Privacy Notice
Last updated: 22 June 2026
Who we are
Aunty's Whare is operated by the Aunty's Whare team ("we", "us"). We are the data controller for personal data we collect through this service. Contact: auntyswhare@gmail.com.
What we collect and why
- Email address — provided at checkout or when you recover an unlock code. We use it to deliver your unlock code, handle support, and send transactional messages (e.g. receipts, code recovery). Legal basis: performance of a contract.
- Unlock codes and purchase records — so we can verify your access and help if you lose your code. Legal basis: contract / legitimate interests.
- Chat messages and display names — if you use in-game chat, your messages and chosen name are stored so other players in the room can see them. Don't share personal info in chat. Legal basis: legitimate interests in providing the service.
- Game settings and saved cards — stored so the app works the way you set it up. Mostly held in your browser.
- Basic technical data — IP address, device/browser type and basic usage events. Used for security, fraud prevention and improving the service. Legal basis: legitimate interests.
We do not see or store your full card number. Payment details are handled directly by Paddle.
Who we share data with
- Paddle — our Merchant of Record. Paddle handles checkout, payment, tax, invoicing, subscription management, and refunds. See Paddle's privacy notice.
- Hosting and infrastructure providers — to run the website, database, and email delivery on our behalf.
- Professional advisers (e.g. legal, accounting) where reasonably needed.
- Authorities where required by law.
We do not sell your personal data.
How long we keep it
We keep purchase records and unlock codes for as long as your access is valid and for a reasonable period afterwards to handle support, refunds, and tax/accounting obligations. Chat messages in active rooms are kept while the room is in use and may be cleared afterwards. We delete or anonymise personal data when we no longer need it.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent. You can also complain to your local data-protection authority. To exercise any of these rights, email auntyswhare@gmail.com and we'll respond within a reasonable time (and within one month where required by law).
International transfers
Our service providers may process data outside your country, including in the United States and the European Union. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses or adequacy decisions).
Security
We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and trusted infrastructure providers. No service can be 100% secure, but we take it seriously.
Cookies and local storage
We use cookies and browser local storage that are essential to running the app — for example to remember your unlock status, saved cards, and game settings. We don't run advertising or third-party tracking cookies. You can clear cookies and local storage in your browser settings at any time; doing so may sign you out or reset your saved preferences.
Changes
We may update this notice from time to time. The "Last updated" date above will change when we do.
Contact
Questions about your privacy or this notice? Email auntyswhare@gmail.com.