Privacy policy

Decision Bowl ("we", "us") runs the Decision Bowl app at decisionbowl.com. This page explains what personal information we collect, why, and the choices you have. For any question about it, write to hello@decisionbowl.com. That address reaches the person responsible for the protection of personal information at Decision Bowl.

• Your account. Your email address, and the name you choose to be called in your bowls. We email you a 6-digit code to sign in; it expires after 5 minutes. We don't use passwords.
• Your sessions. When you sign in we record the IP address and browser details (user agent) of that device, so you can stay signed in and so we can spot abuse. A session lasts up to 30 days.
• What you add. Bowl names, the slips you write (a title and an optional note), who pulled which slip and when, and the email addresses you invite.
• Your privacy choice. If you answer the privacy banner, we keep a record of your answer, when you gave it, and your browser's user agent, so we can show that your choice was respected.
• Premium, if you buy it. Stripe takes the payment on its own page, and we never see or store your card number. We keep your Stripe customer ID, which plan you bought, whether it is active, when it renews, and which of your bowls it covers.
• Usage and error data, only if you accept. Which features get used and crash reports, linked to a random account ID, plus the email address you signed up with. These never contain your name or the text of your slips. We do not record sessions or screens.

We don't ask for your location. If that changes, we'll update this page before it does.

• To sign you in, run your bowls, and send the codes and invitations you ask for.
• To keep the service secure and to prevent abuse.
• If you accept: to see how the app is used and where it breaks, so we can fix and improve it.
• To meet legal obligations.

We don't show ads, and we never sell your personal information.

By default a slip is secret: only you can read it until someone pulls it out of the bowl. After that, everyone in that bowl can see it, along with who added it. Other members, including owners and admins, can't read your secret slips through the app. The people in a bowl also see each other's names, and each member's role.

We run the service, so we could technically reach data in our database. We do that only to operate, fix, or protect the service, or when the law requires it.

We share personal information only with the services that help us run Decision Bowl:

• Vercel, which hosts the app.
• PlanetScale, which hosts our database.
• Resend, which delivers our emails (sign-in codes and invitations).
• Stripe, which takes payments for premium. It receives your email address and what you pay, and keeps its own records as financial law requires.
• PostHog (United States), which receives usage and error data, only if you accept.

These providers may process data outside Quebec and Canada, including in the United States. They may only use it to provide their service to us. We may also disclose information when the law requires it.

We use what's needed to run the app: a cookie that keeps you signed in, and one that remembers your privacy choice. Analytics storage is used only if you accept, and we use nothing for advertising. You can change your answer any time with "Privacy choices" in the footer of any page.

• Account information, bowls and slips: while your account exists.
• Plan records (customer ID, plan, renewal date): while your account exists. Stripe keeps payment records for as long as the law requires.
• Sign-in codes: 5 minutes. Sessions: up to 30 days. Email invitations: 7 days.
• If you ask us to delete your account, we'll delete it within 30 days. Slips you wrote stay in the bowl they belong to, without your name on them.

You can ask us to show you the personal information we hold about you, correct it, give you a copy of it, or delete it, and you can withdraw your consent at any time. Write to hello@decisionbowl.com and we'll answer within 30 days. If you live in Quebec, these rights come from Quebec's privacy law; if you live elsewhere, the law of your region may give you similar ones.

If you're not satisfied with our answer, you can complain to the Commission d'accès à l'information du Québec, the Office of the Privacy Commissioner of Canada, or the data protection authority where you live.

Decision Bowl isn't meant for children under 14, and we don't knowingly collect their information. If you think a child has given us theirs, write to hello@decisionbowl.com and we'll remove it.

When we change this policy, we'll update the date at the top. If a change is significant, we'll tell you in the app or by email before it takes effect.