Privacy policy
This policy is a translation. If the versions differ, the Spanish one prevails.
The essentials
- We keep what is needed for you to run your bingo and for each player to use their cards: names, emails, encrypted passwords and the details of your events.
- We do not sell your data, we do not use it for advertising and we do not show ads.
- Payments are processed by Stripe: your card details never pass through Tombingo.
- You can ask us to see, correct or delete your data. Write to the email in the Contact section.
Who is responsible
Tombingo is operated by Whole Life, LLC, which is responsible for the data described here. For any privacy question, write to help@tombingo.com.
Postal address: [pending].
What data we keep
About organizers: their name, email and password (stored encrypted: nobody can read it), the version of the terms they accepted and when, the campaign they came from if the link says so, their answers when setting up their first bingo (what they organize and how many cards they need) and what they create in Tombingo: organizations, events, cards, game lists and the logos and images they upload.
About people invited to a team: their email and role, until they create their account.
About players: their email, the password they create for that event (stored encrypted), their name if they type it, the cards that are theirs, the messages they send in the chat and an identifier their browser keeps to open their cards without signing in again. Players with printed cards can join without an email.
About payments: Stripe receives your email and processes the card. We keep what you bought and the customer and subscription identifiers Stripe sends back.
Technical data: the IP address of attempts to sign in, to recover a password, to join an event and to add cards by code, to stop abuse; a usage record (what was done, in which event and when) to understand how Tombingo is used; and the service logs at Cloudflare, which include the address of each email we send.
What we use it for
To provide the service: create your account and your events, generate the cards, run the live game and let each player see and use their cards.
To write to you: the welcome email and the reminders to get your event ready (unsubscribe with the link in each email), team invitations and the link to recover your password. Players get their cards by email only when the organizer asks for it.
To charge for passes and plans, to protect the service from abuse and to improve Tombingo with the usage record.
We do not sell personal data, we do not share it for advertising and we do not show ads.
Legal basis (GDPR)
If you live in the European Economic Area, the General Data Protection Regulation (GDPR) protects you. We process your data to perform our contract with you (your account, your events, your cards and your payments), for our legitimate interest in protecting and improving the service and in letting you know about your account, and to meet legal obligations, such as the accounting of payments.
When an organizer adds a player's email, the organizer decides what it is for in their event. Tombingo uses it only to run the cards and the game.
Who we share it with
Cloudflare: hosts Tombingo, stores the database and the files you upload (logos and images), sends the emails and, when an event has video, streams it live without recording it.
Stripe: processes payments. It receives your email and your card details.
Google Fonts: in Japanese, Chinese, Korean, Thai, Arabic, Russian, Ukrainian and Greek, the app asks Google for the letters of that alphabet, and Google receives your browser's IP address.
We do not share your data with anyone else, unless the law requires it.
How long we keep it
The data of your account, your organizations, your events and the players of those events is kept while your account exists. There is no button to delete it yet: write to us and we delete it.
The IP addresses of attempts only count for a few minutes (10 to 15) and are then deleted. The link to recover your password expires after 15 minutes.
An event's chat keeps its last 600 messages and is emptied when the organizer restarts the bingo.
If you unsubscribe from our emails, we keep your address so we do not write to you again.
Stripe keeps payment data under its own obligations, and Cloudflare keeps the service logs for a limited time.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to receive it in a format you can take elsewhere, to object to a use or to ask us to restrict it. Write to help@tombingo.com from your account email and we answer within one month at most.
If you live in the European Economic Area, the GDPR gives you these rights and also the right to complain to the data protection authority of your country.
Players can ask us the same about their data in an event, or ask the organizer of that event.
Data outside your country
Cloudflare and Stripe work in many countries, including the United States, so your data may be processed outside yours, under each one's data protection commitments.
Changes to this policy
If this policy changes, we publish the new version here with its date.
Contact
For any question about your data, write to help@tombingo.com. Tombingo is operated by Whole Life, LLC.