Privacy Policy

Last updated: 23 March 2026

This privacy policy describes how Firebell House Pty Ltd (ACN 696 044 283) ("we", "us", "our"), operating the Halftime platform at halftime.coffee ("Service"), collects, uses, and protects your personal information.

We are committed to protecting your privacy and handling your data in accordance with the Australian Privacy Act 1988, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

1. Information We Collect

Account Information

When you create an account, we collect your name, email address, and profile image. If you sign in via Google or Microsoft, we receive your basic profile information from those providers. We do not receive or store your password from third-party providers.

Usage Data

We collect information about how you interact with the Service, including game scores, participation records, streaks, and activity timestamps. This data is used to power leaderboards, statistics, and your personal activity history.

Team Data

If you create or join a team, we store team names, membership information, and team settings. Team administrators can see the names and activity of team members.

Payment Information

If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We do not store your credit card number or full payment details. We receive and store your Stripe customer ID, subscription status, and plan information.

Technical Data

Our servers automatically record standard log data including IP addresses, browser type, and request timestamps. This data is used for security, debugging, and service reliability purposes.

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and manage your account
  • Process payments and manage subscriptions
  • Display leaderboards, scores, and activity within your team
  • Send transactional emails (magic links, team invitations, payment receipts)
  • Respond to support requests
  • Protect against fraud, abuse, and security threats

We do not sell your personal information. We do not use your data to build advertising profiles or serve targeted advertisements.

3. Third-Party Services

We share your information with the following third-party services, only as necessary to operate the Service:

  • Stripe — Payment processing. Stripe receives your payment details and billing address. Stripe Privacy Policy
  • Google / Microsoft — OAuth sign-in. These providers share your basic profile information with us when you choose to sign in with them.
  • Resend — Transactional email delivery. Resend processes your email address to deliver magic links, invitations, and account notifications. Resend Privacy Policy
  • Neon — Database hosting. Your data is stored in Neon-hosted PostgreSQL databases. Neon Privacy Policy
  • Cloudflare — Content delivery, real-time session infrastructure, and file storage. Cloudflare Privacy Policy
  • Upstash — Rate limiting and caching. Upstash Privacy Policy

We may also disclose your information if required by law, court order, or governmental regulation.

4. Data Storage and Security

Your data is stored on servers in the United States. We use industry-standard security measures including encryption in transit (TLS), encrypted database connections, and secure authentication protocols. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it by law (e.g., payment records for tax purposes).

Aggregated, anonymised data (such as total games played across the platform) may be retained indefinitely.

6. Cookies

We use essential cookies to maintain your authentication session and remember your preferences (such as theme selection). We do not currently use advertising or third-party tracking cookies.

If we introduce analytics cookies in the future, we will update this policy and provide you with the ability to opt out.

7. Your Rights

All Users

You have the right to:

  • Access the personal information we hold about you
  • Correct inaccurate personal information
  • Request deletion of your account and personal data
  • Export your data in a portable format

EU/EEA Residents (GDPR)

If you are in the EU or EEA, you additionally have the right to restrict processing, object to processing, and lodge a complaint with your local data protection authority. Our lawful basis for processing is contractual necessity (to provide you the Service) and legitimate interest (to maintain security and improve the Service).

California Residents (CCPA)

If you are a California resident, you have the right to know what personal information we collect, request its deletion, and opt out of the sale of personal information. We do not sell personal information.

Australian Residents

If you are in Australia, your rights are protected under the Privacy Act 1988 and the Australian Privacy Principles (APPs). You may complain to the Office of the Australian Information Commissioner (OAIC) if you believe your privacy has been breached.

8. Children's Privacy

The Service is designed for use by adults in workplace settings. We do not knowingly collect personal information from children under 16. If we learn that we have collected data from a child under 16, we will delete it promptly.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this privacy policy or wish to exercise your rights, contact us at:

  • Email: hello@halftime.coffee
  • Entity: Firebell House Pty Ltd (ACN 696 044 283)
  • Registered in Victoria, Australia
Privacy Policy | Halftime