Privacy Policy

Who is responsible for your data

Confettale is run by the Confettale team from Nigeria. For any privacy question or request, email confettale.help@gmail.com. We handle personal data in line with the Nigeria Data Protection Act 2023 and, where they apply to you, the EU and UK General Data Protection Regulation.

What we collect

When you create an event (hosts)

• The guest of honour's name, the occasion, your trivia questions, answer choices and correct answers.
• Bingo squares, your game choices and the event's status.
• An unfinished draft is kept in your browser tab until you finish or start fresh.

When guests play

• A nickname, trivia answers, Read the Room votes and predictions, and scores.
• A random ID stored in the browser, so each device answers once. Guests don't need an email or account.

Accounts (optional)

• Your email, display name and a securely hashed password, or your Google account details if you sign in with Google.
• A login cookie that keeps you signed in.

Payments

• The receipt email you enter and the payment reference. Card and bank details go straight to Paystack. We never see or store them.

Custom card designs

• An image you upload for your card backs is prepared in your own browser to build your PDF. It isn't stored on our servers.

Abuse protection

• To stop spam, we count how many events are created per hour from each browser and network. The network address is stored only as a one-way scrambled code (a hash), not in readable form.

Why we use it

Only to run your event, show scores, make your printable pack, process your payment, keep your account working and protect the service from abuse. We don't sell your data and we don't show ads.

Who can see it

• Anyone with the guest link can see the event's questions and bingo squares. Answers, nicknames and scores appear after the host reveals them.
• Anyone with the private host link can see the answer key and control or delete the event. Keep it safe.
• Services that help us run Confettale: Floot (website hosting and database), Paystack (payments), Google (sign-in, if you choose it, and website fonts), Unsplash (photos on our pages) and jsDelivr (a tool that shows PDF previews). Some of these may receive your device's internet address when pages load.

How long we keep it

• Events and guest answers are deleted automatically 30 days after the event is created.
• Hosts can delete an event and all its answers at any time from the host desk.
• Account details stay until you ask us to delete your account.
• Payment records are kept as long as the law requires for accounting.
• PDFs you download stay on your device; we can't recall copies that have been printed or shared.

Things to keep out of your games

Please don't put addresses, phone numbers, health details or anything private in questions. If the guest of honour is a child, use a first name only and keep facts light.

Your rights

You can ask to see, correct or delete your personal data, or object to how we use it. Email confettale.help@gmail.com with your guest link or account email. Never send your private host link. You can also complain to your local data protection authority (in Nigeria, the Nigeria Data Protection Commission).

Children

Hosts and account holders must be 18 or over. Guests of any age can play at a host's invitation. Guests don't need to give any contact details, and hosts should supervise younger players.

Changes

If we change this policy we'll update the date at the top. See also our Terms of Service and Refund Policy.