PRIVACY NOTICE

Last updated: 30 April 2026

WHO WE ARE

Kezaco? is operated by Wei Square Limited, a company incorporated in the United Kingdom.

If you have any questions about this notice or how we handle your data, contact us at hello@kezaco.app.

WHAT WE COLLECT

ANONYMOUS PLAYERS

  • A randomly generated ID stored in your browser (no email, no account)
  • Game results per day: number of guesses, win/loss outcome, points earned
  • In-progress game state: which clues you revealed, guess attempts made
  • Timestamps of game activity

REGISTERED PLAYERS

  • Everything anonymous players have, plus:
  • Email address (used for sign-in via magic link)
  • Username (chosen during registration)
  • League memberships: leagues joined and leagues you created

COOKIES

  • We use strictly functional cookies: Supabase session cookies — set automatically by Supabase Auth to maintain the authenticated session. These are HttpOnly, server-set, and essential for the app to work.

HOW WE USE IT

We use your data to:

  • Authenticate you and manage your account
  • Track your gameplay progress and display your personal stats
  • Power the global and seasonal leaderboards
  • Enable league features and rankings within private groups
  • Send transactional emails (magic-link sign-ins and key announcements)

We do not use your data for advertising, profiling, or sell it to any third party.

WHERE IT LIVES

We use the following data processors:

  • Supabase — database and authentication (EU region)
  • Resend — transactional email delivery (EU region)
  • Vercel — application hosting (EU region)
  • Sentry — application monitoring (EU region)
  • Cloudflare — DNS and CDN

We do not transfer your personal data outside the European Economic Area.

DATA RETENTION

For registered players, your data is retained for the lifetime of your account. Deleting your account permanently removes your email and username — email us at hello@kezaco.app to do so.

For anonymous players, your ID lives only in your browser's localStorage. Clearing your browser data removes it entirely — we have no way to recover it.

We may retain aggregated, anonymised statistics (such as total daily puzzle completions) with no personal identifiers, indefinitely.

YOUR RIGHTS

RIGHT TO ACCESS

You can ask us for a copy of the personal data we hold about you.

RIGHT TO RECTIFICATION

You can ask us to correct any inaccurate data we hold about you.

RIGHT TO ERASURE

You can ask us to delete your account and all associated personal data. We may retain anonymised data related to games results and sessions. Email us and it's gone.

RIGHT TO RESTRICT PROCESSING

You can ask us to pause processing your data in certain circumstances.

RIGHT TO COMPLAIN

If you think we've handled your data incorrectly, you can lodge a complaint with the UK ICO (ico.org.uk) or your local data protection authority.

CONTACT

To exercise any of your rights or ask questions about this notice, email us at hello@kezaco.app.

We aim to respond within 30 days as required by UK GDPR.