Privacy

Who is responsible

Jonas Klein
Frankenstraße 6
54346 Mehring
Deutschland
Email: info@skepty.app

The short version

• Skepty shows no ads and uses no analytics or tracking services.
• You sign up without an email address or phone number: your account is tied to your device.
• What you post is seen only by the people in your group – unless you share a plan by link yourself.
• Calls are anonymous: others only see how many believe or doubt, never who.
• Proof photos are deleted automatically 14 days after the season ends.
• You can delete your account in the app at any time (Profile → Delete account).

What we process

• Account: a random identifier for your device, your first name or nickname, how your Skepty looks, your language and your friend code.
• Game: your groups, your plans with text and proof note, proof photos and screenshots, your calls, objections and cheers, points, stickers and glitter.
• Friends: friend requests, friendships and whether friends may see the plans you got done (off by default).
• Safety: reports you make or that concern you, and whom you blocked. Nobody sees who reported something.
• Public links: if you share a plan by link, your first name, your Skepty’s head and the text are visible to anyone with the link. Visitors who call it get a random cookie so their call is recognised; there are no names there. We don’t store IP addresses in plain text, only as a value that changes daily, to prevent abuse.
• Camera and photos: Skepty uses the camera only when you take a proof photo. You pick screenshots yourself in the system photo picker; Skepty gets no access to your whole library. Pictures are made smaller before upload.
• Technical: when our servers are called, our providers process technical data such as IP address and time (server logs).

Why, and on what basis

• So you can play – account, groups, plans, proofs, calls, points, friends (Art. 6(1)(b) GDPR, contract).
• To keep Skepty safe – reports, blocking, protection against abuse and overload, server logs (Art. 6(1)(f) GDPR, legitimate interest).
• Public links only when you create them (Art. 6(1)(a) GDPR, consent). You can switch any link off at any time.

Who sees your data

• Your group: name, Skepty, plans, proofs and cheers. Calls and objections only as totals.
• Your friends: the plans you got done, with text and date, no photos – only if you allow it.
• Anyone with the link: what you share by link yourself.
• The Skepty team: reported content, to decide on it.
• Providers working on our behalf (Art. 28 GDPR): Vercel Inc. (hosting of the servers and these pages; the server functions run in Frankfurt, Germany) and Supabase Inc. (database, sign-in, picture storage; location: Frankfurt, Germany). Both are based in the USA. Transfers there rely, for Vercel, on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework (Art. 45 GDPR), under which Vercel is certified, and, for Supabase, on the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR).

We don’t sell data and don’t pass it on unless the law requires us to.

How long we keep it

• Your account and data until you delete the account.
• Proof photos and screenshots until 14 days after the end of the season in which the plan was decided. Text, date and outcome stay.
• When you delete your account, your name, Skepty, collection, friendships, group memberships, every picture you uploaded and everything you shared by link are deleted. Running plans are withdrawn. Decided plans stay for the others’ points, but without text, pictures and name (“Deleted account”). Your calls on others’ plans remain only as an anonymous count in their result.
• Reports until we have decided on them.
• Server logs at our providers for at most 7 days (Vercel 1 day, Supabase up to 7 days); after that the providers delete them automatically.

Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). You can withdraw consent at any time for the future. Write to us at info@skepty.app.

You can also lodge a complaint with a data protection supervisory authority, for example the one responsible for us, the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate in Mainz, Germany (datenschutz.rlp.de).

Age

Skepty is for people aged 16 and over.

Changes

If this policy changes, the new date is shown at the top.