← Back to menu

PRIVACY

1. Data we may process

Depending on how you use WHOSTARTED, we may process account and contact data, quiz results, progress, XP, streaks, Rhope and Challenge progress, Friend League data, game settings, technical session information, security logs, cookie choices and support messages.

  • Basic traffic measurement may run in cookieless mode without PostHog storing cookies or local/session storage. Full product analytics requires analytics consent.
  • Advertising data will only be processed within actually used systems and the appropriate consent.

2. Why

We use data to operate accounts and the game, save progress, run Friend Leagues and Rhope, provide security and support, prevent abuse and improve the product. Basic cookieless traffic measurement may run without analytics cookies; full product analytics requires consent. Advertising requires separate consent where needed.

3. Legal bases

Depending on the purpose, the basis may be performance of the service, consent, a legal obligation or a legitimate interest such as security and preventing abuse.

4. Service providers

We use Supabase for the database and authentication, and PostHog for basic cookieless traffic measurement and, after analytics consent, full product analytics, heatmaps and session replay. Hosting and technical infrastructure are used to operate the service. Ads may be served by Google AdSense – see section 7.

5. Retention

We keep data as long as needed for an account, a specific purpose, security or legal obligations.

6. Your rights

You may request access, correction, erasure, restriction, objection where applicable, portability where applicable, and withdraw consent. Contact contact@whostarted.pl.

7. Google advertising

WHOSTARTED may show ads served by Google (AdSense). Third-party vendors, including Google, use cookies to serve ads based on a user's prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads based on visits to WHOSTARTED and/or other sites on the Internet.

In the European Economic Area we show personalised ads only with your consent; depending on consent settings and Google's requirements, non-personalised ads or ads with restricted data processing may be shown instead. You can opt out of personalised advertising in Google Ads Settings (https://adssettings.google.com) or at www.aboutads.info. More on how Google uses data from partner sites: https://policies.google.com/technologies/partner-sites.