Privacy Policy

Last updated: 6 October 2026

1. Data Controller and Scope of this Policy

The controller of your personal data is PIOTR KUC-DZIERŻAWSKI PONYX, Tax Identification Number (NIP): 6782847669, referred to below as “PONYX”, “we” or “us”.

If you have any questions regarding your personal data, you can contact us at contact@houseofbridge.com. Full details of the operator are provided in the Terms of Use.

This Privacy Policy describes how personal data is processed in the House of Bridge application available at play.houseofbridge.com (the “Application”) and in connection with supporting its users.

It does not cover cookies used by the separate informational website houseofbridge.com.

2. What Data We Process

We process data related to the features you use.

Account and profile data includes your email address, nickname, account identifier and information provided in available profile fields, such as your country, languages or national bridge association identifier.

Authentication data includes information required to create an account, authenticate you when you sign in and protect access to the Application. Authentication is handled using Microsoft Azure AD B2C.

Game data includes, among other things, participation in tables, matches and tournaments, bidding and play records, results, board history and related analyses and statistics.

Technical data includes information related to the operation and security of the Application, such as IP address, browser and device information, connection times, error logs and security events.

Correspondence and submitted content includes information provided in messages, support requests and complaints, as well as materials submitted through features of the Application.

We obtain data from you, through your use of the Application and through the authentication service.

3. Why We Process Data and the Legal Basis

Providing your account and access to the Application. We process data required for registration, authentication, gameplay, use of available features, game history and related support in order to perform our contract with you or to take steps at your request before entering into a contract, under Article 6(1)(b) GDPR.

Security and proper operation of the Application. We may process technical data, game information and reports in order to diagnose errors, protect accounts, prevent abuse and investigate suspected unfair play. The legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Maintaining sporting records. We may retain results, scores, rankings and information necessary to document tournaments and matches in order to maintain reliable sporting records, verify results and awarded points, and resolve disputes concerning competitions. The legal basis is our legitimate interest and, where applicable, the legitimate interests of competition organisers and participants under Article 6(1)(f) GDPR.

Communication and legal claims. We may process correspondence in order to handle enquiries and to establish, exercise or defend legal claims on the basis of our legitimate interests.

Legal obligations. Where processing is required by law, we process the necessary data to comply with legal obligations applicable to PONYX.

Providing personal data is voluntary. However, without information necessary to create an account or provide a particular feature, we may be unable to provide that service.

We do not use users’ personal data to send newsletters or other marketing communications.

We may, however, send communications concerning your account, security, support requests and material legal or organisational changes affecting the Application.

4. Visibility of Data and Game History

The visibility of information depends on the relevant feature of the Application and the type of competition.

In public or generally accessible competitions, your nickname, results and game history may be visible to users who have access to the relevant results, tournament history, match history, board history or analyses.

Some modes and events may have restricted access. For example, a private tournament may be visible only to its participants or to other persons authorised to access it. In such cases, information relating to the competition is made available in accordance with the settings and intended purpose of the relevant mode.

The information available to coaches, tournament directors and organisers depends on the feature being used and their role in the relevant event.

The email address used to sign in is not displayed to other users as part of your game history.

5. Who May Receive Your Data

We use Microsoft services for Microsoft Azure infrastructure and Microsoft Azure AD B2C authentication.

Personal data may also be accessed by persons providing technical support for the Application, to the extent required to perform their tasks.

Tournament directors, coaches and organisers may receive information required to run an event or training activity in which you participate.

Data may also be disclosed to competent authorities or legal advisers where there is an appropriate legal basis.

Access to personal data is limited to what is necessary for the relevant purpose.

6. Where Data Is Stored

Application data is stored using Microsoft Azure infrastructure located in Europe.

Using an international infrastructure provider may, in certain circumstances, involve access to or processing of data outside the European Economic Area.

Where such a transfer occurs, it is carried out using mechanisms permitted under applicable data protection law.

7. Cookies and Similar Technologies

We do not use Google Analytics, advertising cookies or tools intended to track users for marketing purposes in the Application.

Authentication, session management and security may require technically necessary cookies or similar browser storage mechanisms. This applies in particular to Microsoft Azure AD B2C authentication.

Blocking technologies required for authentication or session management may prevent the Application from functioning correctly.

8. Retention and Deletion of Data

Data required to operate your account is retained for as long as the account exists.

When you request deletion of your account, we delete data used to operate the account and provide authentication, subject to data that may lawfully need to be retained due to a legal obligation, the protection of legal claims or another lawful basis.

Deleting your account does not automatically result in deletion of records of tournaments and matches that have already been played.

We may retain results, scores, rankings and information necessary to document competitions, including the player identifier used in the relevant event, where this is necessary to maintain reliable sporting records, verify results or awarded points.

The scope, visibility and retention period of such data are limited to what is necessary for those purposes. When continued identification of a player is no longer necessary and no other lawful basis for processing exists, identifying data is deleted or anonymised.

Information that can still identify a user after account deletion remains personal data and continues to be subject to data protection rules.

Technical records and correspondence are retained for as long as necessary to investigate the relevant issue, ensure security or protect legal claims.

You can request deletion of your account by contacting contact@houseofbridge.com. We aim to complete the process within 14 days.

Further details are provided in the User Data Removal Policy.

9. Your Rights

Subject to the conditions set out in the GDPR, you may have the right to:

• access your personal data and obtain a copy,
• have inaccurate data corrected,
• request deletion of your data,
• request restriction of processing,
• receive or transfer your data where the conditions for data portability are met.

You may also object to processing based on our legitimate interests for reasons relating to your particular situation.

Requests should be sent to contact@houseofbridge.com.

Where we have reasonable doubts about your identity, we may request information necessary to verify it.

Exercising your rights is generally free of charge. We will provide information about the action taken without undue delay and no later than one month after receiving your request. Where permitted by the GDPR, this period may be extended by up to two additional months.

If you request deletion of information forming part of sporting records, we assess your request individually, taking into account both your rights and the legitimate need to preserve accurate results, scores and rankings, as well as the scope of information actually required for that purpose.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO) or another competent supervisory authority.

10. Minors

The Application may be used by persons who are at least 13 years old.

Minors should use the Application with the knowledge of their parent or legal guardian and, where required by applicable law, with their consent.

If you believe that personal data relating to a minor is being processed unlawfully, contact us at contact@houseofbridge.com.

11. Changes to this Policy and Contact

We may update this Privacy Policy when the Application, our processing activities or applicable law changes.

The current version is published together with the date of the most recent update.

We inform users about material changes affecting the way their personal data is processed in a manner appropriate to the nature of the change.

Publishing an updated version of this Policy does not constitute consent to new processing purposes where such consent would be required.

Questions concerning privacy should be sent to contact@houseofbridge.com.