Privacy Policy

1. Introduction

Lysara Productions ("we", "us", or "our") operates DeepDive Trivia at www.deepdivetrivia.com (the "Service"). This Privacy Policy explains what personal data we collect, how we use it, and the choices you have. By using the Service you agree to the practices described here.

2. Information We Collect

We collect information you provide directly — such as your display name and email address when you create an account through Manus OAuth — as well as information generated automatically when you use the Service.

Account data. Your display name, email address, and profile picture are obtained from your Manus OAuth provider at sign-in. We store a hashed session token in a secure HTTP-only cookie to maintain your session.

Gameplay data. We record your answers, scores, streaks, Curiosity Coin balances, Elo ratings, and Oracle prediction history in order to power the game features and personalised statistics you see in the Service.

Payment data. Pro subscription payments are processed by Stripe. We never receive or store your full card number, CVV, or bank account details. We store only the Stripe Customer ID and Subscription ID necessary to manage your subscription status.

Usage and log data. Our servers automatically record your IP address, browser type, referring URL, pages visited, and timestamps when you interact with the Service. This data is retained for up to 90 days for security and diagnostic purposes.

Cookies and similar technologies. We use strictly necessary cookies for authentication. We also use Google AdSense, which may set advertising cookies on your device to serve personalised ads. You can opt out of personalised advertising at adssettings.google.com.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service and its game features.
• Authenticate you and keep your session secure.
• Process Pro subscription payments and manage your subscription status.
• Calculate and display leaderboards, scores, and personalised statistics.
• Send transactional notifications (e.g., duel challenges, Oracle resolutions) where you have opted in.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with legal obligations.

We do not sell your personal data to third parties, and we do not use your gameplay data to build advertising profiles.

4. Advertising — Google AdSense

We use Google AdSense to display advertisements on the Service. Google AdSense uses cookies and device identifiers to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visit to our site and other sites on the Internet.

You may opt out of personalised advertising by visiting aboutads.info/choices or youronlinechoices.com. For more information on how Google uses data from sites that use its services, see policies.google.com/technologies/partner-sites.

5. Data Sharing and Disclosure

We share your personal data only in the following limited circumstances:

• Service providers. We share data with Stripe (payment processing), Manus (OAuth and hosting infrastructure), and Google (AdSense advertising). Each provider is bound by its own privacy policy and data processing terms.
• Legal requirements. We may disclose your data if required by law, court order, or governmental authority, or if we believe disclosure is necessary to protect the rights, property, or safety of Lysara Productions, our users, or the public.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via a prominent notice on the Service before your data becomes subject to a different privacy policy.

6. Data Retention

We retain your account and gameplay data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes (for example, Stripe transaction records, which we retain for seven years in accordance with financial regulations).

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access. Request a copy of the personal data we hold about you.
• Correction. Ask us to correct inaccurate or incomplete data.
• Deletion. Request that we delete your account and associated personal data.
• Portability. Request your data in a structured, machine-readable format.
• Objection / Restriction. Object to or ask us to restrict certain processing activities.
• Withdraw consent. Where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

8. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately at [email protected] and we will delete it promptly.

9. International Data Transfers

Lysara Productions is based in the United States. If you access the Service from outside the United States, your data may be transferred to and processed in the United States or other countries where our service providers operate. We take appropriate safeguards to ensure that such transfers comply with applicable data protection laws.

10. Security

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include TLS encryption for data in transit, hashed session tokens, and role-based access controls on our database. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify you by email or by a prominent notice on the Service. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: