Back to homepage

Privacy Policy

Last updated: February 2026

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. For detailed information on data protection, please refer to our privacy policy below.

Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?

Your data is collected in part by you providing it to us. This may include, for example, your email address and display name when creating a Studio account, or your email address when activating a show as a host.

Other data is collected automatically or with your consent when you visit the website through our IT systems. This is primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter this website.

What data is collected?

As a Studio User (registered account): Your email address, display name, authentication data, show content you create, and payment information when purchasing packages (processed via Stripe).

As a Host (show activation without account): Your email address (for login via Magic Link), as well as statistics about your shows (number of shows, players, rounds).

As a Player: Only a freely chosen nickname, which is only used during the game and is not permanently stored.

2. Hosting

This website is hosted by Vercel. The provider is Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA (hereinafter "Vercel").

Vercel collects the following data in so-called log files, which your browser transmits:

  • IP address
  • the address of the previously visited website (referer request header)
  • date and time of the request
  • time zone difference from Greenwich Mean Time
  • content of the request
  • HTTP status code
  • amount of data transferred
  • website from which the request originates
  • information about browser and operating system

The use of Vercel is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in presenting our website as reliably as possible.

3. Supabase (Database, Authentication, and Storage)

We use Supabase as a backend-as-a-service for database storage, user authentication, real-time communication, and file storage. The provider is Supabase Inc., 970 Toa Payoh North #07-04, Singapore 318992.

The following data is stored at Supabase:

  • Email addresses and display names of registered users (Studio accounts and hosts)
  • Authentication data (encrypted passwords and session tokens)
  • User profiles (role, Stripe customer ID)
  • Show metadata (show code, status, number of players, number of rounds)
  • User-created show content (questions, answers, media references) in Supabase Storage
  • Package and entitlement data (purchased packages, redemption status)
  • Aggregated statistics (number of shows per user)

Not stored: Player names, individual answers, game progress data – these only exist during the active game session in memory.

The use of Supabase is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) for providing the service.

For more information, see the Supabase privacy policy: https://supabase.com/privacy

4. OpenAI (Speech Synthesis and AI Generation)

For AI-powered moderation of the game shows, we use the Text-to-Speech API from OpenAI. Additionally, we use OpenAI's language models for AI-assisted show generation in the Studio. The provider is OpenAI, L.L.C., 3180 18th Street, San Francisco, CA 94110, USA.

For speech synthesis, only pre-made moderation texts (questions, answer options, transition announcements) are transmitted to OpenAI.

For AI show generation, only the topic and parameters you provide are transmitted. The generated content (questions, answers) is stored in your account.

No personal data from players or hosts is transmitted to OpenAI.

The generated audio files are cached for performance optimization.

Usage is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) for Studio features and Art. 6 para. 1 lit. f GDPR (legitimate interest in an interactive gaming experience) for speech synthesis.

More information: https://openai.com/privacy

5. Stripe (Payment Processing)

For processing payments in the Studio, we use Stripe. The provider is Stripe, Inc., 354 Oyster Point Blvd, South San Francisco, CA 94080, USA (hereinafter "Stripe").

When you purchase a package, you are redirected to Stripe Checkout. The following data is processed by Stripe:

  • Name and email address
  • Payment method details (e.g., credit card number, expiration date)
  • Billing address
  • Transaction amount and currency

We do not store your full payment method details on our servers. We only store a Stripe customer ID and references to payment intents and checkout sessions to manage your entitlements.

Stripe may process your data in the USA. Stripe is certified under the EU-U.S. Data Privacy Framework.

The use of Stripe is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) for processing your purchase.

For more information, see the Stripe privacy policy: https://stripe.com/privacy

6. Resend (Email Delivery)

For sending transactional and authentication emails, we use Resend. The provider is Resend, Inc., San Francisco, CA, USA (hereinafter "Resend").

