data controller: EMMMA
what we collect: your username, email address, game scores, session data, and your city (optional, only if you choose to give it).
why we collect it: legitimate interest (leaderboard and game functionality) and consent (mailing list, given at signup and withdrawable anytime).
how we use it: to power the leaderboard and game history, and to send EMMMA updates by email. we never sell or share your data with third parties.
third parties: data is stored via supabase (eu-west, ireland) and emailed via resend. both are GDPR-compliant processors.
retention: until you request deletion or your account is inactive for 2 years.
your rights under UK GDPR: access, correct, delete, restrict, object, portability. to exercise any right: emmma@emmma.co
complaints: you have the right to complain to the ICO at ico.org.uk
© 2026 EMMMA
