Privacy Policy

1. Introduction & Scope

This Privacy Policy applies to the DabHousie platform, available at https://www.dabhousie.com, including all related subdomains, mobile web interfaces, and services operated by Digital App Studio ("we," "us," or "our").

DabHousie is a social multiplayer interactive event and entertainment SaaS platform designed for family game nights, kitty parties, club gatherings, classrooms, and corporate events to play live Tambola, Housie, Bingo variants, and interactive trivia/skill games with digital cards, automated number draws, and automated server-side prize verification. Player participation is 100% free of charge, and all rewards are strictly promotional gift vouchers or sponsor offers (no cash payouts or real-money wagering).

2. Information We Collect and How We Collect It

A. Identity & Single Sign-On (SSO) Providers (Google, Apple, Microsoft, & Corporate Email)

When you register or sign in as an event organizer, we support secure Single Sign-On (SSO) and passwordless authentication through industry-standard OAuth 2.0, OpenID Connect, and email verification providers. We request only the minimal public profile information required to identify your account and display your organizer badge:

Note: We do NOT request, receive, or store your passwords, cloud storage files (Google Drive, OneDrive, iCloud), contacts, calendars, or sensitive enterprise directory data.

B. Information Collected During Gameplay (Guests & Players)

• Guest Player Identity & Session Management: Players who join games via invite codes or room links participate as guests without requiring an account or personal registration. The authoritative player identity in our architecture is an anonymous authentication UUID generated securely by our authentication service (Supabase Anonymous Auth). To preserve your ticket state, dabbed numbers, and live claim status across brief disconnects or page reloads, a pseudonymous local session identifier (such as mpt_local_uuid) is maintained in your browser's local storage as a client-side session key.
• Display Names & Avatars: Player nickname and avatar emoji selected by the user for in-game identification on the room leaderboard.
• Game Activity & Logs: Live number call sequence, ticket generation records, timestamped prize claim requests (e.g., Early Five, Top Line, Middle Line, Bottom Line, Four Corners, Full House), promotional voucher claim codes, and room completion statuses.
• Zero Player Financial or Payout Data: Because joining games as a player is 100% free and all in-game prizes consist exclusively of promotional vouchers or gifts fulfilled directly by the event host or brand sponsors (no cash delivery is permitted), Digital App Studio never collects, requests, or stores credit card numbers, bank account details, UPI IDs, or financial payout information from players.

C. Technical & Device Information

• Browser type, device operating system, viewport resolution, and IP address (processed temporarily by our CDN for network security and DDoS mitigation).

D. Corporate Brand Authorization Data & DVAA™ Telemetry

DabHousie features a proprietary Domain-Verified Automated Approval (DVAA™) architecture designed to provide zero-PII brand protection and prevent unauthorized trademark display. When an organizer customizes an event with corporate identity (organization name and domain-hosted logo), we process minimal verification telemetry:

• Corporate Email & Domain Verification: When an organizer authenticates using a corporate domain email, we evaluate the domain matching to enable Instant Domain-Owner DVAA™ approval. Corporate approver email addresses are used strictly to deliver verification requests and official audit acknowledgements. Approver emails are never enrolled in marketing lists, sold, or shared with third-party advertisers.
• Immutable Compliance Audit Records: To maintain brand integrity and prevent corporate impersonation, all DVAA™ operations—including auto-approvals, email dispatches, and web approvals—generate timestamped audit records containing event scale, organizer attribution, timestamp, verification IP, and approver email. Official audit records are automatically archived and delivered to DabHousie Compliance at contact@dabhousie.com.
• Domain-Hosted Logo Fetching: Logos are loaded dynamically from the organization's official domain via HTTPS or validated through authorized CDN integrations (Logo.dev) without copying or storing third-party trademark files on DabHousie servers.

3. How We Use Collected Information

We use your information strictly for the following legitimate operational purposes:

• Authentication & Account Management: Authenticating game hosts, protecting organizer wallet credits, and restoring hosted game lobbies across devices.
• Multiplayer Game Synchronization: Delivering live game state updates, caller numbers, and player lists in real time via WebSockets.
• Automated Win Verification: Validating winning ticket claims on the server to prevent fraudulent or mistaken claims during live events.
• Brand Verification & Compliance: Enabling corporate reviewers to authorize official branding and maintaining a verified audit trail.
• Security & Abuse Prevention: Preventing bot spam, duplicate ticket exploitation, or denial-of-service attacks on live games.

4. Recent Games & Hall of Fame Public Display

Recent Games & Hall of Fame: If you win a prize in a public game, your chosen in-game nickname, avatar, and the prize won may be displayed on our public Recent Games page. We recommend choosing a nickname rather than your real name. Games marked Private Party by the host are never shown publicly. To request removal, email contact@dabhousie.com with your claim reference code.

