Twentyroll ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our trivia game application.

1. Information We Collect

Account Information

When you create an account, we collect the information you provide, including your display name, email address, and profile photo (if provided). Authentication is handled through Firebase Authentication.

Gameplay Data

We collect data related to your gameplay, including:

Games played, scores, and accuracy statistics
Achievement progress and streaks
Leaderboard rankings
Category preferences

Device & Technical Information

We may automatically collect certain technical information including your browser type, operating system, device type, and general location data (country/region level) to improve your experience and for analytics purposes.

We record how you first found Twentyroll, for example a search engine or a friend's room link, to understand what brings people here.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve the game experience
Display leaderboards and player rankings
Track achievements and progression
Process premium subscriptions and one-time passes
Send notifications you have opted into (e.g., challenge invites)
Send email: account emails (sign-in links, receipts, Premium confirmations) always; product updates and Twenty's emails about your own games unless you switch them off; offers only if you choose to get them. Change these any time in your profile settings or from the unsubscribe link in any email.
Analyze usage patterns to improve features
Prevent fraud and abuse

AI-assisted game features

Some text in group games, such as commentary on a game or a recap at the end of it, may be written with the help of an AI model provided by Anthropic. When that happens, we send Anthropic a compact description of the game: the game type, categories, scores, answer speeds and similar game events. Players are identified only by placeholder labels such as "Player 1". We do not send names, email addresses or anything a player typed, except text a host types specifically to steer one of these features. Anthropic processes this data on our behalf to generate the text, and under Anthropic's commercial terms it is not used to train its models. We may keep the generated text and a record of the game it was written for, so it can be shown again or improved.

The suggestions at the top of your dashboard may be written the same way, from a short summary of your own play: for example how many friends joined your last game, which game it was, or your best Blitz run. That summary never includes your name, email address, device or location.

3. Data Storage & Security

Your data is stored securely using Google Firebase services (Firestore and Realtime Database). We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

4. Third-Party Services

We use the following third-party services:

Firebase (Google): Authentication, data storage, and analytics
Paddle (Paddle.com Market Ltd): Merchant of Record and payment processor for premium subscriptions and one-time passes. When you pay, Paddle collects and processes your payment and billing details directly; we do not receive or store your full card number. See Paddle's Privacy Policy.
Anthropic (Anthropic, PBC): provides the AI model behind AI-assisted game features, as described in section 1. See Anthropic's Privacy Policy.
Resend (Resend, Inc.): sends the emails we send you, such as account emails, product updates, and game recaps and reminders for hosts. Resend receives your email address, your first name and the content of the email, and keeps a list of the players we email with the email choices each one made. Every email except account emails has a one-click unsubscribe link. See Resend's Privacy Policy.

Each third-party service has its own privacy policy governing the use of your information.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Your display name and gameplay statistics are visible to other players through leaderboards and challenge results.

6. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and associated data
Opt out of non-essential notifications and emails

7. Cookies & Local Storage

We use local storage and service workers for PWA functionality, including offline caching and session management. We do not use third-party advertising cookies.

8. Children's Privacy

Twentyroll is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please email hello@twentyroll.com so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of any material changes by updating the "Last updated" date at the top of this page.

10. Contact Us

If you have questions about this Privacy Policy or your data, email us at hello@twentyroll.com. You can also review our Terms & Conditions.