Privacy Policy

This Privacy Policy explains how Get Social Ltd (company number 12415409), trading as Popularity™ the Game ("we", "us") collects and uses personal data when you use Popularity and popularitythegame.com. We are the data controller. Our registered office address is on the public register at Companies House — look up company number 12415409 at find-and-update.company-information.service.gov.uk. ICO registration: registration in progress.

1. What we collect

Players (free, no account):

• A display name you choose and a chosen token/avatar (may be a nickname — you need not use your real name).
• A randomly generated session identifier stored in your browser's localStorage to keep you in your game across reloads.
• Technical data: device/browser type, IP address (transiently, for connectivity and abuse prevention).

Hosts / purchasers:

• The above, plus payment-related data processed by Stripe (we receive confirmation and limited billing metadata; we do not store full card numbers).
• Email address if you create an account or contact support.

Everyone: basic analytics about how the Service is used (e.g. games started/completed) — see Cookies & analytics.

2. Why we use it (lawful bases)

Purpose	Lawful basis
Running a game session	Contract / legitimate interests
Processing payments & licences	Contract
Preventing abuse, fraud, overload	Legitimate interests
Product analytics & improvement	Legitimate interests / consent
Support & communications	Contract / legitimate interests

3. Who we share it with (processors)

• Stripe — payments
• Supabase — database & realtime hosting (game state, rooms, players)
• Vercel — application hosting (region: London lhr1)
• Sentry — error monitoring (client exception telemetry)
• PostHog (EU-hosted) — product analytics and session recording, consent-gated
• Meta (Meta Pixel) — not currently active. The integration exists in our codebase but is switched off in every environment and has never run. It will only be enabled once a valid UK international data transfer mechanism is in place — see below
• Kit (formerly ConvertKit) — email marketing: if you join the waitlist or opt in when buying, we pass your email address, first name where given, and tags describing what you signed up for (for example whether you bought the physical game or a digital pass). Not currently active — the integration is built but switched off, and no data has been sent to Kit. It will be enabled around launch, and the same transfer mechanism requirement below applies to it
• Vercel Analytics — aggregate, cookieless page-view metrics

We do not sell personal data. The Meta Pixel and Kit are both inactive, so no data is currently transferred to either. Before either is enabled we will put a valid UK international transfer mechanism in place (UK IDTA or Standard Contractual Clauses) and update this policy to state which. Other providers may process data outside the UK/EEA under their own appropriate safeguards.

4. Retention

• Game/room data is transient and deleted or anonymised after a game ends or a room expires (rooms auto-purge 30 days after creation).
• Payment and accounting records are kept as required by law (typically 6 years).
• PostHog session recordings are retained for up to 12 months, then deleted.
• Email addresses captured with your consent (e.g. "email me my results") are retained until you withdraw consent or after 3 years of inactivity, whichever is sooner.
• Analytics data is retained in aggregate.

5. Your rights (UK GDPR)

You have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to data portability. To exercise these rights contact privacy@popularitythegame.com. You may also complain to the ICO (ico.org.uk).

6. Children

The Service is not intended for children under 16. We do not knowingly collect data from children under that age.

7. Cookies & analytics

See our Cookie Policy. We use essential storage (localStorage session ID) to run the game and, with your consent where required, analytics cookies.

8. Security

We use access controls, server-side authorisation, and encrypted transport. No system is perfectly secure; report concerns to support@popularitythegame.com.

9. Changes

We may update this policy; the "Last updated" date will change.

10. Contact

Data queries: privacy@popularitythegame.com · Get Social Ltd (company number 12415409), trading as Popularity™ the Game