4A. Brand Marketing Partner Data

When a business or marketing representative submits an offer through the Brand Marketing Partner Portal, we collect and process the following information:

• Data Collected via Registration Form: Brand/company name, company website domain (used to dynamically resolve brand logos via Logo.dev), marketing representative name and role/title, corporate work email address, offer details (offer title, description and customer benefit, offer type, category, target country/region, currency, retail value, and reward sponsorship value / host cost), voucher batch quantity, product landing page URL, voucher code type and promotional code(s), and optional redemption rules (expiration date, redemption channel, minimum purchase, redemption restrictions, and new-customers-only eligibility).
• Purpose & Retention: We collect this data to verify corporate identity, evaluate and configure sponsored reward campaigns in the DabHousie Partner Reward Catalog, deliver redemption details to verified game winners, and measure aggregate campaign impressions and landing-page clicks. Partner records are retained for the duration of the active campaign and historical showcase archive unless earlier deletion is requested.
• Database Storage & Email Dispatch: Submitted brand partner registrations are stored in our encrypted Supabase PostgreSQL database (via the MPT_register_brand_offer service) and simultaneously trigger an automated confirmation and internal compliance notification email via Amazon SES. Direct partnership inquiries sent to partnerships@dabhousie.com are retained in our corporate mailbox for partner relationship management.
• Intentional Public Display vs. Private Data: To fulfill the promotional purpose of the program, your brand name, domain-resolved logo, offer title, offer type, category, target region, currency, retail/sponsorship value, redemption rules, and landing page URL are intentionally displayed to game hosts, players, and visitors on our public Brand Partners and Recent Games pages. This is an intentional public promotional display of your offer, not a third-party data broker transfer. Actual promotional or voucher codes are stored privately and disclosed only to verified game winners. Marketing representative contact details (representative name, role, and corporate work email) are kept strictly internal and are never displayed publicly or sold to third parties.
• Contact & Removal Rights: Brand representatives may request updates, deactivation, or complete deletion of their submitted contact data and partner offer listings at any time by emailing partnerships@dabhousie.com or contact@dabhousie.com. Verified removal requests are processed within 7 business days.

5. Google API Limited Use Disclosure

• We do not transfer Google user data to third parties except as necessary to provide or improve the core features of the DabHousie application.
• We do not use or transfer Google user data for serving advertisements, including personalized, retargeted, or interest-based advertising.
• We do not permit humans to read Google user data unless we have obtained your explicit agreement for troubleshooting, it is necessary for security purposes, or it is required to comply with applicable law.
• We do not use Google user data to train generalized artificial intelligence (AI) or machine learning (ML) models.

5A. Apple & Microsoft Identity Disclosures

DabHousie respects user privacy across all supported authentication frameworks:

• Sign in with Apple: Our integration complies fully with Apple's Developer Program License Agreement and Human Interface Guidelines. DabHousie natively honors Apple's "Hide My Email" Private Relay service (generating an anonymous @privaterelay.appleid.com address). We never track users across third-party websites or apps, and we do not share Apple user identifiers with advertising brokers or analytics aggregators.
• Microsoft Identity Platform (Microsoft Entra ID & Personal Accounts): When signing in with a Microsoft or work account, we request only standard OpenID Connect identity claims (openid, profile, email). We do not request access to your organization's Microsoft 365 files, Outlook mailbox, Teams chats, or Entra directory graph beyond your basic user sign-in profile.

6. Data Sharing and Third-Party Infrastructure

We do NOT sell, rent, monetize, or trade your personal data. We share data only with the following essential cloud infrastructure subprocessors who are contractually bound to confidentiality and security standards:

• Supabase Inc. (Database & Authentication): Encrypted PostgreSQL database and authentication engine hosted on secure AWS infrastructure with Row Level Security (RLS).
• Amazon Web Services (AWS Amplify / CloudFront / SES): Secure HTTPS web hosting, SSL/TLS certificate management, Content Delivery Network (CDN), and automated transactional email audit deliveries.
• Google LLC (Google Identity Services): OAuth 2.0 authentication provider for Google accounts.
• Apple Inc. (Sign in with Apple): Authentication provider for Apple ID and Private Relay email forwarding.
• Microsoft Corporation (Microsoft Identity Platform / Entra ID): OAuth 2.0 / OpenID Connect authentication provider for personal Microsoft and organizational work accounts.

7. Cookies, Local Storage & Third-Party Services

DabHousie uses browser local storage (localStorage) and first-party cookies for essential functional operations, alongside select third-party analytics and advertising services on public web pages:

A. Essential First-Party Functional Storage

• mpt_player_name & mpt_player_avatar: Preserves your selected player nickname and avatar emoji locally in your browser.
• mpt_local_uuid: Local client-side session identifier used to maintain active room connection, ticket numbers, and dab state across brief page reloads.
• sb-access-token & sb-refresh-token: Secure encrypted authentication tokens for logged-in game organizers.