The following emails are sent via Resend:

  • Account confirmation and password recovery emails
  • Show activation emails (Magic Links)
  • Marketing and update emails (only with your consent)

For this purpose, your email address is transmitted to Resend. Resend processes this data solely for email delivery on our behalf.

The use of Resend is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment) for transactional emails and Art. 6 para. 1 lit. a GDPR (consent) for marketing emails.

For more information, see the Resend privacy policy: https://resend.com/legal/privacy-policy

7. Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, session duration, operating systems used, and user origin. This data may be compiled by Google into a profile associated with the respective user or their device.

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.

The use of Google Analytics is only with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can grant or revoke your consent via the cookie banner.

IP Anonymization: We have activated IP anonymization on this website. This means your IP address is truncated by Google within member states of the European Union or other contracting states to the Agreement on the European Economic Area before transmission to the USA.

8. Cookies and Local Storage

Our website uses cookies and local storage (localStorage). These are small text files or data that your web browser stores on your device.

Technically Necessary Storage

We store the following data locally on your device:

  • cookieConsent: Stores your cookie banner choice in local storage for UI display
  • analyticsConsent: Stores a local consent marker for analytics UI behavior
  • Authentication session: Supabase authentication tokens for logged-in users (Studio and host sessions)
  • Player nickname: Temporarily for possible re-entry into the game

This storage is based on Art. 6 para. 1 lit. f GDPR (legitimate interest) or, for cookie settings, on Art. 6 para. 1 lit. c GDPR (legal obligation).

Optional Cookies

After explicit consent, we set analytics cookies for consent status, anonymous analytics ID, and campaign attribution (see Google Analytics section).

9. Update and Marketing Emails

Consent

When registering as a host, you have the option to consent via an optional checkbox to receive emails about news at YourOwn.Show. This consent is voluntary and not required for using the service.

Processed Data

If you consent to receiving update emails, we store the following in addition to your email address:

  • Time of consent
  • IP address at the time of consent (for verification purposes)
  • Wording of the consent statement

This data is processed pursuant to Art. 6 para. 1 lit. a GDPR (consent) and serves as proof of your consent.

Revocation (Unsubscribe)

You can revoke your consent at any time and unsubscribe from update emails:

  • Via the unsubscribe link in every update email
  • By email to hello@tntventures.de

The revocation does not affect the lawfulness of processing carried out prior to the revocation.

10. Data Storage and Deletion

Studio Account Data

Email addresses, display names, profile data, and associated show content are stored as long as your account is active. Purchased packages and entitlements are retained for accounting purposes. You can request deletion of your account and data at any time.

Host Data

Email addresses and associated statistics are stored as long as your account is active. You can request deletion of your data at any time.

Show Data

Metadata of completed shows (status, number of participants, number of rounds) is stored for statistical purposes. This data does not contain any personal information about the players. User-created show content is stored as long as the associated account exists.

Payment Data

Payment references (Stripe customer IDs, payment intent IDs) are stored for the duration required by tax and commercial law (typically 10 years). Full payment method details are only stored by Stripe.

Player Data

Player nicknames and answers are not permanently stored. They only exist during the active game session and are discarded after the game ends.

11. Your Rights

You have the following rights at any time regarding your personal data:

  • Right of Access (Art. 15 GDPR): You can request information about your data stored with us.
  • Right to Rectification (Art. 16 GDPR): You can request correction of inaccurate data.
  • Right to Erasure (Art. 17 GDPR): You can request deletion of your data.
  • Right to Restriction of Processing (Art. 18 GDPR): You can request restriction of processing.
  • Right to Data Portability (Art. 20 GDPR): You can receive your data in a machine-readable format.
  • Right to Object (Art. 21 GDPR): You can object to processing.
  • Right to Withdraw Consent: You can withdraw consent at any time.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

To exercise your rights, please contact the address provided in the imprint.

12. Contact

TNT Ventures GmbH
Venloer Str. 240
50823 Cologne
Germany

E-Mail: hello@tntventures.de