Who operates Paranoia
Paranoia is the controller for the online account, multiplayer, purchase-verification and safety data described here. We operate from England and Wales. Contact support@paranoiagame.app for privacy requests or postal contact details.
What we process
Online play requires Game Center. Apple supplies a signed team player identifier; we verify it, immediately transform it with a keyed one-way hash, and do not retain the raw identifier. We issue an internal account ID and App Account Token.
We process player display names, room membership, consent choices, reports, blocks, enforcement facts, and App Store transaction identifiers needed to verify non-consumable purchases. We do not sell personal data or use it for advertising.
Live rooms
Authoritative room state, hashed resume tokens, command receipts and host-reviewed custom room content are held temporarily so a room can recover safely after a disconnect or service restart. Rooms expire after no more than four hours.
Secret bundled content is represented by content ID wherever possible and question text is not copied into ordinary logs. A reported item may be copied into encrypted moderation evidence.
Why we process data
We use account and room data to perform the online service contract; purchase records to perform that contract and meet tax, accounting, fraud-prevention and legal obligations; and safety reports, blocks and security records for our legitimate interests in protecting players and the service. We rely on consent where the law requires it.
We do not make decisions with legal or similarly significant effects using solely automated processing.
Retention
- Game Center account and purchase ledger: while the account is active. After deletion, purchase facts may remain pseudonymously for up to six years for refunds, fraud prevention and legal records.
- App Store notification metadata: 180 days. Raw signed payloads are not stored.
- Resolved or dismissed moderation evidence: 30 days. Open or reviewing evidence: 90 days. Formally escalated evidence remains until explicitly resolved, then the 30-day period applies.
- Security audit events: 14 days. Redacted operational logs: 7 days. Sent moderation outbox records: 30 days.
- Live rooms and unreported custom content: no more than four hours.
Security and sharing
Moderation evidence is protected with authenticated encryption. Administrative access requires a username, a strong password and an expiring verification code delivered by email. Sessions are revocable and sensitive actions are recorded in a security audit trail. We use Apple for Game Center and App Store services and infrastructure and mail providers acting on our instructions. We may disclose data where law requires it or to protect people from credible harm.
International services
Apple and infrastructure providers may process data outside the UK. Where required, we rely on an adequacy decision or approved contractual safeguards. Contact support for information about the safeguard relevant to your request.
Your rights
Depending on your location, you may ask for access, correction, deletion, restriction or portability, object to processing, or withdraw consent where consent applies. You may complain to the UK Information Commissioner. Review your options on the Privacy Choices page. Account deletion is available in the app and through our account deletion instructions.
Children, cookies and tracking
Paranoia is intended only for adults aged 18 or over. This website does not use advertising cookies, analytics cookies or cross-site tracking.