Team Liquid Cafe App — Privacy Policy

Key Points

1. We collect your account info, usage data, device info, and location when you use the App
2. We use your data to run the App, improve it, and keep it safe
3. We do not sell your personal data
4. You can access, correct, or delete your data at any time
5. Contact privacy@teamliquid.cafe with any privacy questions

This summary is for convenience only; the full policy below is what applies.

This Privacy Policy explains what personal data we collect when you use the Team Liquid Cafe App, how we use it, your rights, and who to contact with questions. It applies to all personal data collected by Friendly Fire, Inc. through the App, our website at teamliquid.cafe, and related digital services.

1. Data Controller

The data controller for personal data collected through the App is Friendly Fire, Inc., a corporation incorporated in Delaware, USA, with its principal office in Zagreb, Croatia.

General contact: info@teamliquid.cafe

2. Privacy Contact

For privacy inquiries, contact David Kosir at privacy@teamliquid.cafe.

3. Data We Collect

We collect and process the following categories of personal data:

• Account information — your name, email address, date of birth, and profile information provided during registration or received from your social login provider (Google, Apple, Instagram, TikTok, Discord)
• Phone number — verified with a one-time code sent by text message or a messaging app
• Identity check — when staff at a venue's front desk check your official ID, we record your full name, date of birth, and address as confirmed. We do not keep a copy or photo of your ID
• Usage data — how you interact with the App, including features used, pages visited, check-in history, and event registrations
• Device and log data — device type, operating system, app version, IP address, and crash reports
• Location data — approximate location used for venue check-in and to show you relevant venues and events (we do not track your location in the background)
• Messages and social content — text messages and posts you create in the App (temporary by design — see the App's Terms and Conditions)
• Cookies and similar technologies — used on our website for functionality and analytics (see Cookies below)
• Parent/guardian contact information — a parent or guardian's name and email address collected when parental consent is required for a minor's account, used to verify and record that consent

We do not sell your personal data.

4. How We Use Your Data

We use your data for the following purposes, each paired with the legal basis we rely on:

Our legitimate interests include: improving the reliability and performance of the App, preventing fraud and unauthorized access, enforcing our community standards, and funding the App's free operation through contextual advertising. We balance these interests against your privacy rights.

5. Third-Party Services

We use the following third-party services to operate the App:

• Firebase (Google) — push notifications, app infrastructure, and authentication support
• Google Analytics — usage analytics to understand how the App is used and improve it
• AI/LLM services — large language models used for automated content moderation
• Social login providers (Google, Apple, Instagram, TikTok, Discord) — authentication and profile data
• Cloud hosting and email delivery — storing App data and sending account emails
• Text message and messaging services — sending verification codes to your phone
• Push notification services (Apple and Google) — delivering notifications to your device
• Email and office software — handling the emails you send us

Each third-party service has its own privacy policy. We encourage you to review them. We only share the minimum data necessary for each service to function.

6. Who We Share Data With

We may share personal data with the following categories of recipients:

• Franchisee venues — when you check in at a venue, we share your account information with that venue's operator as necessary to provide the check-in and booking features you use. Each venue operator is an independent data controller for the data they process about your visit.
• Franchise management partners — master franchisees, area developers, and similar entities who provide local franchise management and oversight services on our behalf, acting as our data processors under GDPR Art. 28
• Third-party service providers — as listed above, for app operation and analytics
• Law enforcement and courts — where required by law or to respond to a valid legal request
• Professional advisors — accountants or legal counsel, where necessary for compliance or dispute resolution

We do not sell your personal data.

7. International Data Transfers

Friendly Fire, Inc. is incorporated in the United States. Your data is stored on Amazon Web Services (AWS) infrastructure in the region closest to you, which means your data is typically stored in your geographic region.

