Privacy Policy
Outsmart is a game developed and operated by David Bauer. This privacy policy explains how David Bauer (hereinafter "David Bauer", "Outsmart", "we", or "us") processes personal data when you use this game. It applies to registration, login, gameplay, and leaderboard participation.
We comply with Swiss Data Protection Act (DSG) and, where applicable, the EU General Data Protection Regulation (GDPR).
1. Data Controller
David Bauer
Zurich, Switzerland
info@davidbauer.ch
https://www.davidbauer.ch
2. EU Representative (Art. 27 GDPR)
If you offer services to individuals in the EU and require an EU representative, add details below. If not required, remove this section before publishing.
VGS Datenschutzpartner GmbH
Am Kaiserkai 69
20457 Hamburg
Deutschland
info@datenschutzpartner.eu
https://datenschutzpartner.eu/
3. Data Protection Contact
For questions about data protection or to exercise your rights, contact: info@davidbauer.ch
4. Personal Data We Process
4.1 Account Data (Email Registration)
- Email address
- Chosen username / display name
- Registration date and timestamp
4.2 Game Data
- Game results (wins, losses, score-related stats)
- Session timestamps
- Game progress and aggregate statistics
4.3 Leaderboard Data
Your username and ranking-related performance data are displayed on the public leaderboard and can be viewed by other platform users.
4.4 Technical Data
- IP address (processed by infrastructure providers)
- Browser type and version
- Operating system
- Session token required for login
- Error messages and logs
4.5 Usage Analytics
We use Plausible Analytics (Plausible Insights OÜ, Estonia), a privacy-friendly analytics tool that does not create personal profiles and does not use cookies. Only aggregated, anonymous access statistics are collected.
4.6 Client-Side Storage and Caching Data
- Locally stored game stats and pending sync queue in your browser storage
- Technical flags (for example whether the game was previously played on this device)
- Cached app files managed by the service worker to support performance and offline use
5. Purposes and Legal Bases
We process your data for the following purposes:
- Providing and operating the games platform (contract performance, where applicable)
- Managing your user account (contract performance)
- Operating the public leaderboard (legitimate interest, where applicable)
- Detecting and preventing abuse and fraud (legitimate interest)
- Anonymous usage analysis to improve the platform (legitimate interest)
- Compliance with legal obligations
6. Third-Party Providers and Processors
6.1 Supabase (Database Infrastructure)
We use Supabase Inc. (USA) as a data processor for database infrastructure. We maintain an appropriate data processing agreement where required by law.
Server location: West EU (Ireland)
For data transfers to the USA, Supabase provides safeguards such as EU Standard Contractual Clauses (SCCs).
More information: supabase.com/legal/privacy
6.2 Plausible Analytics
We use Plausible Analytics by Plausible Insights OÜ (Estonia, EU) for anonymous usage statistics. Plausible does not use cookies and does not create personal profiles.
More information: plausible.io/privacy
6.3 Google Fonts
We use Google Fonts (Google Ireland Limited / Google LLC) to display web fonts. Your browser may request font files from Google servers, which can include technical connection data such as IP address and user agent.
More information: policies.google.com/privacy
7. International Data Transfers
Where personal data is transferred outside your local jurisdiction (for example to processors in the USA), we rely on appropriate safeguards such as SCCs where required.
8. Data Retention
- Account data: Until account deletion by you or by us after prolonged inactivity (more than 3 years without login)
- Game results and leaderboard entries: Until account deletion; you may delete your entries at any time
- Technical logs: Maximum 90 days
- Client-side storage and service worker cache: Retained on your device until you clear browser/site data, uninstall the app, or your browser automatically removes cached files
- Legally required data: retained according to statutory retention obligations
After applicable retention periods, data is deleted or anonymized where feasible.
9. Your Rights
Depending on applicable law, you may have the following rights regarding your personal data:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object
- Right to data portability
To exercise your rights, contact: info@davidbauer.ch
10. Data Security
We implement appropriate technical and organizational measures to protect data from unauthorized access, loss, or misuse, including:
- Encrypted transmission (HTTPS/TLS)
- Access controls based on least privilege
- Infrastructure-level security controls
- Periodic review of security measures
11. Minimum Age
Our platform is not intended for children under 16 years of age. If you believe a child has provided personal data, contact us at info@davidbauer.ch and we will take appropriate action.
12. Cookies and Local Storage
We use technically necessary browser storage for authentication/session management, local game stats, and temporary pending sync data. We also use service-worker-managed cache storage for core app files (performance/offline support). We do not use advertising cookies. Plausible Analytics does not rely on cookies.
13. Changes to This Privacy Policy
We may update this privacy policy from time to time. For material changes, we will provide notice through the product or other appropriate channels. The current version is always available on this page.
14. Supervisory Authority
Competent data protection authority in Switzerland:
Federal Data Protection and Information Commissioner (EDÖB)
edoeb.admin.ch
If you reside in the EU, you may also contact the data protection authority of your EU member state.