Privacy Policy

Effective 12 September 2026

This Privacy Policy explains how Bellwether (the "Service"), operated by Nephrurus, an organisation based in Australia (the "Operator", "we", "us"), handles personal information. We aim to handle personal information consistently with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth), and, for visitors in the EU/UK, with the GDPR, as described below. The Service is available globally.

1. Information we collect

We collect only what the game needs to work:

  • Account identifiers. An email address or passkey used to sign you in, and the one-time codes involved in that process.
  • Profile details. Your display name and, optionally, an avatar image you choose to upload.
  • Game activity. The predictions you make, your points balances and history, the questions you post, and your standing over time.
  • Feedback. Anything you submit through the feedback box, linked to your account (see our Terms for how Feedback is treated).
  • Technical data. Basic log and device/browser information generated when you use the Service, and cookies or local storage used for your session and preferences (below).

We do not collect payment information, because the Service involves no money.

2. How we use it

  • to run the game: sign you in, record predictions, maintain points, and show leaderboards and standings;
  • to operate, secure, debug, and improve the Service;
  • to respond to and act on feedback and support requests; and
  • to meet our legal obligations and enforce our Terms.

3. Legal bases (EU/UK visitors)

Where the GDPR applies, we process your information to perform our agreement with you (providing the Service), for our legitimate interests (keeping the Service secure and improving it), on the basis of your consent where we ask for it, and to comply with the law. You may withdraw consent at any time where processing relies on it.

4. Cookies and local storage

We use strictly necessary cookies or browser storage to keep you signed in and to remember preferences such as your light/dark theme. We do not use advertising or third-party tracking cookies.

5. How we share information

We do not sell your personal information. We share it only with the service providers that host and run the Service on our behalf, principally our cloud hosting and database provider (Amazon Web Services), under obligations to protect it, and where required by law or to protect the rights, safety, or property of the Operator or others. Other players can see your display name, avatar, and public game activity such as leaderboard standing; they cannot see your email or private account details.

6. Where your information is stored

The Service is hosted on cloud infrastructure that may store and process data in Australia or overseas. Where information is transferred across borders, we take reasonable steps to ensure it is handled consistently with this policy and applicable law.

7. How long we keep it

We keep your information for as long as your account is active and as needed to run the Service. When you delete your account we delete or de-identify the personal information associated with it, except where we must retain some of it to meet legal obligations or resolve disputes. Aggregated or de-identified data that no longer identifies you may be retained.

8. Security

We take reasonable technical and organisational measures to protect personal information from misuse, loss, and unauthorised access. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

9. Your rights

You can view and update your display name and avatar, and delete your account, from your account page at any time. Subject to applicable law, you may also request access to, correction of, or deletion of your personal information, and (where the GDPR applies) object to or restrict certain processing and request a copy of your data in a portable form. To make a request, contact us using the details below.

If you are in Australia and are not satisfied with how we handle a privacy concern, you may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au. EU/UK visitors may complain to their local data protection authority.

10. Children

The Service is not directed at children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the effective date above. Please review it periodically.

12. Contact

For privacy questions or requests, contact the Operator at bellwetherapp@gmail.com.