Privacy policy
Effective: October 28, 2026
1. Who is responsible for your data
Leonardo Bridge is operated by Vasiliki Nika, Athens, Greece, who is the data controller for the personal data described in this policy.
For privacy questions or to exercise your rights, contact contact@leonardobridge.com.
2. Data we collect
•
Account and identity data, such as your email address, username, account identifier and, if you choose Google Sign-In, the information Google provides for authentication.
•
Game data, including tournament, Challenge and Open Table participation, deals played, bids, scores, rankings, progress, game history and related timestamps.
•
Guest and session data needed to let you play before creating an account and to maintain your current game or browser session.
•
Support data you choose to send us. AI Help can include your question, recent AI Help messages and limited context about the screen and game feature you are using.
•
Technical and security data needed to detect errors, abuse or unauthorised access.
•
Open Table chat data, including messages you send, your username and message timestamps.
3. Why we use your data
We process data when necessary to provide the service you request, when required by law, and for our legitimate interests in security, service integrity, troubleshooting and improvement, provided those interests do not override your rights.
•
To authenticate accounts, maintain guest sessions and provide Leonardo Bridge features.
•
To calculate and display scores, rankings, standings, results and game history.
•
To operate Challenges, tournaments, Open Tables, practice tools and invitation links.
•
To answer support requests and provide AI Help when you choose to use it.
•
To protect the service, prevent abuse, diagnose faults and maintain fair play.
•
To comply with legal obligations and establish, exercise or defend legal claims.
4. Public and shared information
Your username, scores, results, rankings and tournament or Challenge participation may be visible to other players. Do not use a username that reveals information you do not want to make public.
Anyone who receives or is forwarded a Challenge or Open Table invitation link may be able to open the invitation. Open Table invitations refer to a specific seat.
At Open Tables, chat messages are visible to seated players from the time they join. A player who leaves and rejoins sees messages from the new join time onward.
5. Service providers and transfers
We use Supabase for authentication, databases and server functions; Google if you choose Google Sign-In; OpenAI when you choose AI Help; Papaki for the contact mailbox; and hosting or infrastructure providers.
Some providers may process data outside the European Economic Area. Where required, we rely on an adequacy decision, contractual safeguards or another lawful transfer mechanism.
6. Storage on your device
With your permission, a random browser code links ad visits, new registrations and completion of 4 deals. Google Ads measures registrations. No personalised ads. Refusal does not affect playing. Change your choice in Privacy policy.
Your choice is saved for 180 days. You can withdraw it here at any time; future measurement stops and existing totals remain. Google receives technical data and ad click identifiers, but we send no email or username.
We use a local IP-to-country database on our server to decide whether advertising measurement is available. Our legitimate interest is to restrict this tracking to campaign countries. This check does not store your IP address or country or send them to a geolocation provider, and does not use cookies or device location. Google Ads and its consent notice are enabled only in the United States, United Kingdom, Italy, Netherlands and Turkey; unknown countries remain disabled. Ads still require your consent. IP country estimates may reflect a VPN. This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com. Separately, for internal registration statistics in all countries, we record once the estimated country code at confirmation of a new account, without storing the IP. This is independent of advertising consent and is not sent to Google Ads. The code is deleted with the account; existing registrations are not backfilled. Unknown countries remain blank.
7. How long we keep data
We keep account and game records while needed to provide your account, history, standings and competition integrity. Security and technical records are kept only as long as reasonably needed for troubleshooting, abuse prevention and legal obligations.
After a deletion request, we will delete or anonymise personal data unless it must be retained for legal obligations, dispute resolution, security, or the integrity of completed competitions and shared results.
Open Table chat messages are deleted when the table closes.
8. Your rights
Subject to applicable law, you may ask for access to, correction of, deletion of, restriction of, or portability of your personal data, and may object to processing based on legitimate interests.
Send requests to contact@leonardobridge.com. We may need to verify your identity and will normally respond within one month. You may also complain to the Hellenic Data Protection Authority at dpa.gr.
9. Security and children
We use reasonable technical and organisational safeguards, but no online service can guarantee absolute security. Keep your credentials confidential and tell us promptly if you suspect unauthorised access.
Leonardo Bridge is not directed to children who cannot lawfully consent to the processing of their data. A parent or guardian should contact us if they believe data was provided without required permission.
10. Changes to this policy
We may update this policy when the service, our providers or legal requirements change. The current version and effective date will be published here.