Draft — pending legal review
Privacy Policy
Last updated: [DATE]
BrawlChem is a free party game run by [COMPANY NAME] ("we", "us"), [COMPANY ADDRESS], [JURISDICTION]. Questions or requests: [CONTACT EMAIL].
We built BrawlChem to collect as little as possible. There are no accounts, we never receive or store your voice, and we don't sell your information or use it for advertising.
The short version
- Your browser turns speech into text. We only ever get the text.
- That text, your picks and the names you type are sent to an AI service to run the game.
- Your game is saved on your own device, not on our servers.
- We keep a small anonymous ID and usage counters for a few days to stop abuse and control costs.
- BrawlChem is for adults aged 18 and over.
- The voice says "Player one" and "Player two" rather than your names, and shares hide your names unless you turn them on.
1. What we collect and why
| What | Where it comes from | Why we use it | How long we keep it |
|---|---|---|---|
| Text of what you say while the mic is on (your picks, answers, and anything else said nearby) | Your browser's speech recognition | To understand your picks and run the game | We don't store it. Our AI provider may keep it for up to [30] days for abuse monitoring (see section 3). Players should avoid saying full names, addresses or other personal details while the mic is on. |
| Picks and names you type or say (names are optional, up to 16 characters) | You | To run the match, and to show results and share cards | Not stored on our servers, apart from short-lived processing |
| An anonymous player ID (a random ID in a secure cookie) | Created when you first visit | Fair-use limits, abuse and bot prevention, cost control | 30 days from your last visit (the cookie then expires) |
| Usage counters (AI calls and estimated cost, linked to your ID and a hashed IP address) | Automatically | Same as above | [7] days, then deleted automatically |
| IP address and basic request data | Automatically | Security, abuse prevention, keeping the service running | Hosting logs: [X] days |
| Error reports (what went wrong in the app, device and browser type; never what you said) | Automatically | Fixing bugs | [X] days |
| Anonymous usage statistics (no cookies, doesn't identify you) | Automatically | Improving the game | [X] months, aggregated |
| Reports you send us (the replay link you report and your message) | You | Reviewing and removing content | [X] months |
Saved on your device only: your current game, settings such as mute, and your age check are kept in your browser's local storage. We can't see them. Clear them with "Clear my data" or through your browser settings.
Replay links: a replay link contains the match (picks, fighter names and the winner, and your names only if you turn on "Show our names on the share"; otherwise it says "Player 1" and "Player 2"). We don't store it. Anyone you send it to can see that information. When a replay link is previewed, our server briefly processes its contents to draw the preview image. We don't keep it.
Referee voice clips: to save cost, we keep the audio of generic referee lines (such as "Fusing." or "Say rematch to go again.") for up to 30 days and reuse it for every player. Cached audio contains only these generic lines: any line with a player's name or a pick in it is generated fresh each time and never stored.
2. Your voice
- Voice is optional. You can always tap instead.
- Speech-to-text is done by your browser: Chrome and Edge send the audio to Google, and Safari sends it to Apple. Their privacy policies apply to that audio.
- BrawlChem never receives, records, uploads or stores audio of your voice. We only receive the text.
- We don't use your voice to identify you, and we don't create voiceprints.
- The mic listens only while the game is on screen and waiting for you, and stops while the referee speaks or the tab is hidden. Anything said nearby while it's listening may be turned into text and sent to the AI referee.
3. Who we share information with
We share information only with service providers who help us run BrawlChem, under contracts that limit how they use it:
- [OpenAI, L.L.C.]: the AI referee and judge, content moderation, and the AI voice where ElevenLabs isn't used [CONFIRM]. [Under OpenAI's API terms, this data isn't used for training by default and may be kept for up to 30 days for abuse monitoring. CONFIRM]
- [ElevenLabs Inc.] (when it provides the voice): the AI voice. It receives the text of the referee's lines and the voice you picked. [Training opt-out, DPA and retention period to CONFIRM]
- Whichever provider gives the voice, the referee says "Player one" and "Player two" rather than your names, so names aren't sent for the voice.
- [Vercel Inc.]: hosting and security, including Vercel BotID (checks that requests come from a real browser, to stop bots), and Vercel Web Analytics (cookieless, anonymous usage statistics).
- [Upstash, Inc.]: storing the usage counters.
- [Functional Software, Inc. (Sentry)]: error monitoring.
We may also disclose information if the law requires it, to protect people's safety, or as part of a merger or sale of the service (and we'd tell you). We don't sell or "share" personal information for advertising.
4. Legal bases (for people in the EU, EEA, UK and Switzerland) [COUNSEL TO CONFIRM]
- Running the game you ask for: our legitimate interest in providing it.
- Security, abuse prevention and cost limits: our legitimate interest in keeping the service safe and available.
- Error monitoring and anonymous statistics: our legitimate interest in making the game work well.
The player-ID cookie and the data saved on your device are used only because they're needed for security and for the game you asked for. We don't use advertising or tracking cookies.
5. International transfers
We and our providers are based in the United States. We rely on [the EU-US Data Privacy Framework and its UK and Swiss extensions, and/or Standard Contractual Clauses (and the UK Addendum)].
6. Age
BrawlChem is for adults aged 18 and over. Before the first game we ask for the birth year of the youngest player and keep only a pass or fail note on your device, never the year. We don't knowingly collect personal information from anyone under 18. If you think someone under 18 has used BrawlChem, email [CONTACT EMAIL] and we'll delete anything we can link to them.
7. Your rights
Depending on where you live, you may have the right to:
- access, correct or delete your information;
- object to or restrict how we use it;
- receive a portable copy of it;
- complain to your local data protection authority.
Because BrawlChem has no accounts, we usually can't link information to you unless you give us your player ID, which is shown in Settings. "Clear my data" removes what's on your device. For anything else, email [CONTACT EMAIL]. We'll respond within [30] days.
8. Security
We use HTTPS, signed cookies, rate limits and access controls, and we keep as little as possible.
9. Changes
If we change this policy, we'll update the date at the top. For significant changes, we'll show a notice in the game.
10. Contact
[COMPANY NAME], [ADDRESS], [CONTACT EMAIL]