This page describes what data Buzzo collects, why, who receives it and how you can control it. The data controller is the individual entrepreneur Oleksandr Kupenko (“we”); contact details are on the Contacts page.
1. What data we process
- Account. Email, name and password (stored only as a protected hash). If you sign in with Google, Google gives us your address, name and Google account identifier; we never see your Google password.
- Profile. Interface language, avatar, a short bio, and game statistics (games played and won).
- Your content. The question packs you write, or that AI writes for you, and the pictures attached to questions.
- Games. Who took part, the character chosen, scores, answers and game events. A guest who joins from a link gives only a name to play under and does not register. A guest’s access is time-limited.
- Uploaded materials. PDF and DOCX files you ask us to turn into a game are processed in the server’s memory. The files themselves are not stored; only the question pack made from them is.
- Payments. A payment is taken by a payment service provider, named on the payment page. We never see or store your card number. We receive only the outcome: payment identifier, amount, status and date.
- Technical data. IP address, browser and device type, and request times in the server logs we keep for security and for diagnosing faults.
2. Why we do it
- to run the Service: create your account, host games, keep your question packs (performance of the contract);
- to take payments, make refunds and keep the records the law requires (performance of the contract and a legal obligation);
- to protect the Service from abuse and fraud (our legitimate interest);
- to answer your requests.
We do not sell your data and do not use it for advertising. On buzzo.fun we use Google Analytics, but only if you agree (see section 5).
3. Who receives it
We use the following providers, only as far as a given feature needs:
- Google — sign-in with a Google account; the Gemini language models that write question packs and check answers; and Google Cloud Text-to-Speech, which receives the host’s and opponents’ spoken lines.
- DeepSeek — a language model for AI host lines and AI opponents’ answers (the company is based in China).
- Typesafe — a service for checking answers while allowing for spelling mistakes.
- Payment service provider — payment processing.
- The hosting provider on whose server the Service runs.
The language models and the speech service may receive the text of questions and answers, topics, the text of uploaded materials, players’ answers and their in-game names when the host addresses a player. We do not give them your email or password. For that reason, do not put sensitive personal data into questions or materials.
As a result, data may be processed outside Ukraine, including in the United States and China. We do not pass it to anyone else except where the law requires it.
4. Microphone and voice
If you switch on voice answers, speech recognition is done by your browser (which may send the audio to its maker — Google, for Chrome). Only the recognised text of the answer reaches our server; we do not receive or store voice recordings.
5. Cookies and browser storage
The Service stores in your browser what it needs to work: your sign-in key, your language and your game display settings. These are neither advertising nor analytics files.
On buzzo.fun (the public pages and the game itself) we also use
Google Analytics to count visits and see which pages are useful. Its cookies
(_ga, _ga_*) are set only after you press “Accept” in the cookie
notice. Until then Google receives only anonymous, cookie-free signals, and we do not use advertising
cookies or personalised ads at all. The data is processed by Google, which may transfer it outside your
country. You can change your mind at any time with the “Cookie settings” link at the bottom of the page;
we remember your choice in your browser.
6. How long we keep it
- Account data and your question packs — for as long as the account exists.
- A guest’s access — until the invitation expires.
- Payment records — as long as Ukrainian accounting and tax law requires.
- Server logs — for a limited time needed for security.
7. Your rights
You can ask us to show, correct or delete your data, to restrict its processing, to give it to you in a portable format, and to withdraw your consent. Write to support@buzzo.fun from your account’s address — we answer within 30 days. If you believe we are breaching your rights, you may contact the Ukrainian Parliament Commissioner for Human Rights; residents of the EU also have the rights under the GDPR and may complain to the supervisory authority in their country.
8. Children
Only adults buy gold coins. Children and pupils play under the guidance of a parent or a teacher; a guest only needs a play name, not a real one.
9. Security
The connection to the Service is protected by HTTPS, passwords are stored only as hashes, and access to the data is restricted to us and our hosting provider. No method of transmission or storage is perfectly secure, so please tell us at once about any suspected leak.
10. Changes
We may update this policy. The current revision is always on this page, and its date is shown below.
Revision of 3 October 2026.