Privacy Policy

Controller Information

Sarit Quirin
53 Miry Brook Rd
CO Ofer Express
Danbury, CT 06810
hi@truthorcarol.com

What Data We Process

Email updates. If you sign up for updates, we store your email address and send you launch news, playtest invites and related emails. You are only added after you confirm your address through a link we send.

The digital demo. When you play at truthorcarol.com/play we store the name you enter and what happens in the game. If you ask for the end-of-game summary, we also store the email address you give us and send the summary there. When a game is created, we look up the host's country and region from their IP address; we keep the country and region, not the IP address.

Playtest feedback. If you answer the questions at truthorcarol.com/feedback, we store your answers, the time you sent them and your approximate location (city, region and country), which our host Vercel derives from your connection. We do not store your IP address.

Visiting the website. The site is hosted by Vercel. Like every web host, Vercel's servers automatically keep short-lived technical logs of each request (IP address, browser type, the page requested and the time) to keep the site running and secure and to prevent abuse. We also use Vercel Web Analytics, which counts page visits without cookies and without identifying you.

Legal Basis (GDPR)

Email updates and Santa's Nice List are based on consent (Article 6(1)(a) GDPR). You may withdraw consent at any time via the unsubscribe link in every email or by contacting us.

Running the demo you asked to play, playtest feedback, the hosting logs and the visit counts are based on our legitimate interest in providing a working, secure website (Article 6(1)(f) GDPR).

Service Providers

We use these providers to run Truth or Carol. Each processes data only on our behalf:

• Resend sends our emails and keeps our list of subscribers. Privacy information: https://resend.com/legal/privacy-policy
• Proton Mail (Proton AG, Switzerland) hosts our mailbox, so emails you send us and our replies are stored there. Privacy information: https://proton.me/legal/privacy
• Supabase hosts our database: subscribers, the demo games and the Nice List.
• Vercel hosts the website and provides the visit counts described above.
• IPinfo turns the game host's IP address into a country and region.
• Anthropic helps write the end-of-game summary email from what happened in the game.

Santa's Nice List (Events)

At events we ask people whether we may publish photos and videos of them on @truthorcarol and @peopleare.fun and tag them. We store the name and social media handle they give us, the event, the language and exact wording of the consent they gave, and the time they gave it. An email address is optional, used only for game updates, and only after it has been confirmed through a link we send.

Consent can be withdrawn at any time by emailing hi@truthorcarol.com. We then delete the handle and email, keep a record that consent was withdrawn, and take down posts showing the person wherever we can.

Your Rights

Depending on your location, you may have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing activities.

To make a rights request, email hi@truthorcarol.com with the subject line "Privacy Request."

Contact

hi@truthorcarol.com