What we do with your information.

If you join the waitlist

Briskage has not launched yet, so the only thing most people give us is an email address typed into the waitlist form. We store that address and which page you submitted it from — nothing else. We do not ask for your name, your company, or the size of your team.

We use it for one thing: to tell you when Briskage is ready. We will not add you to a marketing list and we will not pass it to anyone else to market to you. Our lawful basis is your consent, which you gave by entering the address and can withdraw at any time by emailing us — we treat that as a request to delete.

If you host a session

To create sessions you need an account, which is your email address and nothing more. There is no password: we email you a six-digit code to sign in. To keep you signed in between pages we set cookies on your browser. Those cookies exist only to hold your session — there is no analytics cookie, no advertising cookie, and nothing that follows you to other sites.

If you subscribe to a paid plan, your card details go straight to Stripe and we never see or store them. What we hold is a Stripe customer reference, your plan, your billing period and whether the subscription is active. Our lawful basis for your account and billing is performance of our contract with you, and for keeping payment records, our legal obligations.

If you play in a session

Players do not have accounts and we do not ask for your email address. You type a game code and a name, up to 24 characters, and that name is what we store, along with the team you are put on, your scores, and what you did during the games — taps, holds, and so on — so the leaderboard works.

Your name and your scores are shown to everyone else in that session, on the host’s shared screen and on other players’ phones. They are not private and should not be treated as confidential. Whatever you type is what your colleagues will see.

We do not set cookies for players. Your browser stores an identifier for the session so a refresh does not knock you out of the game; it is specific to that session and is not used to recognise you anywhere else. Our lawful basis is our legitimate interest, and the host’s, in running the session you were invited to.

What is collected automatically

We would rather say this than imply nothing happens. Our hosting provider, Vercel, keeps standard server logs of requests, which include your IP address, the page you asked for and your browser type. That is ordinary web-server operation, and we rely on our legitimate interest in keeping the service running and secure.

Beyond that, there is no analytics, no advertising pixel, no session recording and no third-party script of any kind. Our fonts are served from our own domain rather than loaded from Google. We are not tracking you between pages or between visits, and we cannot build a profile of you. Briskage carries no adverts on any plan, including the free one, and that is not going to change.

Who else sees it

Four companies process information for us, and only to provide their part of the service: Supabase (our database, host sign-in and the live connection during a game), Stripe (payments), Resend (sending your sign-in code and payment receipts), and Vercel (hosting). We do not sell your information, and we do not share it with anyone for their own marketing.

If Orbll Ltd were ever involved in a merger, acquisition or sale of assets, your information could transfer as part of that. That is set out in the full Orbll policy.

How long we keep it

Waitlist addresses: until Briskage has launched and you have been told, or until you ask us to delete yours, whichever comes first.

Account and billing information: while your account is open, and afterwards only for as long as tax and accounting law requires us to keep payment records.

Session information — names, teams and scores: while the account that ran the session is open, so hosts can look back at past sessions. Ask us and we will delete it sooner.

Your rights

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to us using it at all. You can also withdraw your consent. Email legal@orbll.com and we will action it. There is no charge, and you do not need to give a reason.

If you played in a session and want your name and scores removed, email us with the game code and the name you used and we will remove them.

If you are unhappy with how we have handled your information you can complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk. If you are in the EEA you can complain to your own national data protection authority instead.

Age

Briskage is made for workplace teams and is not intended for anyone under 18. We do not knowingly collect information from children. If you believe we have, email legal@orbll.com and we will delete it.

Who we are

The data controller is Orbll Ltd, a company registered in England and Wales, company number 16870400, with its registered office at 79 Gerard Avenue, Benson, Wallingford, England, OX10 6GD. You can reach us about anything on this page at legal@orbll.com.

Changes

If we change this notice we will update the date at the top of the page. If a change materially affects how we use your information, we will tell you rather than rely on you noticing.