1. Introduction

WYR ("Would You Rather," "we," "us," or "our") operates the website wyr.gg (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Service.

We are committed to protecting your privacy. We use privacy-focused analytics and minimize data collection to only what is necessary to provide and improve our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: Used for account authentication and optional communications
• Password: Stored in hashed (encrypted) form; we never store plain-text passwords

2.2 Voting Data

When you vote on questions, we collect:

• Your vote choice: Which option you selected (A or B)
• Question identifier: Which question you voted on
• Country/region: Derived from your IP address to show regional voting patterns
• Timestamp: When you voted

Note: We do not store your IP address in our database. We only use it temporarily to determine your country/region, then discard it.

2.3 Payment Information

When you purchase credits, payment processing is handled by Stripe. We do not store your credit card number, CVV, or full payment details on our servers. We only receive:

• Confirmation that payment was successful
• Transaction ID for record-keeping
• The amount and date of purchase

2.4 Analytics Data (Plausible)

We use Plausible Analytics, a privacy-focused analytics service. Plausible collects:

• Page URLs visited
• Referrer (where you came from)
• Browser and device type
• Country (derived from IP, not stored)
• Screen size

Important: Plausible does not use cookies, does not track users across websites, and does not collect personal information. All data is aggregated and anonymous. Plausible is GDPR, CCPA, and PECR compliant. You can view our public analytics dashboard.

2.5 User-Submitted Questions

When you submit a question, we store the question text, your account association, and submission timestamp for moderation and display purposes.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Display voting results and regional voting patterns
• Process your credit purchases
• Authenticate your account
• Moderate user-submitted content
• Prevent spam and abuse (via reCAPTCHA)
• Analyze usage patterns to improve the Service (via Plausible)
• Respond to your inquiries and support requests

4. Third-Party Services

We use the following third-party services:

Plausible Analytics

Privacy-focused web analytics. Does not use cookies or collect personal data. Data is processed in the EU. Plausible Privacy Policy

Stripe

Secure payment processing. Stripe handles all payment card data. We never see or store your full card details. Stripe Privacy Policy

Supabase

Database and authentication hosting. Your account data and votes are stored securely on Supabase infrastructure. Supabase Privacy Policy

Google reCAPTCHA

Spam and abuse protection for form submissions. reCAPTCHA analyzes browser behavior to distinguish humans from bots. Google Privacy Policy

5. Cookies and Tracking

We do not use tracking cookies. The only cookies we use are:

• Authentication cookies: Essential session cookies to keep you logged in
• Theme preference: To remember your light/dark mode preference

Our analytics provider (Plausible) is completely cookieless. We do not track you across other websites.

6. Data Retention

• Votes: Retained indefinitely as aggregated, anonymized data for displaying voting statistics
• Account data: Retained until you request deletion
• Submitted questions: Retained indefinitely (approved questions become part of the Service)
• Payment records: Retained as required by law for financial record-keeping

7. Your Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• Right to Know: You can request information about what personal data we collect, use, and disclose
• Right to Delete: You can request that we delete your personal data
• Right to Opt-Out: You can opt out of the sale of your personal data. Note: We do not sell your personal data.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, contact us at support@wyr.gg. We will respond within 45 days.

8. Children's Privacy (COPPA)

Our Service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@wyr.gg.

If we discover that we have collected personal information from a child under 13, we will delete that information promptly.

9. Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

• Encrypted connections (HTTPS) for all data transmission
• Hashed passwords using industry-standard algorithms
• Secure, access-controlled database infrastructure
• Regular security reviews and updates

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. International Users

Our Service is operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

11. Do Not Track

We respect Do Not Track (DNT) signals. Our analytics provider (Plausible) does not track users across websites regardless of DNT settings, and we do not use any tracking cookies or cross-site tracking technologies.

12. Data Sharing

We do not sell your personal data. We only share your information in the following circumstances:

• Service providers: With third-party services listed in Section 4, as necessary to provide the Service
• Legal requirements: When required by law, court order, or governmental authority
• Protection: To protect our rights, privacy, safety, or property
• Business transfers: In connection with a merger, acquisition, or sale of assets (you would be notified)

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after such changes constitutes your acceptance of the new Privacy Policy. We encourage you to review this Privacy Policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@wyr.gg.