Say Kampai

Privacy policy

What we collect when you use Say Kampai, why we need it, who handles it for us and how to have it deleted.

Last updated:

Say Kampai is opening in stages. Today the website is public, and accounts, payments and the game are being finished. This policy describes how they work once they open. AI portraits are planned and not offered yet.

Who runs Say Kampai

"Say Kampai", "we", "us" or "our" means the operator of saykampai.com. Contact: hello@saykampai.com.

What we collect

From couples and planners

  • Your email address. You sign in with a code we email you, so we need it to let you in.
  • If you choose to sign in with Google, we ask Google for your email address only. We never see your Google password.
  • The two names, the wedding date and the language of the game. The names appear on the big screen, the language sets the guests' screens, and the date decides the price.
  • The questions and answers you write for your quiz.
  • A record of what you bought and when, with the payment provider's reference. We never see your card number.

From guests

Guests don't make an account. A guest types a display name and taps answers. We keep that name, the answers, how fast they came in and the score, so the leaderboard works. The name shows on the big screen, and the couple or the host can remove it. The guest's phone keeps a small player id in the browser, so a reload doesn't lose the score.

From everyone who visits

Like any website, our host Cloudflare receives your IP address and browser details to deliver pages and block abuse. Our server keeps short logs of requests for a few days so we can fix errors.

Why we're allowed to use it

The EU's data protection law (GDPR) asks us to name a legal reason for each use:

  • Your account, your wedding and the game: we need them to give you the service you signed up for (contract).
  • Guest names and answers: running the game the couple set up, which the guest chose to join, is our legitimate interest.
  • Purchase records: tax and accounting law requires us to keep them (legal obligation).
  • Server logs: keeping the site working and safe is our legitimate interest.
  • Photos for AI portraits, once offered: you agree to it when you upload them, and you can withdraw that by deleting them (consent).

Who handles it for us

  • Cloudflare hosts the website, the game and the database. Its servers are worldwide, so your data may be processed outside your country, under Cloudflare's data protection terms.
  • Resend sends our sign-in emails. It receives your email address and the code.
  • Dodo Payments takes payments. It is the seller on your receipt and handles your card details, taxes and refunds, so card numbers never reach us. Its own privacy policy covers what it collects.
  • Google, only if you choose to sign in with Google.
  • AI portraits are planned. When they are offered, the photos you upload after paying go to an image service that draws your portraits. We use it with the setting that stops it from keeping the photos or training on them, and we will name it here before portraits open. You can delete the photos and portraits at any time.

We don't sell your data, and we don't share it with advertisers.

How long we keep it

  • Sign-in codes expire after 10 minutes.
  • A sign-in lasts 30 days, or until you sign out.
  • Your account, your weddings with their names and questions, the guests' names and answers, and your portraits stay until you delete them.
  • Photos uploaded for portraits, once offered, are deleted as soon as you approve your portraits, or earlier if you delete them.
  • Purchase records stay as long as tax and accounting law requires.
  • Server logs are kept for a few days.

You can delete a wedding, or your whole account and everything in it, from your account page. That control is still being built. Until it exists, write to hello@saykampai.com and we delete it within one month.

Cookies

We set one cookie, sk_session, when you sign in. It keeps you signed in for up to 30 days. We use no advertising or analytics cookies and no tracking scripts. The player id on a guest's phone is stored in the browser and used only for the game.

Your rights

You can ask to see your data, correct it, get a copy to take elsewhere, or have it deleted. You can also object to how we use it or ask us to limit it. Write to hello@saykampai.com from the email address on your account. Guests have no account, so tell us the wedding and the name you played under. We reply within one month.

If you think we handled your data wrongly, you can complain to the data protection authority in your country.

Children

Say Kampai is not for children under 16, and you must be 16 or older to make an account. If you think a child under 16 has given us personal data, write to us and we will delete it.

Changes to this policy

When we change this policy, we update the date at the top. For bigger changes, we email everyone with an account before they take effect.