B. Google Analytics 4 (Web Analytics)

We use Google Analytics 4 (Property / Measurement ID: G-E46BLPH29 / G-E46BLPH29F), a web analysis service provided by Google LLC ("Google"), on our public informational and marketing pages. Google Analytics helps us understand how visitors discover and interact with the website, traffic sources, aggregate page views, user engagement, and performance trends so we can improve platform reliability and user experience.

• Measurement & Usage Analytics: Google Analytics processes technical and usage information (such as browser type, device category, screen resolution, referring URLs, pages visited, and interaction events) to provide aggregate reporting on site performance and user engagement.
• Cookies & Identifiers: Analytics cookies and pseudonymous identifiers may be used where applicable to distinguish unique browsers across sessions and compile aggregate usage trends. DabHousie does not use Google Analytics to identify individual visitors by name or merge analytics telemetry with your authenticated organizer account or private gameplay tickets.
• Opt-Out: You can prevent Google Analytics from collecting data across websites by installing the official Google Analytics Opt-out Browser Add-on.

C. Google AdSense & Third-Party Advertising

To help support platform hosting, server bandwidth, and free multiplayer game hosting for families and small groups, DabHousie may display advertisements provided by Google (Google AdSense) on select public pages (such as guides, information pages, and join screens). DabHousie live gameplay boards and host management interfaces remain strictly focused and ad-free.

• Cookies & Advertising Technologies: Google and its advertising partners may use cookies or similar technologies (including web beacons and device identifiers) to serve, personalize, and measure advertisements based on prior visits to our site or other websites across the Internet.
• Personalized vs. Non-Personalized Ads: Ads served by Google may be personalized or non-personalized depending on applicable user consent, your geographic location, browser settings, and Google account preferences.
• Independent Third-Party Processing: Advertising cookies and ad measurement technologies are operated independently by Google and its advertising partners in accordance with Google's Advertising Policies and Technologies. DabHousie does not control Google's advertising cookies and does not sell or disclose your personal contact information to third-party advertisers.
• Managing Your Ad Choices: You can manage Google's advertising and privacy choices or opt out of personalized ads at any time through Google's available privacy controls at Google My Ad Center. You can also manage third-party interest-based advertising via the Digital Advertising Alliance WebChoices tool or Your Online Choices (for visitors in the European Union / UK).

D. User Consent & European Regulations (Google Privacy & Messaging)

For visitors located in the European Economic Area (EEA), the United Kingdom (UK), and Switzerland, DabHousie utilizes Google's official Privacy & Messaging consent management tool (an IAB Europe Transparency and Consent Framework v2.2 certified Consent Management Platform / CMP). When required by applicable European data protection and privacy regulations, this Google-certified consent mechanism presents users with choices regarding the use of cookies and personal data for analytics and advertising prior to such technologies being loaded. Users may review, update, or revoke their consent preferences at any time through the privacy choices presented on our site.

8. Data Retention & User Deletion Rights (Right to be Forgotten)

We retain user profile data and game history for as long as your account remains active. You have full control over your personal data:

• Request Data Deletion: You can request complete deletion of your account, email address, profile, and hosted game history at any time by emailing us at contact@dabhousie.com with the subject "Data Deletion Request". We process all verified deletion requests within 7 business days.
• Revoke Google Account Access: You can revoke DabHousie's access to your Google Account at any time via your Google Account Permissions Settings.
• Revoke Apple ID Access: You can manage or revoke DabHousie's access to your Apple ID at any time through your Apple device settings (Settings > Apple ID > Sign-In & Security > Sign in with Apple) or at appleid.apple.com.
• Revoke Microsoft Account Access: You can manage or revoke DabHousie's access to your Microsoft account at any time at account.live.com/consent/Manage (for personal accounts) or myapps.microsoft.com (for organizational work accounts).

9. Data Security & Encryption

We employ robust technical and organizational security measures to protect your information:

• Encryption in Transit: All data transmitted between your browser and our servers is encrypted using modern TLS 1.3 / HTTPS protocols.
• Encryption at Rest: Database records, auth tokens, and game configurations are encrypted at rest using AES-256 standards.
• Row-Level Security (RLS): Granular database access policies enforce that only authorized organizers can access their private room data.

10. Children's Online Privacy Protection (COPPA / GDPR)

DabHousie is designed for general family, social, and corporate recreational party entertainment. We do not knowingly collect personal identifiable information directly from children under 13 years of age. If you believe a child under 13 has provided personal data without parental consent, please contact us at contact@dabhousie.com, and we will promptly remove the information.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect new features, security enhancements, or legal requirements. When updates occur, we will revise the "Last Updated" date at the top of this document. Continued use of DabHousie after changes constitutes acceptance of the updated terms.

12. Contact Information & Data Protection Inquiries

For questions, feedback, data access requests, or privacy inquiries, please contact our data protection team at:

• Email: contact@dabhousie.com
• Company / Publisher: Digital App Studio
• Web Platform: https://www.dabhousie.com