Privacy Policy

Last updated: July 2026

This policy explains how Nightcap Bingo handles personal information. It's written to be clear and honest. [Operator: replace the bracketed placeholders below — your legal/company name, contact email, and governing law — and have it reviewed before going live.]

Nightcap Bingo (“we”, “the Service”) is an interactive bingo game that venues (bars, restaurants) run for their patrons. This policy covers two groups: venue owners who create accounts, and patrons who play and may opt in to a venue's email list.

What we collect

Venue owner accounts: your email address and a password. Passwords are stored only as a salted scrypt hash — we never store or see your actual password.
Patron opt-ins (only with consent): if a patron wins and chooses to join a venue's list, we store the name they enter and their email address, plus a record that they ticked the consent box and when. Patrons who don't opt in are not asked for any personal details.
Gameplay: a temporary display name/team name a patron types to play, and their bingo card — held in memory during the game. No patron accounts, no passwords for patrons.
Cookies: one first-party, HttpOnly session cookie for logged-in venue owners so they stay signed in. No advertising or third-party tracking cookies.
We do not collect payment card numbers in the game, track location, or buy data about you.

How we use it

Venue owner emails are used to sign you in and to contact you about your account and the Service.
Patron opt-in emails are used only to add the patron to that venue's winners leaderboard and to let that venue send its own bingo-night reminders and specials — nothing else.
A patron's opt-in belongs to the venue that collected it. We do not mix or share opt-ins across venues.

We never sell your data

We do not sell, rent, or trade personal information to anyone. Ever.

Who can see what

The winners leaderboard (first name/display name + number of wins) is shown publicly on the venue's TV and leaderboard page. Opting in means your chosen name may appear there.
The email list is private. Only the logged-in owner of that specific venue account can view or export it. Access requires signing in; there is no public link to it.

Your choices

Unsubscribe from a venue's emails at any time (each venue is responsible for honoring opt-outs in the emails it sends).
Access or delete your information: patrons can contact the venue or us; venue owners can contact us to delete their account and its data.

Retention

Prize redemption codes expire automatically (14 days by default). Opt-in records are kept until the patron unsubscribes or the venue/we remove them. Owner accounts are kept until deletion is requested.

Security

The Service is served over HTTPS. Owner passwords are hashed with a per-account salt. Private data (the email list) is gated behind owner login. No system is perfectly secure, but we aim to follow sensible, current practices.

Children

Nightcap Bingo is intended for venues serving an adult clientele and is not directed to children.

Contact

Questions or requests: [your-contact-email@your-domain]. Data controller for owner accounts: Right Click Forbidden LLC. For patron data, the venue that collected it is the controller of its own list.

Changes

We may update this policy; we'll change the “Last updated” date above. Governing law: [your jurisdiction].