Privacy Policy
Last updated: March 11, 2026
Data Controller
The data controller responsible for your personal data is:
Data We Collect
Depending on how you use BINGU, we may collect the following data:
When creating an account:
- Name
- Email address
- Password (stored in encrypted form, never in plain text)
When signing in with Google:
- Name associated with your Google account
- Email from your Google account
- Profile picture (public URL provided by Google)
When using the service:
- Game preferences (visual theme, language, speed)
- Custom logo (if uploaded, only on plans that include it)
- Subscription data (plan type, start and expiration dates)
Browsing data (automatic):
- IP address (anonymized by Google Analytics)
- Browser type and device
- Pages visited and time spent
- Technical and analytics cookies
Purpose of Data Processing
We use your data for the following purposes:
- Manage your account: create and maintain your user profile, authentication and session security.
- Provide the service: allow you to configure and play bingo games, save your preferences and generate bingo cards.
- Process payments: manage subscriptions through Stripe (we do not store card data).
- Improve the platform: analyze site usage through Google Analytics to understand how it is used and improve the experience.
- Communications: respond to your inquiries sent by email.
Legal Basis for Processing
- Consent: by registering you accept the processing of your data to manage your account.
- Performance of a contract: processing is necessary to provide the contracted service (subscriptions and premium features).
- Legitimate interest: statistical analysis of website usage to improve the service.
Google Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to understand how users interact with our site.
Google Analytics uses cookies to collect information such as:
- Pages visited and duration of visit
- Traffic source (how you arrived at the site)
- Device type, browser and operating system
- Approximate geographic location (based on anonymized IP)
The IP address is anonymized before being stored by Google. The data collected is statistical and does not allow you to be personally identified.
You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
More information: Google Privacy Policy.
Payments with Stripe
Subscription payments are processed through Stripe, Inc., a payment services provider. Stripe acts as a data processor for payment data.
BINGU does not store, access or process credit or debit card data. All payment information is handled directly on Stripe's secure servers, which comply with the PCI DSS standard.
Data that Stripe may collect includes:
- Card number, expiration date and CVV (processed by Stripe, not by us)
- Cardholder name
- Billing address
More information: Stripe Privacy Policy.
Google Sign-In
If you choose to sign in with Google, we will only receive from your Google account:
- Your name
- Your email address
- Your profile picture URL
We do not access your Google password, contacts, files or any other data from your account. We only use this information to create or link your BINGU account.
More information: Google Privacy Policy.
Cookies
BINGU uses cookies for the operation of the site:
- Session cookies (technical): necessary to keep your session active while browsing. They are deleted when you close the browser.
- Preference cookies: store your language and favorite theme so you don't have to choose them every time.
- Google Analytics cookies (_ga, _gid): analytics cookies that collect usage statistics. Duration: up to 2 years (_ga) and 24 hours (_gid).
You can manage or delete cookies from your browser settings. Please note that disabling technical cookies may affect the functioning of the site.
Data Retention
We retain your personal data as long as your account is active and necessary to provide you the service.
- Account data: as long as you maintain an active account. If you request deletion, it will be removed within a maximum of 30 days.
- Subscription data: during the subscription period and up to 12 months after expiration, for legal and tax obligations.
- Browsing data (Analytics): according to Google's retention policies (14 months by default).
International Transfers
Some of the services we use (Google and Stripe) are based in the United States. Data transfers to these providers are carried out under the following safeguards:
- Google LLC: adheres to the EU-US Data Privacy Framework, which ensures an adequate level of data protection as determined by the European Commission.
- Stripe, Inc.: adheres to the EU-US Data Privacy Framework and applies standard contractual clauses approved by the European Commission.
Security
We implement technical and organizational measures to protect your personal data:
- Encrypted connection via HTTPS/TLS across the entire site.
- Passwords stored with secure hashing (never in plain text).
- Payment data handled entirely by Stripe (PCI DSS certified).
- Restricted access to the database and administration systems.
Minors
BINGU is an entertainment service with no gambling or monetary prizes. However, the use of the platform and account creation require a minimum age of 14 years, in accordance with the Spanish Data Protection Act (LOPDGDD).
If you are under 14, you need the consent of your parent or legal guardian to use this service. If we detect that a minor under 14 has created an account without authorization, we will proceed to delete it.
Changes to This Policy
We reserve the right to update this Privacy Policy to reflect changes in our practices or applicable legislation. Any changes will be published on this page with the revised update date.
If the changes are significant, we will inform registered users by email.
Your Rights
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
- Access: request a copy of the personal data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure: request the deletion of your data (right to be forgotten). You can also delete your account directly from the Settings section.
- Portability: receive your data in a structured, commonly used format.
- Objection: object to the processing of your data in certain circumstances.
- Restriction: request that the processing of your data be restricted.
To exercise any of these rights, send an email to bingu@protonmail.com indicating the right you wish to exercise. We will respond within a maximum of 30 days.
If you believe your rights have not been properly addressed, you may file a complaint with the Spanish Data Protection Agency (AEPD).
Contact
If you have any questions about this Privacy Policy or about the processing of your data, you can contact us at:
Email: bingu@protonmail.com