House rules
Privacy Policy
Last updated: 17 October 2026
Who we are
SitomoPlay ("we", "us") is a web application for organising and tracking friendly game championships — seasons, games, results, prizes, polls and posts — and one-off guessing games called pools. This policy explains what personal data we collect, why, and what rights you have. The data controller is Sitomo Play, MB, Didlaukio g. 88-10, LT-08332 Vilnius, Lithuania — see the Legal Notice for our full company details. For any privacy question or request, contact info@sitomoplay.com.
What data we collect
- Account data — your email address, a password (stored only as a secure hash, never in plain text), your first name and (optionally) last name, your confirmation that you are 18 or over, when you created your account, and when you last used the app while signed in (to the nearest hour).
- Content you create — championships, seasons, games and their results (finishing places, scores, penalties), buy-in, rebuy and bounty points (points only, never money), whether a player's buy-in is marked as paid, prize settings, polls and your votes, "moments" (posts) and comments, in-championship messages and replies, timers, and message templates (reusable snippets of text only you can see). Some of this is visible to other members of the same championship.
- Photos — images you upload, currently a championship's banner and photos posted in moments, together with who uploaded them, when, and the image's size. Photos can show other people, including people who don't use SitomoPlay. When you upload a photo we resize it and re-save it, which removes the hidden details stored inside the original file (such as the location where it was taken and the camera or phone model). A photo is visible only to members of the championship it belongs to.
- Pools — if you run a pool: its name, description, questions and the real answers you enter. If you play in one: your guesses, and which pool you joined. You can play in a pool without an account; in that case we also hold the name you enter when joining, and a random secret your browser keeps so it can recognise you (we store only a one-way hash of that secret, never the secret itself). If you later create an account on the same device and choose to add those pools to it, your entries become part of your account: the name you entered and the secret are deleted, and you're shown under your account name instead.
- Plans and payments — if you buy a plan for a championship, the payment itself is handled by Paddle (see below). We keep the identifiers Paddle gives us for you as a customer and for the subscription, which championship it is for and who pays for it, the plan, its price and currency, its status and renewal or cancellation dates, and any plan change an owner schedules. We never see or store your card details.
- Activity records — an activity log per championship recording actions such as creating a game, recording a result, voting or changing the plan, together with who performed them and when. Amounts paid are never recorded there.
- Invitations — if a member invites you to a championship before you have an account, we hold the email address they invited, so we can send you the invitation and let you accept it. We use this only for that purpose.
- Settings and feedback — which notification emails you've turned off, and any feedback message you send us from the app, together with your account.
- Technical data — your IP address is used transiently in memory to rate-limit sign-in attempts and other requests, and is not stored. Our hosting's monitoring (Azure Application Insights) records technical details of requests to our servers — such as the address requested, response time, errors and browser type — so we can keep the service running and fix problems. It does not store your IP address, only the approximate location derived from it.
We do not use analytics, advertising or tracking technologies, and our fonts are served from our own site rather than a third-party font service. See the Cookie Policy.
Why we use your data
- To create and operate your account and provide the app's features to you and your championship — performance of a contract.
- To sell, renew, change and cancel plans, and to tell owners about payment problems — performance of a contract.
- To keep shared championship and game history accurate and intact — legitimate interests.
- To deliver an invitation a member sent you, and to send account, security and championship-related emails (such as sign-in codes and activity notifications) — legitimate interests / performance of a contract.
- To protect the service against abuse, through rate limiting and account lockout, and to keep it running — legitimate interests.
- To read and act on feedback you send us — legitimate interests.
- To see, as overall counts only, how the service is used (for example how many accounts were active this month) so we can run and improve it — legitimate interests.
- To comply with the law where required — legal obligation.
We do not use your data for marketing and we do not sell it.
Who we share it with
- Microsoft Azure hosts the application, the database, uploaded photos and our monitoring data, and acts as our processor under its data protection terms.
- Twilio SendGrid sends emails on our behalf (sign-in codes, confirmation codes, invitations and notification emails) and acts as our processor for the email address and message content involved.
