also records standard device and operating-system properties. We do not use session replay and we do not use automatic event capture.

Crash and error reports

We use Sentry to receive crash and error reports so we can fix bugs. Personal-data collection is switched off, and sign-in tokens and challenge links are scrubbed before reports are sent. Reports include device and operating-system context.

Battle updates (push notifications)

Push notifications are optional and off until you turn on Battle updates and allow notifications on your device. If you do, we store a push token for your device (a random address issued by Apple or Google through the Expo push service), your platform, and your notification choice, linked to your player ID. We send a notification when a friend plays your challenge or a result is ready. The notification contains no sign-in details. You can turn Battle updates off in the app or in your device settings; we then stop sending. The token is deleted when you delete your account.

Data stored on your device

The app stores your settings, your sign-in session and a local battle journal on your device. Uninstalling the app removes this local data.

Challenge links

If you install the app from a friend's challenge link, we use a one-time handoff so the challenge opens after install. On iOS the app reads the clipboard once, on first launch only, to pick up the link. On Android we use the Google Play install referrer. We use this only to open that challenge. When a challenge page is opened in a browser we count the view against that challenge, with only the rough platform (iPhone, Android or other). We do not store your IP address, browser details or any identifier, and we set no cookies.

What we do not collect

The app contains no advertising and no ad tracking. It does not ask for your location, camera, microphone or contacts. No payments are taken. Witbolt Pro is currently only an interest experiment: we may record that you showed interest, and no payment is requested or charged.

How long we keep data

We keep account and gameplay data while your account exists, and delete or anonymize it after you delete your account as described below. Analytics and crash data are kept only as long as needed for product quality and debugging. Specific retention periods are set by our providers and our configuration, and we will update this page if they change.

Where data is processed

Our backend database and sign-in service run in the European Union (Ireland). Product analytics and crash reports are sent to EU-hosted projects. If you enable Battle updates, the push token is passed to Expo's push service, and then to Apple or Google, which operate internationally and may process it outside your country. Our web pages are served by a hosting provider that keeps routine technical logs.

Sharing

We do not sell personal data. We share data only with the service providers named above (Supabase for backend and sign-in, PostHog for analytics, Sentry for crash reports, and Expo with Apple and Google for push delivery if you enable Battle updates), who process it for us. Opponents see your game activity in shared matches, such as your rating and results.

Deleting your data

You can delete your account in the app at any time, and you can also follow the steps on our account deletion page. Deleting your account removes your account email (if you added one), your profile and your sign-in. Match results and rating evidence involving other players may be kept in anonymized form, so that opponents' histories and ratings stay correct. You can also ask us to delete analytics and crash data linked to your player ID by contacting us.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to complain to your local data protection authority. Contact us to exercise these rights. We will verify that the request comes from you before acting on it.

Children

Witbolt is not directed at children under 13 (or under 16 where local law sets a higher age). We do not knowingly collect personal data from children below that age. If you believe a child has used the app, contact us and we will delete the data.

Security

Scoring and ratings are decided on our servers, not on your device, and data is sent over encrypted connections. No system is perfectly secure, but we limit what we collect so there is less to protect.

Changes

If we change this policy we will update the date above. For significant changes we will tell you in the app.

Contact

Questions or requests: support@witbolt.app.