Internet StadiumSign in

Privacy

1. Who this is about

This page explains what Internet Stadium collects about you, why, who else sees it, and what you can ask us to do with it. It applies to everyone: viewers who join a queue as a guest, viewers with an account, and creators who open a Stadium.

It is written to be read. Where a sentence could be vague or specific, it is specific.

2. What we collect

Four things, and nothing else.

  • An account, if you make one. Sign in with Google and we receive the email address on that account, along with the name and picture Google makes available. We never receive your Google password. Sign in with an email address instead and we store the address and a hash of your password — never the password itself. You choose a username, and you may add an avatar and an Instagram handle.
  • A guest session, if you do not. You can join a queue without an account. We create an anonymous session that lives in your browser and store the display name you pick. No email address is attached to it unless you later choose to save the account.
  • Payments, if you pay to join or send a tip. Your card details go to Stripe and never reach us — we do not see them and could not store them. What we keep is what the payment was for, the amount, the currency, whether it succeeded or was refunded, Stripe’s identifiers for it, and the email address Stripe sent the receipt to.
  • Gameplay. Which queues you joined, which games you played, every move in them, when each was made, and how the game ended.

On top of that there are ordinary server logs, including IP addresses, kept by our hosting provider for security and debugging.

3. What is public

Some of it is public by design, because the product is a public thing. Your username, your avatar and your Instagram handle are visible to anyone. So is every game you play: the moves, the result and the replay live at a permanent link, and a creator’s Stadium shows its own archive.

Your email address is not public, and that is enforced in the database rather than promised in prose — the permission that makes a profile readable excludes the email column outright, so it cannot be read by a browser even by accident.

A creator’s Stadium title, description and image are public too, which is the point of them.

4. Why we use it

To run the platform: to sign you in, to hold your place in a queue, to play the game, to call you when it is your turn, and to show a creator who is waiting.

To take payments and issue the refunds our terms promise, and to keep the records that tax and accounting law require us to keep.

To keep the platform working and safe: to fix faults, and to act on the conduct rules in our terms.

If you are in the EU or the UK: the first is performing our contract with you, the second is that plus our legal obligations, and the third is our legitimate interest in a service that works and is not abused.

5. Payments

Payments are processed by Stripe, which is the only party that ever handles your card. Internet Stadium is the merchant of record, and section 6 of our terms sets out what is refunded and what is not.

Creators are paid through Stripe Connect. The identity and bank details Stripe collects during that onboarding are given to Stripe directly, under Stripe’s own privacy policy. We receive whether the onboarding is complete and what the creator has earned — never their bank details.

6. Cookies, and what we do not do

We set cookies for one purpose: to keep you signed in, or to hold a guest session so that the place you are queuing for is still yours when the page reloads. Refusing them means the platform cannot sign you in.

We measure how the platform is used with Plausible, which is analytics built to need none of this. It sets no cookies and stores nothing that identifies you: no profile, no account, and no raw IP address or device fingerprint kept after the visit. It cannot follow you to another website or recognise you on another device, so there is nothing here to ask you to consent to and no banner asking you to. What we get back is counts — how many people opened a Stadium, how many joined a queue, how many ended up playing.

Alongside it your browser holds a small note of which of those counts have already been sent, so that reloading a page is not counted twice. It is the word “sent”, it names no one, and it is gone when you close the tab.

There is no advertising on Internet Stadium. We set no tracking or advertising cookies and we do not follow you to other websites. We do not sell your data, and we do not share it for advertising or with data brokers.

7. Who else sees it, and where it lives

Four service providers, each doing one job for us and none of them free to use your data for their own purposes:

  • Supabase — the database and the sign-in system. Hosted in Paris.
  • Stripe — payments and creator payouts. Stripe operates internationally under its own terms and privacy policy.
  • Vercel — hosting the site itself. Served from Dublin.
  • Plausible — the usage counts described in section 6. An Estonian company, storing its data in the European Union.

So your account and your games are stored in the European Union. Beyond those four, we disclose data only where the law requires it.

8. How long we keep it

Your profile for as long as your account exists. Payment records for as long as tax and accounting law obliges us to hold them, which is longer than the account and is not something we can shorten on request.

Games are permanent. A finished game is a public record of something two people did together, and the archive a Stadium leaves behind is a large part of what the platform is for — so a game is not withdrawn because one of its two players later asks. If you close your account, your profile goes and the games stay, no longer attached to a profile anyone can open.

9. Your rights

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. If you are in the EU or the UK these are rights under the GDPR; we extend the same handling to everyone.

Ask through the contact form at the bottom of this page. There is no self-service button for this yet, so these are handled by hand — tell us the username or the email address you used and we will come back to you. Section 8 sets out the two limits: payment records we are obliged to keep, and games that are also another player’s record.

If you are in the EU or the UK and you think we have handled this badly, you can complain to your national data protection authority.

10. Children

Internet Stadium is not intended for children under 13, or under 16 where local law sets the higher bar. We do not knowingly collect anything from them. If you believe a child has an account, tell us through the contact form and we will remove it.

11. Changes to this page

We may update this page. If a change materially affects what we collect or who sees it, we will make that clear rather than quietly editing the text.

12. Contact

Questions about this page, or a request under section 9, go through our contact form.