Privacy Notice

This notice explains what personal data we collect when you use Your Community Games, why we use it, who can see it and how long we keep it.

Version 1.0. Effective from 14 August 2026.

1. Who is responsible

Your Community Games is a trading name of Everlasting Luck LTD, a company registered in England and Wales under company number 16132653.

Registered office: 10x By Spacemade 10 Brindley Place Birmingham West Midlands England B1 2JB

ICO registration reference: ZB890775.

Everlasting Luck LTD is the data controller for the pilot. Contact us at info@yourcommunitygames.co.uk.

2. What we collect

  • Account data: your email address, authentication records held by our sign-in provider, and the fact that you confirmed you are aged 18 or over, including the date and the policy versions you accepted. We never see your password.
  • Profile data: your username, display name and optional profile photo.
  • Community data: which communities you belong to, your role in each, invitation and join-link records, and community branding you upload.
  • Gameplay data: participation in a Games Night, Quiz answers and timings, Puzzle attempts, Moves and completion, Points, Leaderboard positions, Results, scorecards and History.
  • Content you provide: Quiz text, Puzzle images and other material you upload.
  • Support and safety data: messages you send us, reports you make and records of moderation or investigation.
  • Technical data: limited logs, error reports and security records created when the service is used.

We do not currently collect a full date of birth, and we do not intentionally collect special category data. Please do not upload sensitive personal information about yourself or anyone else.

3. Why we use it and our lawful basis

  • To provide accounts, communities, Games Nights, scoring, Leaderboards and History. Lawful basis: performance of a contract with you.
  • To keep the service secure, prevent misuse and investigate reports. Lawful basis: our legitimate interests in running a safe pilot.
  • To keep a record that you confirmed you are 18 or over and accepted our policies, and to respond to underage or safety reports. Lawful basis: legal obligation and legitimate interests.
  • To fix faults and improve the pilot using operational information. Lawful basis: legitimate interests.
  • To send service emails such as confirmation, sign-in and password reset messages. Lawful basis: performance of a contract.
  • To comply with the law and to establish, exercise or defend legal claims. Lawful basis: legal obligation and legitimate interests.

Where we rely on legitimate interests, we have considered your rights and use the least intrusive approach that still lets us run the service safely.

4. Who can see your data

  • Other Players in the same community can see your display name, username, profile photo, gameplay Results and Leaderboard positions for that community.
  • Owners and Admins of a community you belong to can see its membership list and gameplay records for that community.
  • Your email address is not shown to other Players.
  • Our service providers process data on our behalf under contract: hosting and platform services, the database and file storage service, the sign-in service and the email delivery service.
  • We may disclose information to an authority, regulator or adviser where the law requires it or to protect people from harm.

We do not sell your personal data, and there is no advertising or advertising tracking on the platform.

5. Similar technologies

We use only storage that is strictly necessary to run the service, such as keeping you signed in and remembering safe settings. There is no advertising or analytics tracking in the pilot. The Similar Technologies Notice explains what is stored and why.

6. International transfers

Our providers may process or store data outside the UK. Where that happens, we rely on UK adequacy regulations or appropriate safeguards such as the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

7. How long we keep it

  • Account and profile data: while your account exists, then removed or de-identified after closure, other than the records listed below.
  • Gameplay Results: retained so a community's history stays accurate. After account closure they are de-identified so they no longer identify you.
  • Age confirmation and policy acceptance records: kept while the account exists and for a limited period afterwards as evidence that the confirmation was given.
  • Security, moderation and complaint records: kept only as long as needed for the investigation and any resulting legal or safety purpose.
  • Technical logs and backups: kept for a short period on a rolling basis, then overwritten.

8. Your rights

  • Access a copy of the personal data we hold about you.
  • Correct data that is inaccurate or incomplete.
  • Ask for deletion, subject to records we must keep.
  • Restrict or object to certain processing, including processing based on legitimate interests.
  • Data portability for information you provided to us.
  • Withdraw consent where we rely on consent, without affecting earlier processing.

Ask by emailing info@yourcommunitygames.co.uk. We will respond within one month and may ask you to confirm your identity first.

You can also complain to the Information Commissioner's Office at ico.org.uk. We would rather hear from you first so we can try to put things right.

9. Children

The pilot is for adults aged 18 and over. We do not knowingly collect data about children. If you believe an account belongs to someone under 18, tell us at info@yourcommunitygames.co.uk and we will investigate, restrict the account where appropriate and delete data we should not hold.

10. Security

Access to data is controlled by sign-in, role permissions and database-level rules. Uploaded photos and images are stored privately and served through short-lived links rather than public addresses. Every upload is checked by our platform for size and picture type before it is accepted. When you add a profile photograph or a puzzle picture through the normal upload screen, your browser re-draws the picture before it is sent, so the file we store is a fresh image and embedded device or location metadata does not travel with it. That re-drawing happens in your browser, so we describe it as how the product works rather than as a guarantee we enforce on our servers. A community logo uploaded by an Owner is stored as supplied, so an Owner should only upload artwork they are happy to share. No system is perfectly secure, so tell us promptly if you think something is wrong.

11. Changes and contact

If we change this notice, we will publish the new version here with a new version number and effective date, and tell you where the change is material. Everything about contacting us is on the Contact / Report page.