Privacy Policy

Who is the data controller

The controller of data processed in the Service is the operator of DRAMA. For all matters relating to personal data, contact: kontakt@dramahub.party.

What data we process

The data we process depends on how you use the Service:

• Data stored locally in your browser — your nickname, chosen language, gameplay settings, age confirmation for 18+ categories and your consent choices. We keep this in your browser storage (localStorage and essential cookies) and, until you create an account, we do not send it anywhere.
• Account data (if you sign up / log in) — your email address and basic profile data needed to run your account and Premium subscription.
• Payment data — when you buy Premium, the transaction is handled by an external payment provider. We do not store your card details.
• Analytics data — anonymous product events (e.g. creating a room, starting a game, viewing the purchase screen), without building a personal profile.
• Technical and advertising data — when ads are shown, the ad provider may use cookies and identifiers (see the advertising section).

Account and hosting (Supabase)

If you create an account, your account data is hosted on Supabase infrastructure in the Frankfurt region (Germany, European Union). Supabase acts as a processor on our behalf.

Payments (Lemon Squeezy)

Payments for the Premium subscription are handled by Lemon Squeezy, Inc. (USA), acting as the Merchant of Record. They are independently responsible for billing, payment data and taxes, including EU VAT. This means your card details go directly to Lemon Squeezy, not to us.

Analytics (PostHog)

To measure how the Service performs we use PostHog hosted in the European Union (eu.i.posthog.com). We collect only anonymous product events and do not build a personal profile (we do not call posthog.identify). Analytics uses localStorage instead of cookies, so we do not set analytics cookies.

Advertising (Google AdSense)

The Service may display ads delivered by Google AdSense. For this, Google and its partners may use cookies and identifiers to serve and measure ads, including personalized ads.

For users in the European Economic Area, the United Kingdom and Switzerland, consent for advertising cookies is collected by Google’s certified Consent Management Platform (CMP) in line with GDPR. You can change your choice at any time. Learn more about how Google uses data: policies.google.com/technologies/partner-sites.

Cookies

We use the following categories of cookies and browser storage:

• Essential — remember your language, settings and consent choices; without them the Service does not work properly.
• Advertising — set by Google AdSense to serve ads; in the EEA/UK/CH they require your consent.
• Analytics — runs on localStorage, with no analytics cookies.

Legal bases (GDPR)

• Consent (Art. 6(1)(a) GDPR) — personalized ads and optional cookies.
• Performance of a contract (Art. 6(1)(b) GDPR) — running your account and Premium subscription.
• Legitimate interest (Art. 6(1)(f) GDPR) — keeping the Service secure, functional and improving it using anonymous analytics.

How long we keep data

Data stored locally stays in your browser until you delete it (by clearing site data). Account data is kept for as long as the account exists and is removed after deletion, subject to retention periods required by law (e.g. payment records).

Your rights

Under the GDPR you have the right to:

• access your data and obtain a copy of it,
• rectify inaccurate data,
• erase your data (“right to be forgotten”),
• restrict processing,
• object to processing,
• data portability,
• withdraw consent at any time (without affecting the lawfulness of processing before withdrawal),
• lodge a complaint with a supervisory authority — in Poland this is the President of the Personal Data Protection Office (UODO).

To exercise these rights, email kontakt@dramahub.party.

Children

The Service is not directed at children. Categories marked 18+ require age confirmation and are available only with a Premium subscription. If you believe a child has provided us with data without a guardian’s consent, contact us and we will delete it.

Changes to this policy

We may update this Privacy Policy. We will announce material changes within the Service, and you can find the last updated date at the top of this page.