Privacy Notice

Last updated: 14 May 2026

1. Who we are

R&D STREAMS ("we", "us", "our") operates OurBingo and acts as the data controller for personal data processed through the Service.

2. Personal data we collect

Game data — nickname you choose, the room code you join, the language you select, and a randomly-generated client identifier stored in your browser to keep you connected to your room.
Custom content — questions a paid host uploads for their room.
Technical data — IP address, browser type, device information, and usage logs collected automatically when you use the Service.
Support data — any information you provide when contacting support.
Payment data — billing details and transaction information are collected directly by Paddle (see section 4); we receive only the order status and a customer reference.

3. Why we use it and legal bases

To provide the Service (run rooms, sync game state, deliver custom questions) — performance of a contract.
To prevent fraud, abuse, and security incidents — legitimate interests.
To improve the Service and fix bugs — legitimate interests.
To respond to support requests — performance of a contract / legitimate interests.
To meet legal obligations (e.g. accounting, tax, lawful requests) — legal obligation.

4. Who we share data with

Paddle — our Merchant of Record for the sale of paid features. Paddle handles checkout, payments, tax compliance, invoicing, subscription management, and refund handling. See paddle.com/legal/privacy.
Hosting and infrastructure providers — including our cloud database, file storage, and serverless function hosts that power the Service.
AI translation provider — text strings and questions you ask to be translated are sent to an AI model provider via our gateway and the translations are cached.
Professional advisers — accountants, auditors, lawyers, where required.
Authorities — where required by law or to protect our rights.

5. International transfers

Some of the providers above may process data outside your country. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions where applicable.

6. Retention

We keep room and game data only as long as needed to operate the Service. Inactive rooms and their game state are periodically removed. Payment and tax records are retained by Paddle and by us for the period required by applicable law. Logs are typically retained for a limited period for security and debugging.

7. Your rights

Depending on your country, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, to withdraw consent where processing is based on consent, and to lodge a complaint with your local data protection authority. We aim to respond to verified requests within one month.

8. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and role-based database security. No system is perfectly secure; if you believe your data has been compromised, please contact us.

9. Cookies and local storage

OurBingo uses essential local storage to remember your client identifier so you stay connected to your room. We do not use advertising cookies. The Paddle checkout may set cookies it requires to process your payment.

10. Contact

For privacy questions or to exercise your rights, contact R&D STREAMS through the support channel listed on our website.