Privacy Policy

What we collect

• Account: your name and email address, and a password (stored hashed) or your Google account id if you sign in with Google. Guests get a random guest token instead.
• Photos and boards you upload, the regions you mark on them, and the names you give them.
• Game data: rooms you join, the cards in play, and the results of rounds.
• Payments and card checks: handled by Stripe. We never see or store your card number. We keep your subscription status, the Stripe customer id, and the card brand and last four digits. We also keep a fingerprint of the card (a code from Stripe, not the number) to stop one card from making many accounts. A card saved only to confirm who you are is not charged.
• Visit statistics in Google Analytics, with the steps you reach (such as a round played, signing up, a trial or a payment, with the plan and price) and, signed in, your account number. Only if you allow it in the cookie banner.
• Which steps you reach on the site, with the time: for example played a round, made a board or started a trial. Signed in, this is part of running your account; as a guest, only if you press Allow. Never your photos or anything you type.

Why we use it

To let you sign in, play with a friend, keep your boards, take payment for a subscription, keep the service safe, and understand how the site is used (for guests only with consent).

Who receives it

We use a few services to run IsItBob: Stripe (payments), Pusher (live game updates), our file storage and hosting providers (your photos and our servers), Google (sign in, and analytics if you allow it). They only get what they need to do their job. Your opponent sees the cards in the game, never your other photos. Players can report a photo; we review reports and remove photos that should not be here.

Cookies and storage

• Needed to run the site: a session cookie and a security (CSRF) cookie keep you signed in and safe. They do not need consent.
• Preferences kept in your browser: your cookie choice, language and colour. Only the cookie choice is also sent to us, so we respect it.
• Optional: Google Analytics cookies, set only after you press Allow. You can change your mind under "Policy" in the footer.

Who is responsible

IsItBob is run by ZIMONH, Leliestraat 11 ZW, 2011 BL Haarlem, the Netherlands (Chamber of Commerce number 65118324, VAT number NL002265502B52). ZIMONH decides what happens with your data and is the contact for everything on this page.

How long we keep it

Your account and boards stay until you delete your account. When a trial or a paid plan ends, we keep your account, your first photo and your first board, and delete your other photos and boards after 30 days. Finished games are deleted after 7 days. Closed photo reports are deleted after 6 months; open reports are kept until we have decided.

If we remove a photo after a report, it is gone from the game at once. We keep it for 60 days where only our team can see it, in case the same thing comes back, and then delete it.

Your rights

You can ask to see, correct, export or delete the data we hold about you, and you can withdraw your cookie consent at any time. If you are in the EU or UK you can also complain to your data protection authority.

Children

IsItBob is for people aged 13 and over. We do not knowingly collect data from younger children.

Contact

Questions or requests about your data? Get in touch via zimonh.nl.