← Back

🔐 Data Protection & Privacy

Last updated: March 2026

1. Who we are

Math Battle Arena (“we”, “us”, “our”) is the controller of personal data collected through this Service. We are committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What data we collect

  • Account data — email address and username provided on registration.
  • Profile data — display name, total points, win/loss record, rank, and level.
  • Game data — battle history, answers submitted, scores, and card inventory.
  • Technical data — IP address, browser type, and session identifiers collected automatically by Supabase Auth.

3. How we use your data

We use your personal data to:
  • Provide, maintain, and improve the Service.
  • Authenticate you and keep your session secure.
  • Display leaderboard rankings and battle results.
  • Detect and prevent cheating or abuse.
  • Respond to support requests.

4. Legal basis for processing

We process your personal data based on:
  • Contract — processing necessary to provide the Service you signed up for.
  • Legitimate interests — fraud prevention, security, and service improvement.
  • Legal obligation — where required by applicable law.

5. Data storage and security

Your data is stored securely on Supabase infrastructure hosted in the European Union. Supabase implements industry-standard security measures including encryption in transit (TLS) and at rest. We do not store payment card details.

6. Data sharing

We do not sell, rent, or trade your personal data. We may share data with:
  • Supabase — our hosting and database provider, acting as a data processor.
  • Legal authorities — where required by law or court order.

7. Data retention

We retain your account data for as long as your account is active. Game history records are retained for 12 months. You may request deletion of your account and associated data at any time.

8. Your rights

Under UK GDPR you have the right to:
  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — ask us to delete your personal data (“right to be forgotten”).
  • Restriction — ask us to limit how we use your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interests.
To exercise any of these rights, contact us at privacy@mathbattlearena.com. We will respond within 30 days.

9. Cookies

For information on how we use cookies, see our Cookies Policy.

10. Changes to this policy

We may update this Data Protection policy from time to time. Any material changes will be communicated via a notice on the Service. Continued use after changes constitutes acceptance.

11. Complaints

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.