Privacy Policy

This policy explains how The Morning Case (“we”) handles your personal data when you use our website at themorningcase.co.uk. We comply with the UK GDPR and the Data Protection Act 2018.

Data we collect

• Account: email, username, display name, avatar.
• Gameplay: case submissions, scores, streaks, friends, suggestions.
• Billing: customer ID, subscription state (Stripe holds your card details).
• Diagnostic: anonymised page views and error logs (no IP-level tracking beyond standard server logs).

Why we use it

• To run the Service: render your case files, score submissions, manage friends.
• To take payment and manage subscriptions (lawful basis: contract).
• To send transactional email — sign-in, password reset, billing receipts.
• To investigate abuse and prevent fraud (lawful basis: legitimate interest).

Sharing

We share data only with our processors: Supabase (authentication and database, EU region), Stripe (payments, UK/EU), Vercel (hosting, EU region), and Hostinger (email delivery). We do not sell your data, and we do not run third-party advertising.

Retention

We keep account data while your account is active. Closed accounts and their case history are deleted within 30 days, except where law requires us to keep billing records (typically 6 years).

Your rights

You have the right to access, correct, or delete your personal data; to object to processing; to data portability; and to lodge a complaint with the UK’s Information Commissioner’s Office (ICO). Email info@themorningcase.co.uk to exercise any of these.

Children

The Service is not directed at children under 13. If you believe a child has registered, contact us and we’ll remove the account.