Privacy Notice

Hunter J. Schneider, operator of playtwenty.com, is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with, and what you can ask us to do.

What we collect and why

• Account details (email address, password managed by our authentication provider, or your Google/Apple sign-in identifier) — to create and secure your account. Legal basis: performance of our contract with you.
• Profile details (username, avatar image, invite code, who invited you) — to show you on leaderboards and in the Friends tab. Legal basis: contract.
• Gameplay data (your questions and guesses, questions used, wins, streaks, bonus lives, and a random device identifier stored in your browser) — to run the daily game, keep the leaderboard honest, and stop abuse. Legal basis: contract and our legitimate interest in preventing cheating.
• Technical data (IP address, request timing) — for rate limiting, security, and fraud prevention. Legal basis: legitimate interests.
• Anonymous product analytics (events such as “visited”, “played”, “shared”, tied to a device identifier, not your name) — to understand and improve the game. Legal basis: legitimate interests.

We do not collect or store your card details. Payment data is collected directly by our payment processor, Stripe.

Automated answers

Your questions and guesses are sent to an AI model provider so The Thinker can answer them. Do not type personal or sensitive information into the question box.

Who we share data with

• Service providers / subprocessors — hosting, database, authentication, file storage, and the AI model provider that answers questions.
• Stripe, our payment processor, for the sale of extra lives, payments, invoicing, refunds, and tax compliance.
• Other players — your username, avatar, and ranked results are public on the leaderboard by design.
• Professional advisers and authorities — where we are legally required to share.

We do not sell your personal data.

International transfers

Our providers may process data outside your country, including in the United States. Where data leaves the UK or EEA we rely on appropriate safeguards such as Standard Contractual Clauses or an adequacy decision.

How long we keep it

Account and profile data is kept while your account exists. Gameplay results are kept so leaderboards and streaks remain accurate. Rate-limit and analytics records are kept for a short period and then deleted or anonymised. If you delete your account we remove your personal data within 30 days, except records we must keep for tax or legal reasons.

Your rights

Depending on where you live, you can ask us to access, correct, delete, restrict, or port your data, object to processing based on legitimate interests, or withdraw consent. If you are in the UK or EEA you can also complain to your supervisory authority. We respond within one month. Email hunter@hunterjschneider.com.

Security

We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database security so players can only reach their own data.

Cookies and local storage

We use only essential storage: a sign-in session cookie, and browser local storage holding your device identifier, today’s progress, and your “never show the how-to-play guide again” preference. We do not use advertising or third-party tracking cookies. You can clear this at any time in your browser settings, which will reset your local progress.