Privacy policy
Privacy Policy for Truth or Play
Your privacy is an important priority for us. This Privacy Policy explains the information we collect and how we use it. Let us know if you have questions by emailing us at team@truthorplaythegame.com. By using this site and/or any of our Services, as defined below, you agree to this Privacy Policy and to our Terms of Use, which incorporate this Privacy Policy.
1. Introduction
This Privacy Policy describes the types of personal data collected or processed when you interact with Play is the Portal LLC and Truth or Play LLC. It also explains how your personal data is collected—whether provided directly by you or obtained automatically through your interactions—as well as how it is used to provide and improve our services. Additionally, this policy outlines how your data may be shared with trusted third parties, the security measures we use to protect it, your rights regarding access, correction, or deletion of your data, and how you can contact us with questions or concerns.
For purposes of this Privacy Policy, “Truth or Play” refers to our card game and any related services, programs, or digital offerings, which are provided by Truth or Play LLC, a subsidiary of Play is the Portal LLC. References to “we,” “us,” and “our” refer collectively to Play is the Portal LLC and Truth or Play LLC, unless otherwise specified. This Privacy Policy applies to the Truth or Play website, online store, and any associated services where this policy is posted or referenced.
By using our services, visiting our website, or purchasing the Truth or Play card game, you acknowledge that you have read and understood this Privacy Policy.
2. What Personal Data We Collect
We collect data you provide directly, data from third-party partners, and data that is derived through automated methods. This includes, but is not limited to, the following categories:
a. Contact details
-
Your name, email address, mailing address, and telephone numbers.
-
Any other contact information you choose to provide when communicating with us.
b. Payment information
-
Card numbers or other payment details, which are collected via secure and compliant payment processing services (such as Shopify or other payment processors).
-
Billing information associated with your payment method.
c. Interactions with our digital properties
-
Usage and activities on our website, including IP address, browser type, browser language, operating system, device identifiers, timestamps, and device information.
-
Data collected through cookies, pixels, tags, web beacons, and similar technologies to better understand how you use our site and services.
d. Account-related data (if applicable)
-
If you create an account, we may collect login credentials (such as username and password), security questions, and preferences associated with your account.
-
Order history, saved addresses, and communication preferences connected to your account.
e. Marketing preferences and communication history
-
Your preferences for receiving promotional communications, newsletters, and alerts from us.
-
Records of your communications with us, including emails, support requests, and responses.
f. User-generated content
-
Content you submit to us, including product reviews, testimonials, photos, videos, or social media posts that tag or mention our products.
-
Any information you provide in surveys, feedback forms, or participation in campaigns.
g. Data from third-party partners
-
Information we receive from payment processors, shipping partners, marketing platforms, analytics providers, or social media networks, where permitted by their terms and by law.
-
Aggregated or anonymized data provided by third parties to help us better understand our customer base.
We will only collect and process personal data where we have a lawful basis and a relevant, clearly defined purpose.
3. Using Your Personal Data
We use your personal data to provide, improve, and develop our products and services; to communicate with you; and to comply with legal and security requirements. Specifically, we may use your data for the following purposes:
a. Providing and delivering products and services
-
Processing your orders and payments for the Truth or Play card game or related items.
-
Arranging shipping, delivery, and order tracking through our fulfillment and logistics partners.
-
Providing customer support, responding to inquiries, and resolving issues or complaints.
b. Improving and developing our offerings
-
Analyzing how you use our website and services to improve user experience, site design, and navigation.
-
Assessing the performance of marketing campaigns, promotions, and product offerings.
-
Identifying trends, preferences, and usage patterns to refine our products, including Truth or Play, and any future offerings.
c. Communications and marketing
-
Communicating with you regarding your orders, transactions, shipping, and account-related matters.
-
Sending you updates, newsletters, promotional offers, or marketing materials if you have opted in or where permitted by law.
-
Providing information about new products, special offers, events, or changes to our policies and terms.
d. Security, fraud prevention, and legal compliance
-
Detecting, preventing, and responding to actual or suspected fraud, misuse of our services, or other harmful activity.
