Bualora may store your language, saved card IDs, completed onboarding, opening-card rotation, and up to 30 aggregate session-history entries. Session history contains the date, selected decks, duration, and completed or skipped counts. It does not contain player names, spoken answers, votes, or conversation content.

Question Box drafts and progress are kept only for the current private session. They are cleared when that session ends or is discarded. Device data remains until it is removed in the app, the app data is cleared, or the app is uninstalled.

If you use an Online Room, Bualora processes the room code, display names, chosen deck, and live game state through PartyKit on Cloudflare so the room can work across devices. Anyone with the room link or code may be able to join, so share it only with people you trust.

To resume an interrupted room, the room handoff and display name may be kept on this device for up to six hours. They are normally cleared when you leave or end the room, or if the saved data is invalid. If a host removes you, the signed room session remains until expiry so another attempt uses the same room identity.

If you choose Report, your email app prepares a message to hello@bualora.com with the reported display name and anonymous room-session ID. Bualora receives it only if you send it, together with your sender address and any text you add. Support records are used to investigate and respond to the report and kept only as needed for user safety, abuse resolution, and legal obligations.

The free iOS version does not require an account and does not offer purchases. On the website, optional Google sign-in is handled by Google and Supabase. If a web purchase is offered, Stripe processes payment details; Bualora does not receive your full card number.

On the website, configured Google Analytics may receive a privacy-filtered page address, campaign information, language, deck ID, and basic usage events. Private room codes, player names, and private question text are removed or excluded before analytics events are sent.

Web push notifications require your browser permission. The push endpoint, language, and subscription keys are stored only to deliver notifications. You can turn notifications off in Bualora or your device settings.

You can remove local app data by clearing Bualora's app data or uninstalling it. Website account deletion can be requested from the Account Deletion page. For privacy questions, contact hello@bualora.com.

We may update this policy when Bualora changes. The effective date above will change when a revised policy is published.