Privacy Policy

1.The short version

• We collect what we need to run a game with accounts, teams, scores and purchases — and not much else.
• We do not sell your personal information, and we do not show ads.
• We use a small number of well-known companies to host, pay, email, grade and draw. Most of them run in the United States; this page names each one.
• You can see, correct, export and delete your data from Account → Settings, and you can complain to a privacy regulator if we get it wrong.

Case Closed Inc. (Ontario, Canada) is the organisation responsible for your personal information (the “controller”, in European terms). Contact: info@playcaseclosed.ca.

2.What we collect and why

We use your information to provide the game and what you buy (our contract with you), to keep the service safe and to meet legal duties like tax records, and — with your permission, which you can withdraw any time — to email you about new cases or news. Guests give us only the name they type; a guest who claims their account then gives us an email.

3.Who processes it, and where

We do not run our own data centres. These companies process data for us under contracts that require them to protect it. Because most of them are in the United States, your data leaves Canada (and the EU or UK, if that is where you are). Transfers rely on the processor's contractual safeguards, such as standard contractual clauses.

Two things worth knowing. When a team submits its answers, the answer text is sent to Anthropic to be graded — no names, emails or account ids go with it. And we never see or store your card number; Stripe does, and Stripe shows us only the last four digits.

We also share information when the law requires it (a court order, a tax audit), to protect players or the service, or if the company is ever sold, in which case the new owner takes on this policy.

4.How long we keep it

• Account and gameplay: while your account exists, then removed when your account is deleted (after the 7-day cooling period).
• Purchases and the credits ledger: kept for the books after deletion, but with your identity removed — the rows no longer point to a person.
• Leaderboard entries: removed with your account. Until then they show your alias only.
• Forum posts: removed with your account, or hidden earlier by moderation.
• Support email: up to two years after the conversation ends.
• Technical logs: a few weeks.
• Unclaimed guest accounts: removed automatically after a period of inactivity.

5.Children

Case Closed is for people 13 and older. We do not knowingly collect personal information from children under 13, and we do not make accounts for them. The forum and creator publishing are for people 16 and older. If you believe a child under 13 has an account, write to info@playcaseclosed.ca and we will remove it.

6.Cookies

We use essential cookies only — the ones that keep you signed in — plus a few browser-storage keys that remember your preferences on this device. There is no analytics, tracking or advertising cookie on the site today. The Cookies page lists every item and explains what would change if we ever added analytics (you would be asked first, and outside Canada and the US the answer would be “no” unless you say otherwise).

7.Your rights and how to use them

Wherever you live, you can ask us to do any of the following. If you are in Canada these come from PIPEDA; in the EU or UK from the GDPR and UK GDPR; in California from the CCPA. We give everyone the same rights.

• Access — see what we hold. Account → Settings → Download my data gives you everything as one JSON file, at once.
• Correction — fix your alias, display name and avatar from Account → Profile. Email us for anything else.
• Deletion — Account → Settings → Delete my account. It takes effect after 7 days; sign in and press “Keep my account” to cancel it. Anonymised ledger rows stay for the books.
• Portability — the same JSON export.
• Objection and restriction — email us and say what you object to; we will stop or explain why we cannot.
• Withdraw consent — turn off release and marketing emails in Account → Settings, or use the unsubscribe link in any email. Essential emails (receipts, security) still come.
• No sale — we do not sell personal information, so there is nothing to opt out of. We also do not “share” it for cross-context advertising.
• No automated decisions with legal effect — an automated reader grades your answers; a person reviews a grade you dispute.

To make a request by email, write to info@playcaseclosed.ca from the address on your account. We answer within 30 days, and we never charge for a request.

8.Complaints

If you think we have handled your information badly, tell us first at info@playcaseclosed.ca — we want to fix it. You also have the right to complain to a regulator:

• In Canada: the Office of the Privacy Commissioner of Canada.
• In the European Union: the data protection authority in your country.
• In the United Kingdom: the Information Commissioner's Office.
• Elsewhere: your local privacy or consumer authority.

9.How we protect it

Data travels encrypted (HTTPS) and is stored by Supabase with encryption at rest. Access rules on every table mean a player can only ever read their own rows and the public parts of the game. Money moves only on our servers, never in the browser. No system is perfect; if a breach ever affects you, we will tell you and the regulator as the law requires.

10.Changes to this policy

When this policy changes, the date at the top and the change log at the bottom change with it. If a change affects what we do with your information in a way that matters, we email you before it takes effect.

11.Contact

Privacy questions and requests: info@playcaseclosed.ca. Case Closed Inc., Ontario, Canada.