Legal center
Privacy Policy
Last updated: September 18, 2025
Masqora ("Masqora", "we", "us") respects your privacy and designs every feature with collaborative storytelling security in mind.
This policy describes the personal data we collect when you host or join Masqora sessions, why we collect it and the rights available to you.
Information we collect
Personal information you provide
- Account details such as your name, email address and chosen password.
- Profile preferences including avatar, pronouns and language selections.
- Purchase history, invoices and subscription choices for compliance reasons.
Data collected automatically
- Device and browser metadata (IP address, operating system version, time zone).
- Usage analytics that show how long host controls stay open or which views are used.
- Crash reports and diagnostics that help us detect issues affecting reliability.
Approximate location signals
We infer a rough region from your IP address to apply taxes, match servers and display the correct consent banner. We do not process precise GPS data.
How we use your information
- Deliver the core gameplay experience, including lobby creation, role assignment and real-time clues.
- Provide customer support and respond to bug reports or legal requests.
- Improve Masqora by analysing aggregated usage trends and planning new stories.
- Send transactional messages about session status, security alerts or policy updates.
- Protect the service against fraud, cheating and other misuse.
How we share information
We never sell personal information. We share data only in the following situations:
- Trusted service providers that operate our infrastructure under strict contracts.
- Legal obligations, court orders or requests from authorities with appropriate scope.
- Business transfers if Masqora is involved in a merger, acquisition or asset sale.
- Your explicit consent, for example when linking a third-party identity provider.
Data security
We apply multiple layers of security to protect Masqora accounts and story data.
Even with strong controls no online service can guarantee absolute security, so please contact us if you suspect any issue.
- Transport encryption (HTTPS) and database encryption at rest.
- Role-based access controls that limit which staff can view specific data.
- Continuous monitoring and alerting for suspicious logins or traffic patterns.
- Regular dependency updates and third-party penetration testing.
Data retention
We store personal data only for as long as it is needed to provide Masqora or meet legal requirements.
- Account information remains active until you delete your account or 24 months of inactivity.
- Story session data is retained for 12 months so hosts can review decisions and outcomes.
- Aggregated analytics are stored for up to 24 months for product planning.
- Financial and tax records are retained for at least 6 years as required by law.
Your rights
Depending on your region you may exercise the following rights. We respond to every verified request.
- Access: Request a copy of the personal data we hold about you.
- Rectification: Ask us to correct inaccurate or incomplete information.
- Erasure: Request deletion of your personal data when it is no longer needed.
- Restriction: Limit how we use your information in certain circumstances.
- Portability: Receive the data you provided in a portable, machine-readable format.
- Objection: Object to processing based on legitimate interests or direct marketing.
California privacy rights
If you are a California resident you have additional rights under the CCPA/CPRA.
- Know what categories of personal information we collect and how we use them.
- Request deletion of personal information, subject to legal exceptions.
- Opt out of the sharing of data for cross-context behavioural advertising.
- Receive equal service even if you exercise your privacy rights.
Children and teenagers
Masqora is designed for audiences aged 16 and above. We do not knowingly collect personal data from children.
If you believe a child has provided information, please contact us and we will delete it promptly.
International data transfers
We store data in EU and US regions using providers that implement Standard Contractual Clauses and comparable safeguards. When required we sign Data Processing Addendums with our vendors.
Third-party services
We rely on carefully selected vendors to deliver Masqora. Each provider is contractually bound to use data only for Masqora purposes.
- Supabase: Hosts authentication, databases and storage with strict access controls.
- PostHog: Provides anonymised product analytics for improving UX and reliability.
- Expo Services: Delivers over-the-air updates and push notification routing for the mobile app.
Push notifications and email
We send transactional emails when a lobby is ready, when security changes occur or when a session host invites you.
Mobile push notifications are opt-in. You can disable them from the Masqora app settings or your device settings at any time.
Gameplay and session data
- Lobby names, story selections and player roles assigned by the host.
- Choices made during a mystery, clue unlocks and final voting outcomes.
- Session duration, connection quality indicators and device compatibility notes.
Changes to this policy
We will update this privacy policy when regulations or product features change. We will notify you in the app or by email before major updates take effect.
Contact us
Email privacy@masqoragames.com to submit a privacy request or ask a question.
Include the email tied to your Masqora account and describe the request so we can respond quickly.