Privacy Policy

ScreenGames is operated by Pavilionlabs, trading as ScreenGames (“we”, “us”), a business registered in Nigeria. We are the data controller for the personal data described in this policy, and we process it in line with the Nigeria Data Protection Act 2023 (“NDPA”).

You can contact us about privacy at any time at support@example.com.

Hosts

• Your name and email address.
• Your password, which we store only as a salted scrypt hash. We cannot see or recover the password itself.
• The nights you set up: their settings, the games you choose, any custom questions or prompts you enter, and the guests you add.
• Your plan and billing history, such as which plan you are on, renewal dates and receipts.

Guests

Guests do not create an account. For each guest in a night we store:

• the display name the host or guest enters;
• the avatar and colour the guest chooses;
• the answers, votes and scores from the games played.

Payments

Payments, in naira or US dollars, are handled by our payment provider, Bachs. It collects your payment details directly. We receive confirmation of the payment, the amount, the plan and limited details needed for receipts and support. We never see or store your full card number.

Technical information

Like most online services, our servers keep logs of requests, and we record errors so we can fix them. We also collect product analytics about how features are used, without cookies and without storing IP addresses.

Messages to us

If you email us, we keep the message and our reply so we can help you.

The NDPA requires us to have a lawful basis for using personal data. We rely on:

• Providing the service you asked for (performance of a contract): creating and running your account, setting up nights, showing games on the TV and phones, keeping scores, processing payments and sending essential emails such as email verification, password resets and receipts.
• Our legitimate interests: keeping the service secure, preventing abuse, fixing errors, and understanding which features are used so we can improve them. We only do this in ways that do not override your rights.
• Legal obligations: keeping payment and tax records, and responding to lawful requests.
• Consent: where we ask for it. You can withdraw consent at any time, without affecting anything we did before.

We do not sell your personal data or use it for advertising.

ScreenGames is played together in a room. Guests’ names, avatars and typed answers are shown on the TV to everyone present, so please do not type anything you would not want the room to see.

A family filter masks swear words in guest answers by default, and the host can hide any answer. The host decides who is invited and can delete a night, along with its guests and answers, at any time. If you are a guest and want your data removed, ask the host or contact us.

We use trusted service providers to run ScreenGames. They process data on our behalf, under contract, and only for the purposes below.

• Render hosts our application on cloud servers.
• Our PostgreSQL database provider stores account, night and game data.
• Amazon Web Services (SES) sends transactional emails: email verification, password resets and receipts.
• Sentry monitors errors. It is configured not to send cookies, request headers or request bodies.
• PostHog provides product analytics. We run it in cookieless mode, with no cross-site tracking, and IP addresses are not stored.
• OpenAI is used, if a host chooses, to generate trivia and other game questions. We do not intentionally send personal data, and hosts should not include personal data in prompts.
• Deepgram provides text-to-speech for spelling games. Only the word being spoken is sent.
• Cloudflare Turnstile may be used as a bot check when you sign up.
• Bachs processes payments in naira and US dollars, and uses your payment data under its own privacy policy.

We may also disclose personal data if the law requires it, to protect the safety of our users or others, or as part of a sale or reorganisation of our business, in which case this policy would continue to apply.

Some of our providers, including our hosting, run on servers outside Nigeria. When personal data is transferred abroad, we take steps to make sure it stays protected to the standard the NDPA requires, for example by using providers that commit to appropriate contractual and security safeguards.

We use a single, strictly necessary cookie: a session cookie that keeps hosts logged in. It is httpOnly (so scripts on the page cannot read it) and lasts up to 30 days. Guests do not need it to play.

We do not use advertising or cross-site tracking cookies, and our analytics is cookieless.

• Account data is kept for as long as your account exists.
• Hosts can delete any night, along with its guests and answers, at any time.
• Deleting your account immediately deletes all your nights, guests, scores and sessions, and cancels any Party Pro renewal.
• Payment records may be kept for as long as tax and accounting rules require, both by us and by Bachs.
• Server logs and error reports are kept for between 30 and 90 days.

We use technical and organisational measures to protect personal data, including storing passwords only as salted scrypt hashes, keeping session cookies out of reach of page scripts, and limiting the data we send to other providers. No online service can be completely secure, but if a breach affecting your data occurs, we will act on it and notify you and the regulator where the law requires.

Under the NDPA you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• receive your data in a portable format;
• object to, or ask us to restrict, how we use your data;
• withdraw consent where we rely on it.

Hosts can do much of this themselves. The Account page has Download my data, which gives you a JSON copy of your data, and Delete account. For anything else, or if you are a guest, email support@example.com. We may need to confirm your identity first. We will respond within 30 days.

ScreenGames is not directed at children. Hosts must be 18 or over. Guests under 13 should only play with a parent or guardian present, and the host is responsible for the guests they invite. If you believe a child has given us personal data without appropriate supervision, contact us and we will delete it.

We may update this policy as ScreenGames or the law changes. We will update the date at the top of the page and, for significant changes, let hosts know by email or in the app.

If you have a question or concern about your personal data, email support@example.com. We would like the chance to put things right.

You also have the right to complain to the Nigeria Data Protection Commission (NDPC), the regulator responsible for data protection in Nigeria.

See also our Terms of Service.