-
Protecting the rights, property, and safety of our customers, users, staff, and the public.
-
Complying with applicable legal obligations, including tax, accounting, and regulatory requirements.
-
Enforcing our Terms of Use, Warranty, and other policies.
e. Personalization and preference management
-
Remembering your preferences and settings to enhance your experience on our website.
-
Providing personalized content, recommendations, or offers based on your use of our services, where permitted by law.
We will not use your personal data for purposes that are materially different from those described in this Privacy Policy without first informing you and, where required, obtaining your consent.
4. Sharing Your Personal Data
Play is the Portal LLC and Truth or Play LLC share your data only as necessary to operate our business, provide our services, and comply with legal requirements. We may share your data in the following ways:
a. Service providers and business partners
We may share your data with trusted third-party service providers who assist us in delivering and improving our products and services, including:
-
Payment processors and financial institutions that process your payments securely.
-
Shipping carriers, fulfillment centers, and logistics partners that handle delivery of the Truth or Play card game and other products.
-
Website hosting and infrastructure providers that support the operation of our site.
-
Customer support and communication platforms used to respond to your inquiries and manage contact forms.
-
Marketing, advertising, and analytics providers who help us understand website usage, support our promotional efforts, and measure campaign performance.
These providers are contractually obligated to handle your data securely and use it only for the specific purposes we specify.
b. Legal compliance and protection of rights
We may disclose your personal data when required by law or in response to valid legal processes, such as subpoenas, court orders, or government demands. We may also share information when we believe, in good faith, that disclosure is necessary to:
-
Comply with applicable laws and regulations.
-
Protect our rights, property, or safety, or that of our customers, users, or the public.
-
Investigate and defend against claims or allegations.
-
Prevent or address fraud, security, or technical issues.
c. Business transfers
In the event of a business transaction, such as a merger, acquisition, sale of assets, reorganization, or bankruptcy involving Play is the Portal LLC, Truth or Play LLC, or their assets, your personal data may be transferred as part of that transaction. In such cases, we will take reasonable steps to ensure that your personal data is treated consistently with this Privacy Policy and applicable law.
d. No sale of personal data
We do not sell your personal data to third parties for their own marketing or other purposes. All data shared with third parties is limited to what is necessary to fulfill the specific purpose for which it is provided, and we take reasonable measures to ensure that your information remains secure and protected.
5. Protection and Management of Your Personal Data
a. Encryption and security measures
We use a variety of security measures to maintain the safety of your personal data. These measures include, but are not limited to:
-
Secure servers and firewalls.
-
Encryption during transmission, where appropriate.
-
Access controls limiting personal data access to authorized personnel who are bound by confidentiality obligations.
-
Regular monitoring and review of systems for potential vulnerabilities and security issues.
While we strive to protect your personal data using commercially reasonable safeguards, no system is completely secure. We cannot guarantee absolute security, but we are committed to taking appropriate steps to reduce risks.
b. International transfers of data
Your personal data may be stored and processed in any country where we or our service providers have facilities. By engaging with us, you acknowledge that your data may be transferred outside of your country of residence, including to the United States, where data protection laws may differ from those in your jurisdiction.
We take steps to ensure that such transfers comply with applicable data protection laws and that appropriate safeguards—such as Standard Contractual Clauses or other approved mechanisms—are in place to protect your data.
6. Your Rights
You have a range of rights regarding your personal data, which we respect and are committed to upholding in compliance with applicable laws. Depending on your jurisdiction, these rights may include:
-
Right of access: You can request information about the personal data we hold about you and how we process it.
-
Right to rectification: You can request that we correct or update inaccurate or incomplete personal data.
-
Right to deletion (erasure): You can request that we delete your personal data when it is no longer necessary for the purposes for which it was collected or processed, subject to legal or legitimate business retention obligations.
-
Right to object: You may object to certain types of processing, such as direct marketing or processing based on legitimate interests, unless we have compelling legal grounds to continue.
-
Right to restrict processing: You can request that we limit the use of your personal data under certain conditions (for example, while we verify accuracy or respond to an objection).
-
Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format, and in some cases, request that we transfer it to another controller.
