Privacy Policy

⚠️ Starter draft, not legal advice. Has not been reviewed by a lawyer yet — especially if you expect EU/UK (GDPR), California (CCPA), or child users.

Last updated: 2026-06-23

Ahmed Taweel, trading as Klarschritt, Irmtraud-Morgner-Str. 11, 10318 Berlin, Germany ("we", "us") operates ShouldaSaid. This explains what we collect, why, and who else sees it.

1. What We Collect

Data	Why
Anonymous device ID (stored in your browser's localStorage)	Identify your profile without requiring login
Email address (only if you log in via Magic Link)	Send the login link, save your progress permanently, attribute leaderboard entries
Debate scenario and argument text you type	Score your round, generate the AI opponent's reply, show on results/share cards
Gameplay stats (Aura, Sparks, badges, wins)	Run the game, leaderboard, progression
IP address (server logs only, not stored long-term)	Rate limiting and abuse prevention (e.g. free-game limits)

2. Who Else Sees It (Sub-Processors)

Supabase — hosts our database and handles Magic Link login emails' underlying auth.
OpenAI — your scenario and argument text is sent to OpenAI's API to generate the AI opponent's response, when that feature is active. See OpenAI's own privacy policy.
GameDistribution — serves the rewarded video ads; their SDK may collect device/advertising data per their own policy and consent prompts.
Resend — delivers the Magic Link login emails on our behalf.

We don't sell your data.

3. Cookies & Local Storage

We use your browser's localStorage (not cookies) to remember your anonymous device ID. Supabase Auth may use its own storage to keep you logged in. GameDistribution's ad SDK shows its own consent prompt for any tracking/targeting it does — we don't run our own advertising trackers.

4. Data Retention

We keep your profile (Aura, Sparks, badges) for as long as your account or anonymous profile is active. Contact us (below) to request deletion.

5. Your Rights

You can ask us to access, correct, or delete your data at [email protected]. If you're in the EU/UK or California, this includes rights under GDPR/CCPA respectively.

6. Children

The Service isn't directed at children under 13, and we don't knowingly collect data from them.

7. International Transfers

Our service providers (Supabase, OpenAI, GameDistribution, Resend) may process data outside your country of residence.

8. Changes

We may update this policy; the "Last updated" date above reflects the latest version.

Contact

[email protected]