Legal
Privacy Policy
How we collect, use and protect your personal data, and the rights you have over it.
Last updated: 22 June 2026
Who we are
Waiting Game (“we”, “us”, “our”) is the controller of the personal data described in this policy. You can reach us at [email protected]. The legal entity and registered address will be confirmed by counsel before launch.
Data we collect
- Account data — such as your name, email address and authentication details when you register.
- Billing data — subscription status and limited payment metadata processed by Stripe. We do not store full card numbers.
- Usage data — such as pages viewed, lessons completed, device and browser information, and analytics events.
How we use it
- To create and manage your account and provide the Service.
- To process subscriptions, payments and cancellations.
- To deliver educational content and track lesson progress.
- To send service and transactional communications.
- To improve, secure and maintain the Service.
Legal bases
Where the GDPR or UK GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you sign up for), legitimate interests (to secure and improve the Service), consent (for certain analytics and marketing, where required), and legal obligation (for example, tax and accounting records).
Processors we use
- Supabase — authentication and database hosting.
- Stripe — subscription billing and payment processing.
- Telegram — community access and signal distribution.
- Resend — transactional and service emails.
- Analytics providers — to understand and improve how the Service is used.
Each processor handles your data under its own terms and our data-processing arrangements. The final list of processors must be verified before launch.
Cookies
We use cookies and similar technologies for essential functionality (such as keeping you logged in) and, where you consent, for analytics. You can control non-essential cookies through your browser settings or any cookie banner we provide.
Data retention
We keep personal data only for as long as necessary to provide the Service, to comply with legal, accounting or reporting obligations, and to resolve disputes. When data is no longer needed, we delete or anonymise it.
International transfers
Some of our processors may store or process data outside your country, including outside the EEA or UK. Where this happens, we rely on appropriate safeguards (such as standard contractual clauses) to protect your data. The specific transfer mechanisms must be confirmed by counsel.
Your rights
Subject to applicable law, you may have the right to access, correct, delete or port your data, to object to or restrict certain processing, and to withdraw consent. You can also lodge a complaint with your local data-protection authority.
How to contact us
To exercise any of your rights or ask a privacy question, contact us at [email protected].
Changes
We may update this policy from time to time. When we do, we will revise the “last updated” date above and, where appropriate, provide additional notice. Please review this page periodically.