🔐 Data Protection & Privacy

Last updated: 12 October 2026

This notice explains what personal information Math Battle Arena uses, why we use it, and the choices and rights available to you.

1. Who we are

Math Battle Arena (“we”, “us”, “our”) is responsible for deciding how personal information collected through the Service is used. In data protection law, this means we act as the data controller. You can contact us at privacy@mathbattle.es.

2. Information we collect

Account information — email address, username, account identifier, login method, and authentication records.
Profile information — display name, XP, coins, rating, level, rank, streaks, and win/loss record.
Game and feature activity — battles, practice sessions, submitted answers, response times, scores, rewards, card inventory, feature views, and interactions such as opening answer review.
Technical and security information — IP address, browser or device information, session identifiers, and service logs.
Messages — information you include when contacting support or exercising a data protection right.

Please do not include sensitive personal information in your username or support messages.

3. Why we use it

Provide the Service — create your account, run games, calculate results, save progress, and deliver rewards.
Operate social features — show usernames, levels, ratings, and results on profiles and leaderboards.
Protect the Service — authenticate users and detect cheating, abuse, fraud, and technical failures.
Improve the Service — understand performance and improve game balance and reliability.
Communicate with you — answer support enquiries and data protection requests, send optional game reminders, and share an optional newsletter about major game updates where you have enabled each type of email. You can manage both choices independently in your profile or unsubscribe from an email.

4. Our legal bases

Depending on the activity, we rely on:

Contract — where information is needed to provide the account and game features you request.
Consent — for optional game reminders and newsletters. You can withdraw either choice independently at any time.
Legitimate interests — to secure, maintain, understand, and improve the Service, provided those interests do not override your rights.
Legal obligation — where we must keep, use, or disclose information to comply with the law.

5. Public information

Your username, level, rank, rating, XP, and game statistics may be visible to other players on profiles, leaderboards, battles, and results pages. Your email address, authentication details, private performance breakdown, and support messages are not intended to be public. Do not use your real name as a username unless you want it to be visible to other players.

Classes. A registered user (for example a teacher or parent) can create a class and share a join code. When you join a class, the class owner can see your username and your weekly game activity within that class: games finished, accuracy, accuracy in the class focus topic, and when you last played that week. Other class members only see usernames, games finished that week, and whether the weekly goal was reached. You can leave a class at any time, and the class owner can remove members. Class membership is deleted when you leave, when you are removed, or when your account is deleted, and a class is deleted when its owner's account is deleted.

6. Service providers and disclosures

We do not sell personal information. We use service providers to operate hosting, databases, authentication, security, and other technical infrastructure. They may process information only to provide those services to us and under appropriate contractual safeguards. We may also disclose information where required by law, to protect users or the Service, or in connection with a reorganisation or transfer of the Service.

Supabase provides database and authentication infrastructure.
Resend delivers optional game reminders and newsletters to players who enable them.
Hosting and infrastructure providers deliver and protect the application.

7. International transfers and security

Our service providers may process information in countries outside the UK. Where data protection law requires it, we use recognised safeguards for those transfers. We use technical and organisational measures designed to protect personal information, including access controls and encrypted connections. No online service can guarantee absolute security.

8. How long we keep information

We keep account and game information while your account is active and for as long as reasonably needed to operate the Service, resolve disputes, prevent abuse, maintain accurate records, and meet legal obligations. Retention periods depend on the type of record and why it is needed. Information is deleted or anonymised when it is no longer required. You may request account deletion, subject to information we are permitted or required to retain.

9. Your data protection rights

Depending on the circumstances, UK data protection law may give you the right to:

Access — request a copy of the personal data we hold about you.
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete personal data in certain circumstances.
Restriction — ask us to limit how we use your data.
Portability — receive certain information in a structured, machine-readable format.
Objection — object to processing based on legitimate interests.

To exercise a right, contact us at privacy@mathbattle.es. We may need to verify your identity. We normally respond within one month, although the law allows more time in some circumstances. These rights are not absolute and legal exemptions may apply.

10. Children

If you are under 13, a parent or guardian should create and supervise your account. A parent or guardian may contact us about a child's information or request that the child's account be deleted. Users should avoid putting a child's real name or other identifying information in a public username.

11. Cookies

For information on how we use cookies, see our Cookies Policy.

12. Changes to this notice

We may update this notice when our practices, the Service, or applicable law changes. We will update the date at the top and provide an appropriate notice where a change materially affects how personal information is used.

13. Questions and complaints

For a concern about how we use your personal information or handle a data protection right, please email privacy@mathbattle.es first so we have an opportunity to investigate and put things right.

If you remain dissatisfied with our handling of a personal information concern, you may be entitled to complain to the UK Information Commissioner's Office. The ICO is the independent UK data protection regulator. Its complaints process covers privacy and personal information; it does not handle general gameplay, account, moderation, or customer-service disputes. Visit the ICO data protection complaints page.

For a general question or complaint about the Service, contact support@mathbattle.es.

Cookies Policy Terms & Conditions