Privacy Policy
Last updated: June 2026
This policy explains how Huntly, operated by Daniel Kundert, Czech Republic (“we”, “us”), handles personal data when you use the Service. We are the data controller for organiser accounts. We comply with the EU General Data Protection Regulation (GDPR).
1. What we collect
Organisers (account holders): email address, hashed password (managed by our authentication provider), and the games and content you create.
Participants (players): players join a game from a browser without creating an account. We process the team name they enter and their in-game answers and scores. We do not ask players for an email or password. Please do not enter sensitive personal data as a team name.
Technical data: basic, privacy-friendly analytics (aggregate page views, without cookies or cross-site tracking) and standard server logs needed to run and secure the Service.
2. Why we use it and our lawful basis
- To provide the Service and your account — performance of our contract with you
- To run live games, leaderboards, and (for organisers) emailed game results — performance of contract
- To keep the Service secure and prevent abuse — our legitimate interests
- To understand aggregate usage and improve the product — our legitimate interests, using cookieless analytics
3. Who we share it with (processors)
We use trusted service providers who process data on our behalf under data processing agreements:
- Supabase — database, authentication, and storage
- Vercel — application hosting and delivery
- Resend — sending transactional and game-results emails
We do not sell your personal data. Where a provider processes data outside the EEA, that transfer is covered by appropriate safeguards such as Standard Contractual Clauses.
4. How long we keep it
We keep organiser account data while your account is active. Game and participant data is retained so you can review past sessions; you can delete games, and participant data is removed when a game is deleted. You can request deletion of your account and associated data at any time.
5. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your data (“right to be forgotten”)
- Restrict or object to certain processing
- Receive your data in a portable format
- Lodge a complaint with your local data protection authority
To exercise any of these, email hello@huntly.live.
6. Children
The Service is intended for organisers aged 16 and over. It is not directed at children. Where an event involves participants who are minors, the organiser is responsible for any consents required and should avoid collecting personal data from them through the Service.
7. Security
We use industry-standard measures including encryption in transit, hashed passwords, and access controls. No system is perfectly secure, but we take reasonable steps to protect your data and will notify affected users and authorities of a qualifying breach as required by law.
8. Changes and contact
We may update this policy; the “last updated” date above reflects the latest version. For any privacy question, contact hello@huntly.live. See also our Cookie Policy and Terms of Service.