Legal

Privacy Policy

Effective Date: June 18, 2026  Last Updated: August 11, 2026

1. Introduction

Welcome to Dauber HQ ("we," "us," or "our"). Dauber HQ is a bingo display service operated by Dauber HQ LLC ("Company"), a Washington limited liability company doing business as Dauber HQ.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our web application, or interact with our services (collectively, the "Service"). It applies to all users of the Service, including bingo event organizers ("Organizers") and bingo players or viewers ("Players").

Please read this Privacy Policy carefully. By using our Service, you acknowledge that you have read and understood this policy. If you do not agree with its terms, please do not use the Service.

2. Information We Collect

We collect information in three ways: information you provide directly, information collected automatically, and information received from third parties.

2.1 Information You Provide Directly

Account Registration. When you create an account, we collect your name, email address, and a password. Organizers may also provide a business or organization name.

Payment Information. When you subscribe to a paid plan, your payment is processed by our payment processor, Stripe, Inc. We do not receive or store your full credit card number, card verification code, or bank account details. We do receive and store non-sensitive billing information such as your name, email address, billing address, and the last four digits of your card.

Communications. If you contact us for support or send us an email, we retain the contents of that communication and your contact information in order to respond to you.

Event Data. Organizers submit bingo game data (such as called numbers and session information) through the Service. This data is used to operate the display features of the platform.

2.2 Information Collected Automatically

When you use the Service, we and our third-party service providers automatically collect certain technical and usage information, including:

  • Device and browser information: IP address, browser type and version, operating system, device type, and unique device identifiers.
  • Usage data: Pages or screens viewed, features used, time and date of access, session duration, referring URLs, and click interactions.
  • Game session data: Information about bingo sessions created or viewed through the Service, such as the number of sessions run and numbers displayed.
  • Cookies and similar technologies: We use cookies, web beacons, and similar tracking technologies. See Section 6 for more detail.

2.3 Information from Third Parties

We may receive information about you from our third-party service providers (such as payment confirmation from Stripe) as part of operating the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and operate the Service: Creating and managing your account, displaying bingo game sessions, generating QR codes for Players, and delivering features you request.
  • To process payments: Facilitating subscription billing and maintaining billing records through Stripe.
  • To improve the Service: Analyzing usage patterns, diagnosing technical issues, and understanding how users interact with the Service to make improvements.
  • To communicate with you: Sending transactional emails (such as account confirmations and receipts), responding to support requests, and sending service-related notices.
  • To monitor security and performance: Detecting errors, crashes, and security incidents; ensuring the Service functions correctly.
  • To comply with legal obligations: Retaining records as required by law, responding to lawful requests from authorities, and enforcing our Terms of Service.
  • To send marketing communications: If you have opted in, we may send you information about new features or updates. You may opt out at any time.

4. Legal Basis for Processing (EEA, UK, and Switzerland Users)

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal data under the following legal bases as required by the General Data Protection Regulation (GDPR) and applicable local laws:

  • Performance of a contract: To provide you with the Service you have signed up for, including account management and bingo session display.
  • Legitimate interests: For product analytics (understanding how the Service is used), error monitoring and security, fraud prevention, and improving the Service — where these interests are not overridden by your rights.
  • Consent: For optional tracking technologies such as session recording (Microsoft Clarity) and behavioral analytics, and for marketing communications. You may withdraw consent at any time.
  • Legal obligation: For retaining invoicing and financial records as required by applicable law.

5. How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Service Providers. We share your information with third-party vendors and service providers who perform services on our behalf, including payment processing, analytics, error monitoring, marketing tools, and infrastructure hosting. These providers are authorized to use your information only as necessary to provide their services to us. A list of key providers is in Section 7.

Organizers and Players. Game session data (called bingo numbers and session status) is shared in real time with Players who access a session via QR code or direct link, as this is the core function of the Service. Organizers should note that their session display is accessible to anyone with the session link.

Business Transfers. If Dauber HQ LLC is involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, or sale of all or a portion of its assets, your information may be transferred as part of that transaction.

Legal Requirements. We may disclose your information if required by law, court order, or government authority, or if we believe disclosure is necessary to protect the rights, property, or safety of our users, the public, or ourselves.

With Your Consent. We may share your information with third parties when you have given us explicit consent to do so.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies (such as pixels and web beacons) to operate and improve the Service. Cookies are small data files placed on your device that help us recognize you, remember your preferences, and understand how you use the Service.

Types of cookies we use:

  • Strictly necessary cookies: Required for the Service to function, such as maintaining your login session. These cannot be disabled.
  • Analytics cookies: Used to collect information about how visitors use the Service, including pages visited and session duration. These help us improve the Service.
  • Functional cookies: Used to remember your preferences and settings.
  • Third-party cookies: Set by our third-party service providers (see Section 7). These are subject to each provider's own cookie policies.

