Privacy Policy

Decider is operated by Nightwave, which acts as the data controller for the personal data described in this policy. If you have any questions about how your data is handled, you can reach us at kontakt@nightwave.se. By using the service or creating an account, you accept this privacy policy and the terms of use.

We collect information that you provide directly to us, such as your email address when you create an account, and the details you add when you use the service. We also collect limited information automatically, such as device and browser information, that helps us operate and secure the service.

If you sign in through a third-party provider such as Google, we receive the account information that you choose to share with us through that provider, typically your name and email address. We do not access or store your contacts, messages or other data held by that provider.

We do not collect more data than is necessary to provide and maintain the service.

We use the information we collect to:

• provide, operate and improve the service;
• communicate with you about your account and the service;
• keep the service secure and prevent abuse;
• meet our legal and regulatory obligations.

We do not use your personal data to profile you for advertising, and we do not sell it.

Where the law requires us to identify a basis for processing personal data, we rely on the performance of a contract, our legitimate interests in operating and protecting the service, your consent where you actively choose to enable a feature, and our compliance with legal obligations.

Decider does not use advertising or tracking cookies, and nothing we store is shared with an advertising network. We use browser storage for two things: keeping the service working, such as keeping you signed in, and holding the anonymous identifiers described under product analytics below. You can clear this data at any time through your browser settings.

To understand how the service is actually used, and to find the parts of it that confuse people, we record anonymous interaction data: which pages were opened, how far down them you scrolled, how long the page was in front of you, and where on the page you clicked. A click is stored as a position and a technical reference to the element you hit, such asmain>section>a.

We do not record the contents of the page. No text, no meeting titles, no participant names, no form or input values, and no screen recordings are collected, so this data cannot be used to reconstruct what a poll said or who was on it. It is tied to a random identifier stored in your browser, not to your name or email address, and it is deleted after 90 days.

If your browser sends a Do Not Track or Global Privacy Control signal, we collect none of this. We rely on our legitimate interest in understanding and improving the service as the basis for this processing, and you can object to it at any time by contacting us.

We do not sell or rent your personal data. We share information with service providers who help us operate the service, such as hosting and infrastructure providers, acting as processors on our behalf. They may only use your data to provide services to us and are bound by appropriate confidentiality and security obligations.

We may also disclose information where required by law, or where necessary to investigate or prevent abuse of the service and to protect the rights and safety of our users.

Some of our service providers may process data outside the country where you live, including outside the EU or UK. Where this happens, we rely on recognised safeguards such as standard contractual clauses to ensure your data is protected to a comparable standard.

We keep personal data only for as long as is necessary for the purposes described in this policy, or for as long as we are required to keep it by law. Content that has been inactive for 90 days is deleted automatically, and you may request deletion of your account and associated data at any time.

We take reasonable measures to protect personal data against unauthorised access, alteration and loss. Access to personal data is limited to authorised staff who need it to operate and support the service, and is logged for review. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We may remove content and suspend or terminate accounts where we reasonably believe our terms of use have been breached, where content is unlawful, abusive or harmful, or where required by law. Where appropriate, we will inform you of the reason and give you an opportunity to respond.

The service is intended for users aged 16 or over and is not directed at children below that age. If we become aware that we hold personal data relating to a younger child, we will delete it.

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. You can exercise these rights by contacting us at kontakt@nightwave.se. We aim to respond to requests within one month. If you are unhappy with how we handle a request, you may complain to your national data protection authority.

We may update this policy from time to time. The date at the top of this page reflects the latest revision. Continued use of the service after a change indicates your acceptance of the updated policy.

If you have any questions about this policy or your personal data, contact us at kontakt@nightwave.se.