Privacy Policy

This policy explains how the WASTED party game handles your data: the iPhone app (App Store), the Android app (Google Play) and the web version at wastedapp.nl/play. Effective date: 2026-10-19.

Who is responsible

Michiel de Ruiter (WASTED), the Netherlands, is the controller under the GDPR. Contact: sees@wastedapp.nl.

In short

• No account, no email address, no login with name.
• No advertising, no advertising ID, no analytics or crash-reporting tools, no tracking across apps or websites.
• We never sell or share your data for advertising.

Playing on one phone

If you pass one phone around, player names, scores, settings (language, sound) and your unlock status are stored only on your own device. They are not sent to us. Deleting the app removes them.

Multiplayer with a room code

When you create or join a room, the app signs in anonymously with Google Firebase Authentication. This creates a random user ID, without your name or email. During the game the following is stored in Google Firebase Realtime Database (Europe, Belgium region): the room code, the nickname you enter, whether you are online, your answers, scores and game progress, and timestamps.

How long: rooms (room code, nicknames, scores and other room data) are deleted automatically 4 days after the last activity in the room, so players can rejoin within those 4 days. A room is deleted earlier when the host ends or leaves the game, or on request. The anonymous user ID stays in Firebase Authentication until it is deleted; it contains no personal details, and we delete it on request.

Purchases

You can unlock the full game with a one-time in-app purchase. On iPhone the payment is processed by Apple, on Android by Google. We never receive your card or bank details. To check that a purchase is genuine, the app sends the purchase proof (such as the transaction or purchase token, product ID and purchase date) to our verification service on Google Cloud Functions (Europe), which checks it with Apple or Google. We do not keep a database of purchases; technical logs of these checks are kept by Google Cloud for up to 30 days. Refunds are handled by Apple or Google.

Cast to your TV

To find your TV, the app searches your local Wi-Fi network for Google Cast devices; on iPhone, iOS asks for your permission for this (Local Network). Player names, the map and standings are then sent directly from your phone to your own TV. They are not sent to our servers.

Flags and logos

Quiz images are included in the app. If an image is missing, the app may load it from flagcdn.com or Google's favicon service; like any website, these services then see your IP address.

Legal basis

We process data because it is needed to provide the game and the features you choose to use (GDPR art. 6(1)(b)), and to verify purchases and prevent fraud (legitimate interest, art. 6(1)(f)).

Service providers and transfers

We use Google (Firebase, Google Cloud) as processor; data is stored in the EU, but Google may process it outside the EEA under the EU Standard Contractual Clauses or the EU-US Data Privacy Framework. Apple and Google process payments under their own privacy policies.

Your rights

You may request access, correction or deletion of your data, object to processing, or ask for data portability. Email sees@wastedapp.nl with your room code or nickname if relevant; we reply within 30 days. You can also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Age

WASTED is intended for adults (18+). We do not knowingly collect data from children. If you believe a minor has used multiplayer, contact us and we will delete the data.

Security

All connections use encryption (HTTPS). Database rules only give signed-in app users access to rooms, check every write, and only let the host delete a room.

Changes

We will post any changes on this page with a new effective date. Previous versions are available on request.

Contact

Questions about privacy? Email sees@wastedapp.nl.