← Back to home

Privacy Policy

Last updated: 17 April 2026

This is a plain-English draft for our free beta. We will replace it with a lawyer-reviewed version before introducing any paid features. It explains the data we already collect today.

1. Who is responsible

DartState is operated by an independent developer based in Finland. The controller of your personal data under the GDPR is reachable at hello@dartstate.com.

2. What we collect

  • Email address — used to sign you in and send account emails (password resets, important notices).
  • Password — stored hashed by our auth provider (Supabase). We never see your plain-text password.
  • Profile details you choose — display name, country, avatar, darts preference.
  • Gameplay data — scores you submit, levels you complete, XP, streak, league position, achievements.
  • Friends — friend requests you send and accept, so the friends leaderboard can work.
  • Technical data — basic request logs kept by our hosting provider (Vercel) and database provider (Supabase) for security and debugging.

3. Why we use it

  • To run the app (show your progress, rank you in leagues, award achievements)
  • To keep your account secure (detect abuse, reset passwords)
  • To communicate with you about the service
We do not sell your data. We do not use it for advertising.

4. Who sees it

  • Other users — your display name, avatar, and XP are visible on leaderboards and to your friends.
  • Our service providers — Supabase (database + auth) and Vercel (hosting). They process data on our behalf.
  • No one else. We do not share your data with advertisers or marketers.

Weekly leaderboards may include practice opponents to keep competition active while the community grows. Your XP, streak, and level progression are always based on your own play.

5. Where it lives

Data is stored with Supabase. Backups are kept on a rolling basis (currently the Supabase default of daily snapshots).

6. How long we keep it

We keep your data while your account is active. When you delete your account, your profile and gameplay data are removed. Some records may remain in backups for up to 30 days until backups roll over.

7. Your rights (GDPR)

Because you are in the EU/EEA, you have the right to:
  • access a copy of your data
  • correct anything that is wrong
  • delete your account and your data
  • object to processing or ask us to restrict it
  • complain to your local data protection authority (in Finland, the Tietosuojavaltuutetun toimisto)
To exercise these rights, email hello@dartstate.com or use the Delete Account button in Settings.

8. Cookies

We use a single cookie to keep you signed in (a session cookie set by Supabase). We do not use advertising cookies or third-party analytics trackers at this time.

9. Children

DartState is not aimed at children under 13. If you are a parent and believe your child has signed up, email us and we will delete the account.

10. Changes to this policy

We may update this policy. Material changes will be announced in the app. The "last updated" date above shows when the current version took effect.

11. Contact

Privacy questions? hello@dartstate.com.