Privacy Policy

This Privacy Policy explains what information Scrywire collects when you use scrywire.com and related services (the "Service"), why we collect it, who we share it with, and the choices you have. It applies to everyone who visits the site or uses an account. The Service is operated by Average Build LLC, which is the data controller for the personal information described here.

1. The short version

• We collect the minimum needed to run matchmaking and webcam play.
• We don't sell your personal information, and we don't run third-party advertising.
• We don't record your video or voice calls.
• You can delete your account and your profile data at any time from your profile page.

2. What we collect

Information you give us

• Account data — email, display name, optional avatar and bio, and the password hash held by our auth provider (we never see your raw password).
• Profile activity — favorite games, formats, games played, friends, and table history you create on the platform.
• Content you post — table titles, descriptions, chat messages, invites, and waitlist signups for games we haven't launched.
• Support messages — anything you email us at hello@scrywire.com or legal@scrywire.com.

Information collected automatically

• Device & usage — browser type, operating system, approximate location (from IP), pages viewed, and timestamps. Used for security and to improve the Service.
• Cookies — small files used for sign-in sessions and basic analytics. See our Cookie Policy.
• Presence — when you have Scrywire open, we mark you as online so friends can invite you to a pod. Presence is cleared when you close the tab.

What we don't collect

• Recordings of your webcam or voice calls. Video and audio are transmitted in real time and not stored on our servers.
• Payment details — Scrywire is currently free.
• Government IDs, biometric data, or precise geolocation.

3. Why we use your information

• To create and secure your account and let you sign in.
• To match you with pods and let friends find and invite you.
• To deliver transactional emails (sign-in links, password resets, invites you opt into, waitlist confirmations).
• To prevent abuse, fraud, and rule violations, and to enforce our Terms.
• To understand how the Service is used in aggregate and improve it.
• To comply with legal obligations.

4. Legal bases (EEA/UK)

If you're in the European Economic Area or the United Kingdom, we process your personal data under one of these bases:

• Contract — to provide the Service you signed up for.
• Legitimate interests — to keep the Service secure, prevent abuse, and improve it, in ways you'd reasonably expect.
• Consent — for optional analytics cookies and marketing emails, where required. You can withdraw consent at any time.
• Legal obligation — to respond to lawful requests.

5. Who we share it with

We don't sell your personal data. We share it with the providers below — only to the extent each needs to do their job — and with anyone you explicitly direct (for example, the players you invite to a pod).

• Hosting & backend — Cloudflare (edge hosting), our managed Postgres provider, and Lovable (platform infrastructure).
• Authentication & database — Supabase (account management, database, file storage).
• Email delivery — Resend (transactional emails).
• Webcam / real-time — peer-to-peer WebRTC where possible; otherwise relayed through low-latency TURN providers for the duration of a call only.

We may also disclose data if we're legally required to (subpoena, court order, government request) or if it's necessary to protect the rights, safety, or property of Scrywire, our users, or the public.

6. International transfers

Our service providers may process data in the United States, the European Union, and the United Kingdom. Where required, transfers are protected by the EU/UK Standard Contractual Clauses or an equivalent safeguard.

7. How long we keep it

• Account data — for as long as your account exists, plus up to 30 days after deletion to remove it from backups.
• Tables — closed tables are kept for up to 90 days for moderation and dispute resolution, then removed.
• Chat & invites — deleted with the table or when you delete your account.
• Logs — security and request logs are kept for up to 90 days.
• Support email — kept for up to 24 months.

8. Your rights

Wherever you live, you can:

• Access, update, or delete your profile from your profile page.
• Export your account data on request.
• Unsubscribe from optional emails using the link in the email.
• Withdraw consent for optional cookies in our cookie banner.

If you're in the EEA, the UK, California, or another region with specific data-protection laws, you may also have the right to object to or restrict processing, to portability, and to lodge a complaint with your local data-protection authority. To exercise any right, email privacy@scrywire.com. We respond within 30 days.

9. Security

We use TLS in transit, encrypted storage at rest, row-level authorization in our database, and least-privilege access for our team. No system is perfectly secure, but we take this seriously. If you believe you've found a vulnerability, please email security@scrywire.com before disclosing it publicly.

10. Children

The Service is not directed to children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. Parents or guardians can contact privacy@scrywire.com.

11. Changes

We'll update this Policy as the Service evolves. If changes are material, we'll notify you in-app or by email at least 14 days before they take effect.

12. Contact

Scrywire is operated by Average Build LLC. Questions about privacy? Email privacy@scrywire.com.