Privacy Policy

1. Controller

UAB Okursa, company code 305060538, VAT number LT100012266115, registered at Metalo g. 2, LT-02190 Vilnius, Lithuania, is the controller of personal data processed through https://hoops.online. Privacy enquiries may be sent to privacy@hoops.online.

2. Data we process

• Account and identity data: internal account ID, email where supplied, login provider identifier, username, represented country and account status.
• Session and security data: opaque session identifiers, issue and expiry times, revocation history, device class, security events, IP-derived request information and abuse-prevention signals.
• Game data: draft choices, completed runs, results, ratings, leaderboard positions, quiz results, ranked history and progression.
• Social data: friend relationships, invitations, notifications, lobby messages, reports, blocks and moderation records.
• Support data: contact details, message contents, account references and the history needed to resolve a request.
• Browser storage choices: necessary local saves, age-eligibility confirmation and optional analytics, advertising or personalization preferences.

3. Why we process data

• To provide the requested account, simulation, leaderboard, social and support services.
• To secure sessions, prevent abuse, enforce fair play and protect other users.
• To comply with legal duties and respond to valid rights or safety requests.
• To improve reliability and performance using minimized operational information.
• To operate optional analytics or advertising only when the required choice or other valid legal basis exists.

4. Legal bases

Depending on the activity, processing is based on performance of the user agreement, legitimate interests in security and service operation, compliance with legal obligations, or consent for optional technologies. A consent choice may be withdrawn at any time without affecting earlier lawful processing.

5. Recipients and processors

Data is disclosed only where needed to operate the service, comply with law or protect users. Planned service categories include Cloudflare hosting and security, transactional email, approved authentication providers, support tools, and Google advertising only after the required launch controls are active.

We do not sell personal data. Every processor that handles personal data for the operator must be covered by appropriate contractual and security terms.

6. International transfers

Where personal data is transferred outside the European Economic Area, the operator uses an applicable adequacy decision, standard contractual clauses or another lawful transfer mechanism together with required safeguards.

7. Retention

• Active account and profile data is kept while the account is active and during a documented deletion or dispute period.
• Revoked and expired session material is removed by scheduled security retention rules.
• Operational and abuse-prevention logs are retained only for the documented period required for security, investigation and legal duties.
• Leaderboard and game records are retained under the published competition-history rule, then deleted or anonymized where appropriate.
• Support and legal request records are retained for the period needed to resolve and evidence the request.

8. Rights

Depending on location, users may have rights to information, access, correction, portability, deletion, restriction, objection and withdrawal of consent. The Account privacy area and Contact page provide routes to exercise these rights. Identity may be verified before a request is completed.

EU users may complain to the Lithuanian State Data Protection Inspectorate or their local supervisory authority.

9. Age

HOOPS.ONLINE is not directed at children and accounts are limited to users aged 16 or older. We do not knowingly operate accounts for younger users at launch. A parent or guardian who believes a younger person's data was provided should contact privacy@hoops.online.

10. Security and changes

We use technical and organizational safeguards including secure session cookies, access controls, rate limits, minimized logs and tested revocation paths. No online service can guarantee absolute security.

Material Privacy Policy changes will receive a new version and effective date. Users will be informed at the appropriate time and asked for a new choice only where the law requires one.