Privacy Policy

Effective date: 13 August 2026  ·  Last updated: 12 September 2026

ZIPPER ("the App", "we", "us") is a party drinking game for iOS made by Niels Marinus Rens van Brussel. This policy explains what data the App collects, why, who can see it, and how you can delete it.

ZIPPER is intended for adults aged 18 and over. Do not use ZIPPER if you are under the legal drinking age in your location.

1. Data We Collect

You can play ZIPPER without creating an account. Creating an account is optional and unlocks the social features (a profile, friends, and sharing photos with friends). Here is what the App collects in each case.

a) Anonymous identity (everyone)

When you open the App, it creates an anonymous user ID (via Supabase Authentication) so your games and photos can be stored and kept private to you. It is a random identifier and contains no name, email or phone number. If our servers ask for it, a bot check (Cloudflare Turnstile) runs before this ID is created.

b) Account information (only if you sign up)

If you create an account, we store:

• Email address: if you sign up with email and password. Your password is handled by Supabase Authentication and is never visible to us.
• Google account email and identifier: if you sign up or sign in with Google. We do not receive your Google password or contacts.
• Username (required), and optionally a profile photo and a bio.

Creating an account upgrades your existing anonymous ID in place, so the games and photos already on your device stay yours.

c) Gameplay data

To run the game, show you your history, and improve card balance, we store:

• Session data: player count, selected game mode and intensity, deck size, and the date of the game.
• Card events: which cards were shown, in what order, and their outcome (played, skipped, won, lost), identified by internal card ID and type.
• Game results: the player names typed in at setup, final scores, win/loss counts, zip (drink) counts and awards.
• Account links: if you mark a seat as yourself, or link a seat to a friend's account, that seat's results are linked to that account so they appear in its stats.

Player names are whatever is typed into the App. They are not verified. Don't enter anyone's full legal name if you'd rather not have it stored.

d) Photos (camera)

During a game you can take photos with the in-app camera. The App asks for camera permission the first time you open it; you can decline and keep playing. Each photo you keep is saved on your device and uploaded to our storage together with the date and the text of the card it was taken on. Profile photos you choose from your photo library are uploaded the same way. The App only accesses the single photo you pick; it never scans your library.

e) Friends, likes, blocks and reports

If you have an account, we store your friend requests and friendships, likes you give on photos, users you block, and reports you file about other users (including the reason you give).

f) Microphone access (Music cards only)

Music cards use Apple's ShazamKit to identify the song playing in the room. This requires microphone access, which iOS asks for the first time a Music card comes up, you can decline, and the card falls back to deciding manually. The audio is processed on-device and by Apple's ShazamKit service; we never receive, record or store it. After a match, the App looks up track details (album art, release info) from Apple's iTunes API. Outside of Music cards the App never uses the microphone.

g) Purchases

Subscriptions are billed by Apple. RevenueCat tells the App whether you have an active subscription, using an anonymous purchase identifier. We never see or store your payment details.

h) Stored only on your device

Your in-progress game, your last list of player names, your recent searches and your language choice are saved on your device only.

i) What we do NOT collect

• No location data
• No contacts or address book
• No advertising identifiers, and no tracking across other apps or websites
• No third-party advertising or analytics SDKs (no Facebook SDK, Google Analytics, AdMob, etc.)
• No payment card data

2. Who Can See Your Data

• Your profile (username, profile photo, bio) is visible to other users with an account, so friends can find you in search.
• Your photos: if you have an account, photos are shared with your accepted friends by default, together with their caption and likes. Switch on Private when taking a photo to keep it visible only to you. Without an account, your photos are visible only to you. Blocking someone hides your photos from them and theirs from you.
• Your scores and game history are visible only to you (and, for a game you hosted or played in, to the accounts linked to that game). Friends cannot see your stats.
• Friends' photos stay theirs: nothing in the App lets another user download or re-share your photos.
• Reports are visible only to us, and are used to enforce our Terms of Use.

These rules are enforced on our servers (Supabase Row Level Security), not just hidden in the App.

3. How We Use This Data

We use the data described above to:

• Run the game (deck generation, scoring, save and resume)
• Provide your account, profile, friends, photo sharing and game history
• Review reports and remove content or users that break our Terms
• Understand which cards, modes and intensities are popular, to improve the game
• Diagnose bugs

We do not sell your data. We do not use it for advertising or share it with data brokers.

4. Where Data Is Stored

Account, gameplay and photo data are stored with Supabase (a hosted database and file storage provider). Photos are kept in private storage and are only served to users allowed to see them under section 2.

5. Third-Party Services

We do not use any advertising or cross-app tracking SDKs, so ZIPPER does not ask for App Tracking Transparency permission.

6. Data Retention & Deletion

Deleting your account in the App

You can delete your account at any time in Settings → Delete account. This permanently deletes:

• your account and sign-in details (email / Google link)
• your profile (username, profile photo, bio)
• your photos and the likes you gave
• your friendships and blocks
• reports filed about you

Some data is anonymised rather than deleted, because it also belongs to other people:

• Game results stay in the history of the other players at that table, with the link to your account removed.
• Reports you filed about other users are kept so they can still be reviewed, with your identity removed.

Once your account is deleted, your photo and profile-photo files can no longer be accessed by anyone through the App. To have the stored files themselves permanently erased, email privacy@zipperpartygame.com and we will do so within 30 days.

Without an account

Gameplay data is kept to inform game balance. To have the data linked to your anonymous ID deleted, contact us at privacy@zipperpartygame.com. Data stored only on your device is removed when you delete the App.

7. Children's Privacy

ZIPPER is not directed at, and must not be used by, anyone under the legal drinking age in their jurisdiction. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.

8. Changes to This Policy

We may update this policy as the App evolves. Material changes will be reflected in the "Last updated" date above, and significant changes will be noted in the App Store release notes.

9. Contact

Questions about this policy or your data: privacy@zipperpartygame.com

To report a user or content in the App: info@zipperpartygame.com