For users in the European Economic Area (EEA): some of your data may be processed in the United States for app operations. Such transfers are carried out under Standard Contractual Clauses (Art. 46(2)(c) GDPR) or other appropriate safeguards as required by GDPR Chapter V.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary for the purposes described above:

• Account data — for the duration of your account. Your account is deleted 30 days after you ask us to delete it (see Deleting your account below). Copies in our backups are overwritten within a further 30 days. Records the law requires us to keep, such as purchase and tax records, are kept without your account details
• Usage and analytics data — aggregated and anonymized within 90 days; anonymized data is no longer personal data
• Device and log data — retained for 180 days for security analysis and troubleshooting, then deleted
• Location data — deleted after your check-in session ends; aggregated location trends retained for analytics
• Data shared with franchisee venues — subject to the franchisee's own data retention policy; see the venue's privacy notice for details
• Messages and social content — temporary by design; automatically deleted per the App's content lifecycle
• Parent/guardian contact data — retained for the duration of the minor's account plus 90 days after account closure or consent withdrawal
• Unapproved minor accounts — if a parent or guardian does not approve the account within 14 days, the account and its data are deleted
• Legal records — retained as long as required by applicable law (tax, accounting, legal proceedings)

Deleting your account

You can delete your account at any time in the App's account settings, or by writing to privacy@teamliquid.cafe from the email address on your account. Your account is deleted 30 days after your request. If you sign in again during that time, the deletion is cancelled. After deletion, your profile, gamer tag, and personal data are removed, except the records described above that the law requires us to keep.

9. Your Rights

You have the following rights regarding your personal data:

• Right of access — obtain confirmation of whether your data is being processed and receive a copy
• Right to rectification — have inaccurate personal data corrected
• Right to erasure — request deletion of your personal data, subject to legal retention requirements
• Right to restriction — request that we limit processing in certain circumstances
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on our legitimate interest. If you object to processing for direct marketing purposes (including advertising), we will stop immediately — no balancing test applies
• Right to withdraw consent — where we process data based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, contact privacy@teamliquid.cafe. We will respond within one month. In complex cases, we may extend this by up to two additional months, but we will inform you within the first month.

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority.

10. Children's Privacy

There is no minimum age to create a Team Liquid Cafe App account. However, a new account has no features enabled by default — you cannot use the App's services until your age is confirmed.

To access the App's features (loyalty program, check-in, booking, messaging, and social features), you must confirm your age. In the United States, parental consent is required if you are under 13. In the European Union and most other regions, parental consent is required if you are under 16 (or a lower age set by your country's law). The App will display the threshold that applies to your location when you create your account.

When parental consent is required, we will email the parent or guardian's address you provide during registration. To give consent, the parent must open that email, visit our consent portal, verify their identity, and approve. Features will not be available until the parent completes this step. If consent is not received within 14 days, the account and its data will be deleted.

Children's Privacy (United States): For users in the United States under the age of 13, we comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we learn that we have collected data from a child under 13 without proper consent, we will delete that data promptly. Parents can contact us at privacy@teamliquid.cafe to review, delete, or withdraw consent for their child's data.

What data we collect from children: When a minor's account requires parental consent, we collect only the information necessary to create the account (name, email, date of birth) and the parent or guardian's contact information to obtain consent. The minor's account has no features enabled until the parent completes the consent process. Once consent is granted, the minor's data is processed in the same way as any other user's data, as described in this policy.

11. Cookies

Our website (teamliquid.cafe) uses cookies and similar technologies. The native App does not use cookies.

We ask for your consent before setting non-essential cookies, including analytics cookies. You can change your cookie preferences at any time through the cookie banner on our website.

12. Data Breach Notification

If we become aware of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you without undue delay, as required by GDPR Art. 34. We will also report the breach to the relevant supervisory authority within 72 hours where required by GDPR Art. 33.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and through the App at least 30 days before the changes take effect. If you do not agree with the updated policy, you may delete your account. If you continue to use the App after the changes take effect, the updated policy applies to your use.

14. Contact

If you have questions about this Privacy Policy, contact our privacy team at privacy@teamliquid.cafe.

For general inquiries, contact us at info@teamliquid.cafe.