Privacy policy
Last updated: 20 October 2026
Draft: this text will be reviewed by a lawyer before the app is released.
Convivio is an app for playing group games on your own phone. We only collect the data needed to let you play: no analytics, and no profiling without your consent.
Data controller
[Name, address and tax or VAT number of the controller: to be completed]. For any privacy question write to privacy@convivio.games.
What data we process
- Profile: nickname, language, your declaration that you are at least 18 (with date and time) and a session identifier created on first launch. We do not ask for your full name or phone number.
- Linked account (optional): your email address, or the identifier and email provided by Google or Apple if you sign in with them.
- Game nights: the rooms you join, the games played, placements and points. Secret roles, words and votes are only needed during the match and are deleted when the room closes.
- Consents: your acceptance of this policy and of the terms, and your choices about ads and notifications, with the date.
- Technical data: IP address and server logs, needed to run and protect the service.
- On the mobile app: the notification token and, only with your consent, the device advertising identifier.
Convivio is for adults only: on first launch you declare that you are at least 18. We do not ask for your date of birth, and without the declaration no profile is created.
Why we process it
| Purpose | Legal basis |
|---|---|
| Letting you play: profile, rooms, leaderboard and game night history | Performance of a contract (Art. 6(1)(b) GDPR) |
| Recording your declaration that you are an adult | Legitimate interest in protecting minors and complying with the law (Art. 6(1)(c) and 6(1)(f)) |
| Security of the service and abuse prevention | Legitimate interest (Art. 6(1)(f)) |
| Game notifications | Performance of a contract, with the operating system permission |
| Reminders and news | Consent (Art. 6(1)(a)), which you can withdraw in the settings |
| Personalised ads on the mobile app | Consent (Art. 6(1)(a)); if you refuse you only see non-personalised ads |
How long we keep it
- Roles, words and votes of a match: until the room closes.
- Anonymous profile: up to 12 months after it was last used, then it is deleted.
- Profile and linked account: until you delete your account in the app settings.
- When your profile is deleted, your nickname in other players' game night history becomes “Player”.
- Server logs: for the time set by our providers, usually no more than 90 days.
Who processes it for us
We use providers that process data on our behalf, under GDPR-compliant data processing agreements:
- Supabase: database and authentication, with data hosted in the European Union (Frankfurt).
- Cloudflare: hosting of this website and of the web app.
- Google: Sign in with Google, notifications (Firebase Cloud Messaging) and ads on the mobile app (AdMob).
- Apple: Sign in with Apple and notifications on iPhone.
Some providers may process data outside the European Union: in that case the transfer relies on the safeguards provided by the GDPR (adequacy decision or standard contractual clauses). We do not sell your data.
This website
convivio.games uses no cookies and no tracking scripts. The web app only stores on your device what it needs to work, such as your session and your language and theme preferences.
Your rights
You can ask to access, correct, delete, restrict or port your data, and object to processing based on legitimate interest. You can withdraw your consents at any time in the app settings, and delete your account and data right there. For anything else write to privacy@convivio.games. You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the authority of the country where you live.
Changes
If we change this policy we update the date at the top and, for important changes, we tell you in the app.