-
Right to withdraw consent: Where we rely on your consent to process your data, you can withdraw your consent at any time. This will not affect the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, or if you have concerns about how your personal data is being processed, please contact us at team@truthorplaythegame.com. We will handle your request promptly and in accordance with applicable laws, and we will aim to respond within a reasonable timeframe.
7. Legal Basis for Processing Personal Data
We process your personal data based on one or more of the following legal grounds, as permitted by applicable law:
-
Contractual necessity: To fulfill our contractual obligations to you, such as processing your orders, delivering the Truth or Play card game, providing customer support, and managing your account.
-
Legal obligations: To comply with laws and regulations, including tax obligations, accounting requirements, and responses to lawful government or regulatory requests.
-
Consent: Where you have given us clear consent to process your data for specific purposes, such as receiving marketing communications. You may withdraw this consent at any time.
-
Legitimate interests: To pursue our legitimate interests in operating, protecting, and improving our business and services, including preventing fraud, ensuring network and information security, analyzing usage patterns, and enhancing user satisfaction—provided that these interests do not override your fundamental rights and freedoms.
8. California Consumer Privacy Rights
If you are a California resident, you may have specific rights under the California Consumer Privacy Act (CCPA) or similar laws, including:
-
The right to know what categories and specific pieces of personal data we collect, use, and disclose.
-
The right to know the purposes for which we process your personal data.
-
The right to request deletion of your personal data, subject to exceptions such as completing transactions, detecting security incidents, or complying with legal obligations.
-
The right to opt out of the sale of personal data (note that we do not currently sell personal data).
-
The right not to be discriminated against for exercising any of these rights.
To make a CCPA-related request, please contact us at team@truthorplaythegame.com with “CCPA Request” in the subject line. We will take steps to verify your identity before responding and will handle your request in accordance with CCPA requirements.
9. Retention Periods for Personal Data
We retain your personal data only for as long as necessary to achieve the purposes for which it was collected, including:
-
Providing and supporting our services and products.
-
Complying with legal, tax, and regulatory obligations.
-
Resolving disputes and enforcing our terms and policies.
-
Maintaining necessary business and financial records.
Retention periods vary depending on the type of data and the specific purpose for which it is used. Once your personal data is no longer required, we will securely delete, anonymize, or otherwise dispose of it in a manner that ensures it cannot be reconstructed or accessed.
Our retention and disposal practices comply with applicable federal, state, and local laws, including those in Washington State, and adhere to industry standards for data security and privacy. If you have questions about our data retention practices or wish to request deletion of your data, please contact us using the information provided in this policy.
10. Data Protection for Children
Our website and services are not intended for individuals under the age of 13, in compliance with the Children’s Online Privacy Protection Act (COPPA) and applicable laws in Washington State and other jurisdictions. We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent.
If we become aware that we have collected personal data from a child under 13 without the necessary consent, we will promptly delete such information from our records. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us at team@truthorplaythegame.com so we can take appropriate action.
11. Automated Decision-Making and Profiling
At this time, we do not utilize personal data for automated decision-making or profiling that produces legal or similarly significant effects on individuals. All decisions involving your personal data are currently reviewed or made by qualified personnel to ensure fairness and transparency.
If we choose to implement automated decision-making or profiling in the future, we will do so in full compliance with applicable laws and regulations. In such cases, we will:
-
Inform you about the nature and purpose of these activities.
-
Explain the logic involved and the potential consequences for you.
-
Provide mechanisms for you to request human intervention, express your perspective, or contest decisions that significantly impact your rights or interests.
12. International Data Transfers
If you are located outside of the United States, please be aware that your personal data may be transferred to, processed, and stored in the United States or other countries where data protection laws may differ from those in your jurisdiction.
We are committed to protecting your data during such transfers. To ensure adequate protection, we implement appropriate safeguards, including:
-
Standard Contractual Clauses approved by relevant regulatory authorities, where required.
-
Contractual commitments requiring data recipients to protect your personal data and uphold your rights.
-
Other mechanisms recognized by applicable laws as providing sufficient data protection.
