Privacy Policy

Who is responsible for your information

PLAYOR is a trading name of ONE OFF BHX LTD, a company registered in England and Wales with company number 13535662. Registered office: The Lodge, Chester Road, Castle Bromwich, Birmingham, England, B36 9DE. Contact for legal, privacy and account questions: support@playor.app.

ONE OFF BHX LTD is the controller of the personal information described here. For any privacy question or request, email support@playor.app.

What we collect at sign-up

• Username (display name) — public. How other people see you.
• PLAYOR number — assigned automatically, permanent and shown with your username.
• First name and surname — private. Used to confirm who an account belongs to.
• Phone number — optional and private, if you give one.
• Email address and password — private. Used to sign you in, confirm your address, reset your password and contact you about your account. Passwords are handled by our sign-in service and are not visible to us.
• Date of birth — private, used only for age assurance (18+).
• When you accepted the Sign-up Terms, and which version — recorded as a date, time and version reference.
• Marketing choice — only if you tick the optional box, with the date.
• Where you came from — if you arrived from one of our links, a short platform/campaign label from a fixed list (no web addresses or advertising identifiers).
• Personal PLAYOR QR code — created for your account and sent in your welcome email.
• Optional profile picture — private unless you separately opt in to public display; it is moderated and only shown for age-confirmed adult accounts.
• Messages you send us — for example through the Contact page.
• Technical and security information — such as sign-in events and records our providers keep to run and secure the service.

Why we use it and our lawful basis

• Creating and running your account, your PLAYOR number and QR code, and service emails — necessary to perform our agreement with you (the Sign-up Terms).
• Age assurance — to keep accounts adult-only. We currently rely on our legitimate interests in operating an 18+ service safely.
• Security, preventing misuse and keeping records of what you agreed to — our legitimate interests.
• Counting sign-ups by platform/campaign — our legitimate interests in understanding how people find us, using only short labels.
• Marketing emails, analytics cookies and public display of a profile picture — your consent, which you can withdraw at any time.
• Keeping records the law requires — legal obligation.

We do not sell your information and we do not use advertising cookies.

Date of birth

Your date of birth is stored in restricted private records, assessed against the current UK date, never shown publicly or on QR pages, and not included in emails or application logs. Only authorised administrators can view it or make a correction, which requires a reason and is kept in a protected audit history. Contact us if it needs correcting.

Cookies and browser storage

Essential (always on): your sign-in session, your cookie choice, and short-lived information that makes sign-up and your visit work (such as the where-you-came-from label). The site cannot work properly without these.

Analytics (off unless you accept): Google Analytics only loads after you choose “Accept analytics”. If you reject or later withdraw, it is switched off, its cookies are cleared and no further analytics requests are sent. Change your choice at any time with “Cookie settings” at the bottom of every page.

Our fonts and map styles are served from our own website, so loading a page does not contact Google Fonts or other font services.

Who helps us

• Lovable (Lovable Labs AB, Sweden, and Lovable Labs Incorporated, USA) and their sub-processors — host the website and provide our database, account sign-in and file storage. Our main database is hosted in the European Union (Ireland).
• Our email platform and its delivery provider (Mailgun) — send account and welcome emails from notify.playor.app.
• Google — Google Workspace email, which receives messages sent through our Contact page; and Google Analytics, only if you accept analytics.

These providers process information for us. Some of them, or their own sub-processors, may access or process information outside the UK, including in the United States.

Lovable's published Data Processing Agreement names Lovable Labs Incorporated (USA) as a recipient of transferred data and states that transfers from the UK not covered by UK adequacy regulations are made under the EU standard contractual clauses as amended by the UK International Data Transfer Addendum. This describes Lovable's published terms only; it does not cover our other providers or their sub-processors. We are still confirming the transfer safeguards our other providers rely on and will set them out in this policy. You can ask us for details at any time.

Our hosting provider keeps routine backups of our database for a limited period. Backups cannot be edited to remove one person, so information you delete may remain in a backup until it expires. If a backup were ever restored, we would take steps to apply again any account deletions made after that backup was taken.

How long we keep it

We keep your account information while you have an account. When you delete your account we remove your personal identifiers, date-of-birth records, uploads, personal QR code, marketing choice and sign-in record. Non-identifying history may remain shown as “Deleted PLAYOR”; your PLAYOR number is never shown again or reused. Records we must keep for legal, accounting, fraud-prevention or security reasons are kept only as long as needed. Exact retention periods for each category are being finalised.

Your rights

Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, ask for a portable copy, and withdraw consent at any time (this does not affect earlier use). Email support@playor.app. You can also complain to the Information Commissioner's Office at ico.org.uk.

Under 18s

PLAYOR accounts are for people aged 18 and over. If you believe someone under 18 has an account, tell us at support@playor.app so we can restrict and review it.

Upcoming games

PLAYOR TRACK and PLAYOR FIND have not launched. Before they do, we will update this policy to explain any additional information they use (for example activity screenshots or QR scans).

Contact

support@playor.app or the Contact page. See also our Sign-up Terms.