PRIVACY POLICY

The controller responsible for data processing is Next Round GbR, Schellingstraße 15, 07548 Gera, Germany, email: nextround67@gmail.com.

NextRound is a party-game and multiplayer service consisting of the NextRound website and mobile app. The free version can be used without mandatory registration; certain Premium features require a user account.

We process personal data only where necessary for operating the app and website, multiplayer, account, Premium and feedback functions, the voluntary website newsletter, technical security, or legal obligations. We do not sell personal data and currently do not use advertising SDKs or analytics platforms.

• Account data such as email address and authentication information when a user creates an account or signs in with Google (Art. 6(1)(b) GDPR, where necessary for the account).
• Game and lobby data such as player name, lobby code, player/session information and game-related data for running and synchronizing game rounds (Art. 6(1)(b) GDPR).
• Game statistics, votes and game-related assignments where required for the respective game function (Art. 6(1)(b) GDPR).
• Technical data such as IP address, device information and server logs where processed by the technical infrastructure for operation and security (Art. 6(1)(f) GDPR).
• Premium and subscription status and contract data required to administer Premium features (Art. 6(1)(b) GDPR).
• Voluntarily submitted feedback for troubleshooting and improving the app (Art. 6(1)(f) GDPR).
• Newsletter data: an email address is processed only when it is separately entered on the website for the newsletter and the required consent is given (Art. 6(1)(a) GDPR). The app does not automatically subscribe users to the newsletter.
• Payment data is processed by Stripe; Next Round GbR does not store complete payment-card data.

The free version can be used without a mandatory account. Certain Premium features require a user account.

Google Sign-In may be used as an authentication method. Depending on the authentication flow, Google may provide information such as the email address and account identifiers required to authenticate the user. The specific data provided is determined by the authentication process and the information displayed to the user.

Users may delete their account directly through the account-deletion function provided in the app.

Player names, lobby codes, player/session information and other game-related data are processed to create, join and synchronize game rounds. This may include votes, scores and game-related assignments.

Data may be processed server-side through the backend infrastructure used by NextRound. We delete data when it is no longer necessary for the respective purpose, unless legal retention obligations apply. Immediate deletion of every technical server log after a game ends is not guaranteed.

Premium subscriptions are processed through the available payment provider. The same prices apply to the website and mobile app: €5.99 per week or €29.99 per year, including VAT. Website subscriptions are processed through Stripe.

For a Stripe subscription, the user may be redirected to the Stripe customer portal through the “Cancel subscription” function.

Complete payment data such as credit-card details is not stored by Next Round GbR and is processed by the relevant payment provider. Further information: https://stripe.com/privacy.

Base44 is used as a technical platform for the website, app, authentication, backend and data processing. Account data, Premium information, feedback, lobby/game data and technical data may be processed through Base44.

Further information: https://base44.com/privacy. Where Base44 processes personal data on our behalf, the required data-processing arrangements apply.

Voluntarily submitted feedback is processed for troubleshooting, improving the app and evaluating suggestions. Users should not submit sensitive personal data through the feedback function.

Feedback is deleted when it is no longer necessary for the purpose, subject to legal retention requirements.

The app does not access location, camera, microphone, contacts or photos and currently does not use push notifications.

We currently do not use advertising SDKs or analytics platforms and do not share personal data for advertising purposes. If this changes, this Privacy Policy will be updated and consent will be obtained where required.

• Base44, Inc. as hosting and backend provider
• Stripe as payment service provider
• Brevo as newsletter and email-distribution provider for the voluntary website newsletter
• Authorities or other bodies where legally required

Service providers may process personal data outside the EU or EEA. Transfers are carried out only on the basis of appropriate safeguards, such as an adequacy decision or standard contractual clauses, where required.

NextRound may be used by people aged 16 or older. Alcohol is not required for the party and drinking-game functions and participation in drinking tasks is voluntary.

We store data only for as long as necessary for the respective purpose or as required by law. Lobby data is deleted after the lobby ends, game statistics after the relevant round, feedback no later than twelve months after submission, and Premium status for as long as required to provide and administer Premium features or comply with contractual and statutory obligations.

Users with an account can request deletion directly through the account-deletion function in the app. When an account is deleted, personal data associated with that account is deleted unless legal retention obligations or other legal reasons require continued storage. Technically necessary deletion processes and logs may be processed temporarily to carry out and document the deletion. Account deletion does not automatically unsubscribe a user from the separate website newsletter; newsletter consent can be withdrawn independently.

We take appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration or disclosure.

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent with effect for the future

To exercise these rights: nextround67@gmail.com.

Data subjects have the right to lodge a complaint with a data protection supervisory authority. In particular, the competent authority for Thuringia is the Thüringer Landesbeauftragter für den Privacy und die Informationsfreiheit, Häßlerstraße 8, 99096 Erfurt, Germany, email: poststelle@datenschutz.thueringen.de.

The website offers an optional newsletter. The email address entered for the newsletter is processed only for newsletter delivery and management of the consent. The app account is not automatically subscribed; subscription requires a separate entry of the email address on the website and the required consent.

We use Brevo (Brevo / Sendinblue) for newsletter delivery and management of newsletter subscriptions. Brevo may process the email address and information required for sending the newsletter and documenting consent. This processing is based on consent under Art. 6(1)(a) GDPR.

Consent can be withdrawn at any time with effect for the future, including through the unsubscribe option provided in a newsletter. Unsubscribing from the newsletter does not affect an existing app account.

We may update this Privacy Policy when the website, app, processing activities or legal requirements change. The current version is made available in the app and on the website or through a provided link.