Privacy Policy

The entity responsible for processing your personal data in connection with this website and game is the operator of Born & Buried. You can reach the operator at: admin@born-and-buried.com.

Born & Buried is a browser-based trivia game. You can play without an account. If you create an account, we process a small amount of data to run the account and save your game results. We process personal data only in line with the EU General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz, DSG).

Playing without an account: your game progress and best streak are stored locally in your browser (local storage) and are not sent to us as personal data. If you submit a score to a leaderboard, the name you type and your score become publicly visible.

With an account: we process your email address, an encrypted password (for email/password sign-up), a display name you choose, and your game results (daily scores, streaks). If you sign in with Google, we receive your email address and basic profile name from Google to create your account.

Technical data: when you visit the site, standard connection data (such as IP address) is processed by our hosting/ infrastructure provider to deliver the site securely.

• Providing the game and website — legitimate interest, Art. 6(1)(f) GDPR.
• Creating and managing your account, authentication, email confirmation, and saving your results — performance of a contract / your request, Art. 6(1)(b) GDPR.
• Displaying your chosen display name and score on public leaderboards — your submission and consent, Art. 6(1)(a)/(b) GDPR.
• Security and abuse prevention — legitimate interest, Art. 6(1)(f) GDPR.

If you choose Google sign-in, authentication is handled via Google. Google may process data according to its own privacy policy. We only receive the information needed to create and identify your account (email address and profile name).

We use service providers who process data on our behalf under data processing agreements (Art. 28 GDPR), including our cloud backend and hosting infrastructure (which provides database, authentication, and email delivery for confirmation and password-reset messages). Data may be processed on servers that these providers operate; where data is transferred outside the EU/EEA, appropriate safeguards such as the EU Standard Contractual Clauses apply.

We do not use advertising or tracking cookies. We use strictly necessary local storage and cookies to keep you signed in and to remember your game progress on your device.

Account data is kept for as long as your account exists. If you delete your account or ask us to delete your data, we remove your personal data unless we are legally required to keep it. Locally stored game progress remains on your device until you clear it.

Under the GDPR you have the right to:

• access your personal data (Art. 15);
• rectification of inaccurate data (Art. 16);
• erasure (Art. 17);
• restriction of processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interest (Art. 21);
• withdraw consent at any time, without affecting prior processing.

To exercise any of these rights, contact us at admin@born-and-buried.com.

If you believe your data is processed unlawfully, you may lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria — dsb.gv.at.