Privacy Policy

DRAFT for attorney review — not yet in force. Effective 8 November 2026 (draft).

This policy explains what [Operator legal name] (“we”, “us”) collects when you use Aone Bingo, why, and the choices you have. It is written to describe what the Service actually does today; we will update it before anything new is added.

1. What we collect

• Account details you give us: the display name you choose, your email address, your password (stored only as a salted one-way hash — we cannot read it), the state you live in, and your confirmation that you are 18 or over.
• Play records: your cards, stamps, trade offers and trades, prizes won, and your Aone Coins balance and history, each stamped with the show and time.
• Technical data: your IP address, browser type and the pages requested, kept in our hosting provider’s server logs; a sign-in cookie (aone_player) that keeps you signed in; and a country code supplied by the network edge, used only to check where the show may be played.

We do not collect payment details (no payments are taken yet), precise location, contacts, photos or device identifiers.

2. How we use it

• to run the show: issue your card, track prizes, keep your wallet, and announce winners by display name and state;
• to let the hosts speak to players: your display name may be sent to our voice-generation provider so the hosts can say it;
• to check eligibility (age, state, country) and to detect cheating, multiple accounts and abuse;
• to keep an audit record of every draw, prize and trade so any dispute can be checked;
• to meet legal duties, including tax reporting on prizes where the law requires it;
• to contact you about your account or changes to the Service. We do not send marketing email without asking first.

3. Who we share it with

• Hosting: the Service and its data run on Railway (cloud hosting, United States).
• Voice generation: ElevenLabs receives the text the hosts speak, which may include players’ display names. No email, password or other account detail is sent.
• Streaming: when a show is streamed on YouTube, YouTube’s own privacy policy covers your viewing there. The stream shows winners’ display names and states.
• Legal: we disclose information when the law requires it or to protect the rights and safety of players and the Service.

We do not sell personal information and do not share it with advertisers or data brokers. We use no analytics or advertising trackers at present.

4. Cookies

We use one essential cookie to keep you signed in. Signing out removes it. We set no advertising or analytics cookies. Your browser may also keep small local settings (such as sound preferences) that never leave your device.

5. How long we keep it

• Account details: while your account is open, then deleted or anonymised within 90 days of closure unless we must keep them for tax or legal reasons.
• Show and prize records: kept for at least four years as the audit trail of each show and for tax reporting; they identify players by account ID and display name.
• Server logs: kept by our hosting provider for a short rolling period.

6. Security

Passwords are hashed with scrypt; sign-in cookies are signed and sent only over HTTPS; the production control room is password-protected. No system is perfectly secure, and we will tell affected players promptly if a breach affects them.

7. Children

The Service is for adults. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If you believe a child has given us information, contact [contact email] and we will delete it.

8. Your rights

You may ask to see, correct or delete the personal information we hold about you, and to receive a copy of it. California residents have these rights under the CCPA/CPRA, along with the right to know what categories we collect and the right not to be discriminated against for using them. We do not sell or share personal information for cross-context behavioural advertising. Write to [contact email]; we respond within 45 days.

9. Changes

We will post any change here with a new effective date and tell account holders about material changes before they apply.

10. Contact

[contact email]. See also the Terms of Service and Official Rules.