Privacy Policy

Who we are

The Chosen One at https://thechosenone.quest is run by Handcoded, an Australian sole trader based in Adelaide, South Australia. The contact address is support@thechosenone.quest. This policy says how Handcoded handles personal information, in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

Who the game is for

The written game includes drinking-style challenges. It is for people 18 or older. The Children section below says what we do if a child is involved. Play responsibly. Nobody has to do anything they do not want to do.

The host account

A host creates an account with an email address and a password. Supabase Auth holds that account, and the host confirms the email. We use the email to create the account, send that confirmation, let the host sign in, and answer a support, refund, access, or deletion request. We do not keep a separate copy of the password in the game tables. On the web, the sign-in session is stored in local storage so the browser stays signed in.

Guests

A guest joins a realm with a code and is signed in anonymously. That session is a seat, not a host account. A guest has no email account with us and cannot buy a pass. We still store the display name the guest chooses, and the play that follows, inside the realm.

The pass

A host can buy one single-use pass. The card payment is taken by Stripe through RevenueCat Web Billing. We never see the card number. RevenueCat keeps the purchase record, keyed by the Supabase user id. We store a pass row against that same user id: a transaction id, the product, when it was granted, and whether it has been used to open a realm or refunded. When the site shows a price or opens checkout, the browser loads RevenueCat's billing script from the jsDelivr network.

What a realm keeps

A realm stores the play. That includes each player's display name, whether they are the keeper or the Chosen One, their class, strikes, items, and the actions the table takes, such as votes, events, and penalties.

It also stores words. A custom event stores a title (up to 80 characters) and a description (up to 400 characters). An accusation stores a reason (up to 200 characters), who accused whom, and the votes. When a keeper applies a punishment, the title and description of that punishment are stored. Those words come from a written list of twelve punishments. One of them, The Keeper's Choice, tells the keeper to invent a fate in the room. The app has no separate box for typing that fate, so the stored text is the written instruction.

A dice roll stores the notation, the result, the total, whether the roll was shared, who rolled, and when.

A blessing can store an optional video link. The link has to start with http:// or https://. We store the link, not the video file. There is no file upload and no storage bucket for it. Clearing the link removes it.

Optional push alerts

If a player opts in, the browser asks its own push service to deliver alerts, and we store the push subscription on that player's row. The push service depends on the browser and may be outside Australia. If the player does not opt in, we do not store a subscription. Push is not required to play.

On this device

Local storage on the device holds the seat token, the player id, and preferences. The seat record (thechosenone.session) includes the realm id, the player id, whether this device is the keeper or the Chosen One, the join code, the seat token, and the time of the last activity. The server stores a hash of the seat token, not the token itself. The device can use that record for up to 72 hours after the last activity, but a realm closes 48 hours after it is created. Neither limit deletes the realm or the local record.

Preferences include the last dice combination (thechosenone.dice-last-combo). Before a host is signed in, the site may store a random id (quest-pass-price-user), used only to ask RevenueCat for the price on the page. That id is not your name.

The Cookies and local storage page is the short version of this section.

Usage analytics

We collect anonymous usage analytics through PostHog, on PostHog's EU Cloud (https://eu.i.posthog.com). That includes which pages you open, Core Web Vitals (anonymous page-performance figures such as how quickly the page becomes useful and how stable the layout is), and the product actions you take while you play — for example buying a pass, creating or joining a realm, starting a quest, rolling dice, filing an accusation, or leaving a game. We may also send a realm id, a phase name, and counts. We do not send your email, your name, a join code, or other personal information. If you open a join link, the page address and the referrer are stripped of the realm code and of sign-in tokens before they are sent, including on page views and on those page-performance figures.

When you sign in, we send only the Supabase user id to PostHog so those visits can be told apart. PostHog is cookieless on this site: it keeps that visit in memory for the tab and does not store a distinct id on the device. Session recording, surveys, heatmaps, dead clicks, detailed network timing, and web experiments stay off. We do not use this for advertising.

What we do not do

We do not show advertising. We do not sell personal information. We do not offer sign-in with a social account. We do not send promotional email campaigns. Session recording, surveys, heatmaps, dead clicks, detailed network timing, and web experiments stay off.

Processors and overseas disclosure

Supabase provides the database and authentication. The project region is ap-southeast-2 (Sydney, Australia). Supabase is a United States company, so people who support that service may be outside Australia.

Stripe processes the card payment, through RevenueCat Web Billing. We never see the card number. Stripe is based in the United States.

RevenueCat keeps the purchase record, keyed by the Supabase user id. RevenueCat is based in the United States.

Resend sends the transactional account email, including email confirmation, from its Tokyo region in Japan.

Cloudflare hosts the site and provides the CDN and DNS. Cloudflare is a United States company. Its network is global, so a request can be answered from outside Australia.

PostHog collects anonymous usage analytics. The project is on PostHog's EU Cloud. PostHog is a United States company, so people who support that service may be outside Australia.

Where a provider is outside Australia, that is an overseas disclosure under the Australian Privacy Principles. The places include Japan, the United States, the European Union, and Cloudflare's global network. We use these providers to run the game. We take reasonable steps so that an overseas recipient handles the information in line with the Australian Privacy Principles.

How long we keep it

The app does not delete a realm on a timer. A realm closes 48 hours after it is created, but nothing in the app or the database migrations schedules a cleanup of realms, players, or passes.

We keep the host account, the pass record, and the realm for as long as we need them to run the game, to deal with a payment, or to meet a legal duty. You can ask us to delete them. We will delete what we hold for that request, except a limited purchase record we still need for a refund, a chargeback, or a law that requires us to keep it.

On the device, the saved seat is checked for up to 72 hours after the last activity, but it can rejoin only while the realm is open. The local record can remain until you clear this site's data in the browser.

Access, correction, and deletion

You can ask for access to the personal information we hold about you, and you can ask us to correct it if it is wrong. Email support@thechosenone.quest. Tell us the host email and, for a guest, the realm and the display name. There is no control in the app to delete an account. The same email is how you ask for deletion. A guest has no account. Deleting a realm removes the play stored in it, including guest names and words, because that play belongs to the realm. We will respond on a best-effort basis. We may need to confirm that the request is yours before we change or delete anything.

Complaints

Contact us first at support@thechosenone.quest and tell us what went wrong. If you are not satisfied with the answer, you can complain to the Office of the Australian Information Commissioner (OAIC). The OAIC explains privacy complaints at https://www.oaic.gov.au/privacy/privacy-complaints.

Children

The game is not for children. You must be 18 or older to create an account, buy a pass, or play. If we learn that a host account belongs to someone under 18, we will close it. Do not invite a person under 18 into a realm.

Security

The host password is handled by Supabase Auth. Card numbers are handled by Stripe, and we never see them. The server stores a hash of the seat token. The site is served over HTTPS. Share a join code only with the table. No method of storage is perfect. Email support@thechosenone.quest if you think an account or a realm has been exposed.

Email

Account email, including the confirmation message, is a transactional message about the account. It is sent by Resend. We do not use your address for a promotional mailing list, and we do not sell it. That is how we approach the Spam Act 2003 (Cth).

Changes

If we change this policy, we will change the date at the top of the page. The new policy applies from that date.

Contact

Handcoded, Adelaide, South Australia. Email support@thechosenone.quest.