Who operates Paranoia
Paranoia is the controller for the online account, multiplayer, purchase-verification and safety data described here. We operate from England and Wales. Contact support@paranoiagame.app for privacy requests or postal contact details.
What we process
Online play requires Game Center. Apple supplies a signed team player identifier; we verify it, immediately transform it with a keyed one-way hash, and do not retain the raw identifier. We issue an internal account ID and App Account Token.
We process player display names, room membership, consent choices, reports, blocks, enforcement facts, and App Store transaction identifiers needed to verify non-consumable purchases. For notifications, we process a random installation ID, an encrypted Apple Push Notification service token, its one-way fingerprint, app version and build, device family, locale, time zone, notification preferences, and delivery/read/open status. An installation is linked to an online account only after Game Center authentication. We also process hashed network addresses and redacted security events to prevent abuse. We do not sell personal data, use advertising identifiers or track people across apps or websites.
Live rooms
Authoritative room state, hashed resume tokens, command receipts and host-reviewed custom room content are held temporarily so a room can recover safely after a disconnect or service restart. Rooms expire after no more than four hours.
Secret bundled content is represented by content ID wherever possible and question text is not copied into ordinary logs. A reported item may be copied into encrypted moderation evidence.
Why we process data
We use account and room data to perform the online service contract; purchase records to perform that contract and meet tax, accounting, fraud-prevention and legal obligations; and safety reports, blocks and security records for our legitimate interests in protecting players and the service. Notification installation and interaction data lets us deliver enabled live-game, account, game-night and return reminders, diagnose delivery, and record whether an inbox message was read or opened. If you separately enable News & New Content, we may also use account, device, purchase and interaction data to select, deliver and measure first-party product, content or offer announcements. News is off by default and can be withdrawn at any time. We rely on consent where the law requires it.
We do not make decisions with legal or similarly significant effects using solely automated processing.
Retention
- Game Center account and purchase ledger: while the account is active. After deletion, purchase facts may remain pseudonymously for up to six years for refunds, fraud prevention and legal records.
- App Store notification metadata: 180 days. Raw signed payloads are not stored.
- Notification messages: until their expiry or 90 days, whichever comes first. Completed, cancelled or failed campaign summaries: 180 days.
- Notification installations: while active and seen within the last 180 days. Disabled or invalid installations are deleted within 30 days; any installation not seen for 180 days is deleted automatically.
- Resolved or dismissed moderation evidence: 30 days. Open or reviewing evidence: 90 days. Formally escalated evidence remains until explicitly resolved, then the 30-day period applies.
- Security audit events: 14 days. Redacted operational logs: 7 days. Sent moderation outbox records: 30 days.
- Live rooms and unreported custom content: no more than four hours.
Security and sharing
Moderation evidence and Apple push tokens are protected with authenticated encryption. Administrative access requires a username, a strong password and an expiring verification code delivered by email. Sessions are revocable and sensitive actions are recorded in a security audit trail. We use Apple for Game Center, App Store and push-notification services and infrastructure and mail providers acting on our instructions. We may disclose data where law requires it or to protect people from credible harm.
International services
Apple and infrastructure providers may process data outside the UK. Where required, we rely on an adequacy decision or approved contractual safeguards. Contact support for information about the safeguard relevant to your request.
Your rights
Depending on your location, you may ask for access, correction, deletion, restriction or portability, object to processing, or withdraw consent where consent applies. You may complain to the UK Information Commissioner. Review your options on the Privacy Choices page. Account deletion is available in the app and through our account deletion instructions.
Children, cookies and tracking
Paranoia is intended only for adults aged 18 or over. This website does not use advertising cookies, analytics cookies or cross-site tracking.