PRIVACY POLICY

When you create an account with Sign in with Apple, Supabase stores your account identifier, Apple-provided email address (which may be a private relay address), and the name and display handle you save. Apple verifies your identity; JST FLP does not receive your Apple password. You can add a JST FLP password and then sign in with your username or email. Supabase processes that password securely to verify your account; it is separate from your Apple password. Password recovery verifies the Apple account used to create your JST FLP account. Your sign-in session is stored securely on your iPhone. Profile photos and your personal decision log remain on your device unless you use them in an invite or share a result. You can also use a demo or join an invitation in the browser without creating an account.

Apple processes subscription payments. JST FLP stores your account identifier, subscription product and transaction identifiers, subscription status, and expiration or revocation information to provide and restore access. JST FLP does not receive your payment-card details.

When you create, join, or take part in a personal invite, JST FLP processes the name and photo used for that FLP, its question, choices, tosses, result, and share-link identifier. If you contact support, we also receive the information you include in your message.

Live FLP chat is available to the host and joined players. We store the message, display name, participant identifier, and time sent to synchronize the conversation. Live chat history is available for up to seven days. When a completed FLP is recorded, its messages are saved with the replay and remain available for as long as that replay is retained. People who can view a public FLP replay or open its shared results link can also see those recorded messages at the point they were sent.

Direct messages are available to the sender and recipient. We store their account identifiers, message text, the time sent, and read status to deliver messages and show unread counts. FLP invitations can also appear in a conversation. Direct messages remain in your conversation history while both accounts exist; deleting either account removes the conversation. If you report a message, authorized reviewers can access the reported text and associated account identifiers under the reporting practices below.

When you sign up, we may save the campaign labels on the link you used, the referring website’s domain, or whether you arrived through a FLP or lifetime invitation. Supported iPhone versions also request Apple Ads attribution to measure which of our campaigns led to an install. We associate available source information and Apple campaign identifiers with your account for our own signup analytics, visible only to the account owner who operates JST FLP. We do not collect your advertising identifier, fingerprint your device, or use this information to target you with ads. Raw invitation URLs and Apple attribution tokens are not saved in these records. Link hints are kept on your device for up to 30 days or until captured at signup. Account deletion removes the saved signup source.

We use this information only to provide the profile and FLP experience, show the people and choices involved in a shared result, measure signup sources, respond to support requests, and keep the service secure and working. JST FLP does not sell personal information or use it for targeted advertising.

We store your username and account identifier to deliver invitations to your inbox. If you enable phone notifications, we store your Apple push device token. You can turn notifications off in iPhone Settings. Deleting your JST FLP account removes its notification registration.

We store reports, their reason and optional details, the reported content and account identifiers, review decisions, and your blocked-user list to protect players. New photos shared in FLPs are held for private review and shown as a placeholder until approved. Existing shared photos can be reported. Authorized reviewers can view reported content and uploaded photos, remove content, and suspend accounts. We keep reports for up to 90 days and blocked accounts until you unblock them or delete your account. For reports sent without an account, we use a one-way, secret-protected hash of the connection IP address to limit spam; we do not store the raw address with the report.

Our hosting providers may process limited technical information, such as an IP address, browser or device information, and timestamps, to deliver, secure, and diagnose the service. We do not use this information for advertising or profiling.

A photo and display name used in a FLP can be visible to the people participating in that FLP. They may also be visible to people who open that FLP’s result link. Please do not upload a photo, name, question, or choice that you would not want those people to see.

Your JST FLP sign-in information remains until you request account deletion. Your local profile remains on your device until you replace or reset it. Unfinished hosted invites and their related photos are deleted after 30 days without activity. Finished FLP, result, share-link, and related host or guest photo data are kept for up to 90 days after a FLP is completed, then deleted. If you ask us to remove your hosted photo or identifying game information sooner, we will remove or de-identify it within 30 days. A non-identifying game result may remain through the 90-day period.

You can replace your on-device profile at any time. In the latest iPhone app, use YOUR PROFILE → DELETE ACCOUNT to delete your JST FLP account and linked shared games and remove Apple authorization. Older anonymous games and copies saved by others are not linked to account deletion. For help removing those hosted invites or results, email support@jstflp.app with the result or invite link, the display name used, and a short description of what you want removed. Do not include passwords, payment details, or government ID in a support request.

JST FLP is for people 13 and older. We do not knowingly collect personal information from children under 13.

We use safeguards designed to protect the information needed to run JST FLP. No method of online storage is completely secure. If this policy changes materially, the updated version will be posted here with a new date.

Questions about this policy can be sent to support@jstflp.app.