Privacy Notice

This notice explains how CampusCompass ("CampusCompass", "we", "us") handles personal data. CampusCompass is the data controller for the personal data described here, meaning we decide why and how it is processed.

What we collect and why

• Account data — email address, authentication identifiers, and an optional nickname. Used to create and secure your account and to identify you in multiplayer rooms. Legal basis: performance of our contract with you.
• Gameplay data — games started, campuses played, guesses, scores and room membership. Used to run the game, keep scoreboards, and count games against free or paid limits. Legal basis: performance of our contract.
• Entitlement data — which plan you hold, its status and its expiry or renewal date, plus the identifiers our payment provider gives us for your purchase. Used to grant paid access. Legal basis: contract and legal obligation.
• Device and technical data — a randomly generated browser client identifier for multiplayer sessions, IP address and basic request logs. Used for security, abuse prevention and debugging. Legal basis: legitimate interests in keeping the service safe and working.
• Support messages — anything you send us when you ask for help. Used to respond to you. Legal basis: legitimate interests and contract.

We do not collect your physical location. The map and Street View imagery are served by Google based on the game location, not on where you are.

Who we share data with

• Merchant of Record — Paddle.com, which sells our plans, processes payments, manages subscriptions, handles refunds and meets sales-tax and invoicing obligations. Paddle collects payment details directly; we never see or store your card data.
• Infrastructure and service providers — our hosting, database and authentication providers, and Google Maps Platform for Street View and map tiles, acting on our instructions or under their own terms for map data.
• Professional advisers — legal and accounting advisers where needed.
• Authorities — where we are legally required to disclose data.

We do not sell personal data or share it for cross-context behavioural advertising.

Retention

Account, entitlement and gameplay data are kept while your account is active. Multiplayer room and guess data are transient and are cleared once rooms are no longer in use. Purchase records held by Paddle are retained for as long as tax and accounting law requires. When data is no longer needed we delete or anonymise it.

Security

We use appropriate technical and organisational measures, including encryption in transit, row-level access controls in our database, server-side validation of gameplay and billing actions, and least-privilege access to production systems. No system is perfectly secure, but we work to keep risk low.

International transfers

Our providers may process data in the United States and other countries. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

Your rights

Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive it in portable form, and withdraw consent where processing is based on consent. You can also complain to your local data protection authority. Contact us and we will respond within one month.

Cookies and similar storage

We use only essential storage: a session token so you stay signed in, and a local client identifier for multiplayer rooms. We do not use advertising or cross-site tracking cookies. Paddle sets its own cookies during checkout in order to process your order. You can clear this storage in your browser at any time, though you will be signed out.

Contact

For privacy questions or to exercise your rights, contact CampusCompass using the support details on your Paddle receipt or by replying to any account email we send you.