Privacy policy
Sentenzia is a party game played in person, everyone on their own phone: the app puts cases about your own group, everyone votes in secret, anyone can back their vote with an anonymous plea, and the app hands down the verdict. You don't need an account, an email or a phone number to play, and there are no ads. This policy explains what data HLR Studio handles when you play, what for and for how long.
1. Who is responsible
HLR Studio. For any question, or to exercise your rights, write to hello@hlrstudio.dev or from the app, in Settings › Write to us.
2. What data is handled
- Your player name and avatar, the ones you pick. The people in your room see them.
- An anonymous ID created by Firebase Authentication the first time you open or join a room. It isn't linked to your real name, your email or your phone number.
- What happens in the room: the cases dealt, who has voted already (not for whom), the counts and verdicts, the pleas (what you write when you vote, up to 80 characters), stars, replies and appeals, and the cases you drop in the inbox (up to 120 characters). Cases and pleas may name other players in the same room.
- Your vote. The server counts it and deletes it once counted: neither the table nor we can tell who you voted for. A plea only carries your name if you sign it.
- On your phone: your record, the cases from your last 5 games (sent when you join a room, with nothing that identifies you, so your group doesn't get repeats) and your preferences.
- What you write to us from Settings › Write to us, with the app version, the platform (Android, iPhone or web) and the language. Never your player name or your room.
- If you buy the Pass: the store receipt, linked to your anonymous ID.
We don't ask for your real name, email, phone number, location, contacts or photos. The camera is only used to read the room's QR code, on the phone itself: the image is neither stored nor sent.
3. What for, and on what basis
- To make the game work (the room, the secret vote, the verdict, the Pass): it's what's needed to give you the service you ask for.
- To filter what people write: the server checks names, pleas and inbox cases against word lists before anyone sees them, with no artificial intelligence and without a person reading them. Whatever doesn't pass reaches nobody, and we tell you why. It's part of a safe service and our legitimate interest in nobody getting hurt.
- Anonymous statistics, to know whether the game is fun and which cases should go: counters per game and per case (how many are played, skipped or covered, whether you'd play again). They carry no names, text, votes or IDs.
- Usage analytics (Google Analytics for Firebase): only if you agree. You're asked once, when your first game ends, and you can change it any time in Settings › Usage statistics. They're named events (opening a court, reaching the final judgment, seeing the Pass screen), never the text of a case or a plea, a name, a room code or a player ID, and with no advertising ID. There are no analytics on the web.
- Crash reports (Firebase Crashlytics, on Android and iPhone): if the app closes because of an error, a technical report is sent with what failed, the phone model, the system and app versions and a random installation ID. It's used only to fix it and never carries text, names or room codes. The basis is our legitimate interest in the game working.
4. Where it lives and who processes it
Game data is stored in Google Cloud Firestore in Madrid (EU) and processed by Google Cloud functions in Madrid and Belgium (EU). Google acts as our processor. Analytics, if you agree to them, and crash reports are processed by Google in Firebase.
The Presidency Pass is bought through Apple's or Google's store; the purchase is handled by RevenueCat, which receives your anonymous ID and the store receipt. We never see your payment details.
We don't sell data, there are no ads and we don't track you across apps.
5. How long
- Votes, once counted. Pleas, the inbox and who wrote each plea, when the room closes.
- The rest of the room (names, avatars, counts and verdicts, already without pleas) expires 2 hours after it closes, so the table can look at the final judgment, and is deleted within the next 24 hours. A room with no activity for 6 hours closes by itself.
- What you write to us, as long as needed to deal with it and one year at most.
- Crash reports, 90 days. Analytics, if you agree to them, 2 months.
- Your anonymous ID, until you delete your data.
- Anonymous statistics are kept because they're nobody's data.
6. Age
Sentenzia is for people 16 or older, confirmed with one tap before writing your first plea or case. The Spicy 18+ pack is only switched on if the room's presidency confirms everyone at the table is an adult.
7. Your rights
You can access, correct or delete your data, object to or restrict its use, or ask for it to be ported. The quickest way: Settings › Delete my data, which deletes what's yours from the phone and our server right away (the details are in delete your data). You can also write to hello@hlrstudio.dev.
If you think we haven't got it right, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.
8. Changes
If this policy changes, this page and its date are updated. If the change matters, we'll say so in the app.
Laugh with someone, never at them.