- Paddle (Paddle.com Market Limited) is our reseller and the merchant of record for plans: you buy a plan from Paddle, which takes the payment, handles card details, tax, invoices and refunds, and is responsible for that data under its own privacy policy. We send Paddle the championship and our account identifier for a purchase, and the payer's email for the checkout. The pricing page and a championship's Plan and billing page load Paddle's script from Paddle, which may contact Paddle (including your IP address) to show prices in your currency.
- Other members of a championship you belong to can see the content and results you contribute to it, and your display name. Messages you send are the exception — they're visible only to the members you chose as recipients (or everyone, if you didn't pick any), and a reply is visible only to you and its sender.
- In a pool, the organiser and the other players see the name you play under. Nobody — the organiser included — sees your guesses until the organiser publishes the results; from then on, everyone in that pool can see every player's guesses and points.
- We may disclose data if required by law or to protect our rights or users' safety.
We do not share your data with advertisers or data brokers.
Where your data is stored
Your data is stored in Microsoft Azure data centres in the United States (Central US region). Because we are established in the EU, transferring data there is covered by Microsoft's certification under the EU-US Data Privacy Framework, backed by standard contractual clauses for anything the framework doesn't reach. Paddle stores the payment data it holds as described in its own privacy policy.
How long we keep it
- Account data is kept while your account exists.
- When you delete your account (Profile → Delete account), we anonymise it: your name is replaced with "deleted account", your email with a non-routable placeholder, your password, Paddle customer identifier and last-used time are removed, and you are removed from championships. The anonymised record is kept because game results, votes and history are shared data that other members rely on — it can no longer be linked to you. Plans you pay for stop renewing at the end of their period.
- Content, activity records, notification settings and feedback are retained as part of the championship or service they belong to, in anonymised form after account deletion.
- Message templates are private to you and aren't part of any championship, so they're deleted outright when you delete them or your account.
- A photo is deleted when it's removed or replaced, when the moment it was posted in is deleted, when its championship is deleted, and when the person who uploaded it deletes their account. Unlike other content, photos aren't kept in anonymised form, because a picture of someone can still identify them after the uploader's name is gone.
- A pool, with its questions, players (including the names of players without an account) and guesses, is deleted when its organiser deletes it, and automatically 12 months after its results are published. Pools you run are deleted when you delete your account; your entries in other people's pools stay as part of their results, shown under the anonymised "deleted account" name. If you leave a pool before it's locked, your entry and guesses are deleted; after it's locked, your entry stays because the results depend on it.
- A championship's plan record is kept with the championship, as it is part of its history; it is no longer linked to you once you delete your account. Payment notifications we receive from Paddle are deleted after 30 days. Paddle keeps its own payment and invoice records as merchant of record.
- An invited email address is kept until the invitation is accepted, declined, or the championship removes it — whichever happens first.
- Monitoring records are kept for 30 days.
- Automated database backups are retained by Azure for a limited period (typically up to a few weeks) and then deleted on a rolling basis.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your data, and to receive a copy in a portable format. You can update your name in Profile → My info, turn notification emails on or off in Profile → Notification settings, delete (anonymise) your account in Profile → Delete account, or contact info@sitomoplay.com for anything else. If you are in the EEA or UK, you also have the right to complain to your local data protection authority (in Lithuania, the State Data Protection Inspectorate).
These rights also apply to people who don't use SitomoPlay. If a photo on SitomoPlay shows you and you want it removed, email info@sitomoplay.com with the championship name and a description of the photo, and we'll deal with it.
Security
Connections use HTTPS/TLS. Passwords are stored as salted hashes, and every sign-in needs a one-time code sent to your email. The database is encrypted at rest. Access to production systems is restricted. No system is perfectly secure, but we take reasonable measures to protect your data.
Children
SitomoPlay is only for adults aged 18 or over and is not directed to children — this includes playing in a pool without an account, where joining means confirming you are 18 or over. If you believe someone under 18 has provided us personal data, contact us and we will delete it. Photos can still show children even though only adults use the service, so ourTerms require the consent of a parent or guardian before a photo where a child can be recognised is posted, and we remove any such photo when asked.
Changes
We may update this policy. The "last updated" date above reflects the latest version, and where appropriate we will notify members.