Privacy notice
TEMPLATE — have a lawyer review this before you launch. It is written to the shape of the DPDP Rules but the operator details, retention periods and grievance contact must be your own.
Who we are
Raunak Ghag ("we") operates Yorked at yorked.app. For the purposes of the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025, we are the Data Fiduciary for the personal data described below.
What we collect, and why
When you sign in with Google we receive and store your Google account identifier, email address, display name and profile picture URL. We use these to create your account, keep you signed in, show your name on leaderboards, and make sure the daily challenge can only be played once per person per day. We do not receive or store your Google password, and we do not retain Google access or refresh tokens.
We ask for your year of birth. We use it only to determine whether you are under 18 and to apply the protections described below. We do not store your full date of birth.
We store your game results: scores, response times, streaks, the players you picked, and the answers you gave. This is what makes the leaderboard and your streak work.
Our hosting provider processes standard technical information such as IP address for security and abuse prevention.
What we do not do
We do not sell your personal data. We do not use it to build advertising profiles. We do not share it with third parties except our hosting and authentication providers acting on our instructions.
Users under 18
The DPDP Rules require verifiable parental consent before a child's personal data is processed, and prohibit tracking, profiling and behavioural advertising directed at children. Accounts we identify as belonging to a person under 18 are placed in a restricted mode: the account is excluded from public leaderboards, and no profiling or personalised advertising is applied. If you are a parent or guardian and want a child's account removed, contact us using the details below and we will delete it.
How long we keep it
We keep your account data while your account is open. If you do not sign in for 12 months, we will delete your account and its results. You can delete everything immediately from your account page.
Your rights
You can access, correct and erase your personal data, nominate another person to exercise your rights, and withdraw your consent at any time. The quickest route to erasure is the delete button on your account page, which removes your account and all associated results. For anything else, write to us. We will respond within the period required by law.
Grievance redressal
Data Protection contact: Raunak Ghag, ghagraunak@gmail.com, Mumbai. If you are not satisfied with our response you may complain to the Data Protection Board of India.
Changes
If we change this notice we will post the new version here and, where the change is significant, tell you in the app. Last updated: 1st September 2026.