HOUSE RULES

Privacy Policy

Last updated: 26 August 2026

---

House Rules is a competitive beer-pong ranking app: you log matches during a session and build a global ELO rating. This policy explains what we collect, why, who processes it, and the control you have over it. We keep it deliberately short because the app collects deliberately little.

This service is operated by Blake Hupalo ("we", "us"). If you have any question about this policy or your data, contact us at blake@blakehupalo.dev.

01What we collect

• Account details. A username you choose, a contact email you provide, and a password. Your password is never stored by us in readable form; it is handled and hashed by our authentication provider (see §3). Your contact email is not currently used to send you mail and is stored only as an account record.
• Gameplay data. The matches you create or take part in (teams and results), your ELO rating and its history, the sessions you create or join and your membership of them, session invites you send or receive, and your friend connections.
• A device sign-in token. To keep you logged in, an authentication token is stored securely on your device (the iOS Keychain / Android Keystore). It never leaves your device except to talk to our backend over an encrypted connection.

We do not collect your real name, contacts, location, photos, or device advertising identifiers, and the app contains no third-party advertising or analytics / tracking SDKs.

02How we use it

• To run the game: compute rankings and ELO, show leaderboards, match history and stats, and manage sessions, invites and friends.
• To maintain and secure your account, including preventing automated abuse and spam sign-ups.

03Who processes your data

We don't sell your data and we don't share it for advertising. It is processed on our behalf by a small number of infrastructure providers:

• Supabase: our database and authentication provider, which stores your account and gameplay data and performs password hashing. Supabase hosts data on cloud infrastructure (Amazon Web Services).
• Cloudflare: provides the bot-protection challenge ("Turnstile") shown when you sign up or log in, to stop automated account creation.

These providers process data only to deliver the service to you. We may also disclose data if required by law.

04What other players can see

Because House Rules is a public ranking app, your username, your ELO / rating, and your match and leaderboard statistics are visible to other people using the app. Your contact email and password are never shown to other users.

05Deleting your account

You can delete your account at any time from Settings → Delete Account. When you do, your account is anonymised: your username and identity are removed and you can no longer sign in. Your past matches are retained in anonymised form, because they are part of other players' competitive records and ELO history, so removing them would corrupt other people's ratings. Your friend connections are removed.

If you want your data handled differently, email us at blake@blakehupalo.dev.

06How we protect it

• All traffic between the app and our backend is encrypted in transit (HTTPS/TLS).
• Passwords are hashed by our authentication provider; we never see or store them in the clear.
• Your on-device sign-in token is kept in the device's secure store (Keychain / Keystore).
• Database access is governed by row-level security so accounts can only reach data they're permitted to.

07Data location

Your data is stored and processed by our providers on cloud infrastructure that may be located in the United States or other regions. By using the app you understand your data may be processed outside your country of residence.

08Children & age

House Rules is a game of skill and can be played with any beverage (soda, water, or otherwise), so it isn't limited to a drinking context. We do not knowingly collect data from young children.

09Your rights

Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, or to object to certain processing. You can exercise the core of these rights in-app (edit your data, delete your account) or by emailing blake@blakehupalo.dev.

10Changes to this policy

We may update this policy as the app evolves. When we do, we'll change the "last updated" date above; significant changes will be surfaced in the app.

11Contact