By using our services and providing us with your personal data, you acknowledge and consent to these international data transfers, as described in this Privacy Policy.
13. Cookie Policy and Consent Management
We use cookies and similar technologies to enhance your browsing experience, analyze website traffic, deliver personalized content, and improve our services.
a. What are cookies?
Cookies are small data files stored on your device when you visit our website. They help us remember your preferences, understand how you use our site, and provide a smoother experience.
b. Types of cookies we may use
-
Essential cookies: Necessary for the basic functioning of the site (e.g., shopping cart, secure login). These cannot be disabled.
-
Performance cookies: Help us understand how visitors use our site so we can improve functionality and user experience.
-
Functional cookies: Remember your preferences (such as language or region) to provide more personalized features.
-
Targeting/advertising cookies: Used to deliver relevant advertising and track the effectiveness of campaigns, where applicable and permitted.
c. Managing your cookie preferences
You can manage your cookie preferences or withdraw your consent at any time through our cookie management tool (if available) or by adjusting your browser settings. Please note that disabling certain cookies may affect the functionality or performance of the website.
For more information about how we use cookies and similar technologies, please refer to our separate Cookie Policy, if provided. Your continued use of our website indicates your consent to our use of cookies, subject to your preferences and applicable law.
14. Data Breach Notification
In the event of a data breach that compromises the security, confidentiality, or integrity of your personal data, we will take immediate steps to:
-
Assess the scope and impact of the incident.
-
Contain and remediate the breach to prevent further unauthorized access.
-
Notify affected individuals and relevant regulatory authorities as required by applicable law.
Notifications will include, where required:
-
A description of the nature of the breach and the types of data involved.
-
The likely consequences of the breach.
-
Steps we have taken or plan to take to address the breach.
-
Recommendations for steps you can take to protect yourself, such as monitoring accounts or changing passwords.
We are committed to transparency, legal compliance, and the protection of your personal data by responding swiftly and effectively to any such incidents.
15. Opt-Out Mechanisms
In compliance with U.S. privacy laws, including the California Consumer Privacy Act (CCPA), we provide mechanisms for users to opt out of certain data processing activities.
-
You can opt out of receiving promotional communications from us at any time by clicking the “unsubscribe” link in any marketing email, or by contacting us at team@truthorplaythegame.com and requesting removal from our marketing lists.
-
California residents may have the right to opt out of the sale or sharing of their personal information. While we do not sell personal information as defined under the CCPA, we provide a “Do Not Sell or Share My Personal Information” link on our website if required by law or if our practices change in the future.
-
Residents of other U.S. states with similar privacy laws may contact us to exercise their rights and manage their data preferences.
Opting out of promotional communications will not affect transactional or service-related emails, such as order confirmations or shipping updates.
16. Backup and Archiving Policy
We incorporate personal data into system backups and archives to ensure operational continuity, disaster recovery, and business resilience. These backups:
-
Are securely encrypted and stored in controlled environments.
-
Are accessible only to authorized personnel.
-
Are retained only for the duration necessary to fulfill recovery and operational requirements.
Upon expiration of the retention period for backups, all data, including personal data, is permanently and securely deleted in accordance with applicable data protection laws and our internal policies. This process is designed to protect your data while it is retained and ensure it is responsibly destroyed when no longer required.
17. Changes to Our Privacy Policy
We may modify this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. When we do:
-
We will post the updated Privacy Policy on this page with an updated “last revised” date.
-
If changes are significant, we will provide a more prominent notice (such as a banner or email notification).
-
Where required by law, we will seek your consent before implementing significant changes that materially affect your rights or how your personal data is processed.
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your data.
Contact Us
For any questions, concerns, or requests regarding your privacy or this Privacy Policy, please contact us at:
Email: team@truthorplaythegame.com
We are committed to working with you to address your concerns in a timely and respectful manner.
Supervisory Authority Contact
If you believe your privacy rights have been violated, you may have the right to file a complaint with a supervisory authority or regulatory body in your jurisdiction. If you need assistance in determining the appropriate authority or wish to discuss a concern before filing a complaint, please contact us at team@truthorplaythegame.com.