Your choices: Depending on your location, you may be presented with a cookie consent banner when you first visit the Service. You may also manage cookies through your browser settings, though disabling certain cookies may affect the functionality of the Service.

Residents of the EEA, UK, or Switzerland: Non-essential cookies, analytics tools, and session recording tools (including Microsoft Clarity, used on our marketing website) will not be activated until you provide consent through our cookie consent system.

Do Not Track. Some browsers offer a "Do Not Track" (DNT) setting. Because there is no common industry standard for interpreting DNT signals, our Service does not currently respond to them. We do, however, honor the Global Privacy Control (GPC) as described in Section 9.2.

7. Third-Party Services

We use the following third-party services to operate and improve Dauber HQ. Each has its own privacy policy and data practices, which we encourage you to review.

Google Analytics 4

Provider: Google LLC (United States) Purpose: Website traffic analysis and user behavior analytics. Collects information such as pages visited, time on site, device and browser type, and general geographic location. Google Analytics 4 uses IP addresses only transiently to derive coarse location and does not log or store them. Privacy Policy: https://policies.google.com/privacy Opt-out: https://tools.google.com/dlpage/gaoptout

Google Tag Manager

Provider: Google LLC (United States) Purpose: A tag management system used to load and manage our third-party analytics and tracking scripts. Google Tag Manager itself does not collect personal data, but facilitates data collection by other tools listed here. Privacy Policy: https://policies.google.com/privacy

PostHog

Provider: PostHog, Inc. Purpose: Product analytics and user event tracking. Tracks in-app user behavior such as features used, button clicks, session flow, and usage patterns to help us understand and improve the product. Privacy Policy: https://posthog.com/privacy

HeyCatch

Provider: HeyCatch, Inc. (United States) Purpose: Product analytics and growth attribution. The HeyCatch SDK automatically captures how visitors use our website and app — page and screen views, clicks, navigation, and sign-up and subscription events — along with device, browser, and IP information. For signed-in Organizers, this activity is associated with account details such as name, email, and plan. HeyCatch acts as our data processor, does not use this data for advertising, and has session replay disabled; it uses PostHog as its underlying analytics infrastructure. Privacy Policy: https://heycatch.ai/privacy

HubSpot

Provider: HubSpot, Inc. (United States) Purpose: Customer relationship management (CRM) and marketing communications. Used to manage contact records, send transactional and marketing emails, and track communication history with customers. Privacy Policy: https://legal.hubspot.com/privacy-policy

Microsoft Clarity

Provider: Microsoft Corporation (United States) Purpose: Used on our public-facing marketing website only (not within the authenticated application). We partner with Microsoft Clarity to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve our products and services. Website usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of our services and online activity. Additionally, we use this information for site optimization and security purposes. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement.

Consent: For users in the EEA, UK, and Switzerland, Microsoft Clarity will only be activated after you provide explicit consent through our cookie consent system, in accordance with GDPR requirements. Privacy Policy: https://www.microsoft.com/privacy/privacystatement

Sentry

Provider: Functional Software, Inc. d/b/a Sentry (United States) Purpose: Application error monitoring and crash reporting. Sentry captures technical error data (such as stack traces, browser state, and error messages) when the Service encounters a problem, helping us diagnose and fix bugs. Sentry may incidentally capture technical information associated with an error event. We configure Sentry to minimize the collection of personal data. Privacy Policy: https://sentry.io/privacy/

Stripe

Provider: Stripe, Inc. (United States) Purpose: Payment processing for Organizer subscriptions. Stripe collects and processes payment card information directly from you. Stripe acts as an independent data controller for payment data and is responsible for the security of your payment information. We do not store your full card details. Privacy Policy: https://stripe.com/privacy

8. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

  • Account data: Retained for as long as your account is active. When you delete your account, we delete or anonymize your account data and associated game session data within a reasonable period, except for records we are required to keep by law (such as billing records, described below). We may also delete accounts that have remained inactive for an extended period (currently 12 months) after providing notice and an opportunity to keep the account active.
  • Payment and billing records: Retained for 7 years as required by applicable financial and tax regulations.
  • Game session data: We do not automatically delete your game session data. It is retained for the life of your account so that your session history remains available to you. The difference between our Free and paid plans relates to how long a live session link stays active and how long sessions remain visible in your Sessions list — not to deletion of the underlying data.
    • Free accounts: a session's shareable viewer link stays active for 4 hours after the most recent called number, and ended sessions remain visible in your Sessions list for 14 days before being hidden. The underlying data is retained and is restored to view if you later upgrade.
    • Paid accounts: the viewer link stays active for 24 hours, and sessions remain visible in your Sessions list indefinitely.
      Organizers may delete their own session data at any time through the Service, and all game session data associated with an account is deleted when the account is deleted.
  • Analytics data: Retained per each third-party provider's data retention settings. Google Analytics data is retained for 14 months by default. PostHog analytics data is retained for 30 days. HeyCatch analytics data: retained by HeyCatch while our subscription is active and for up to 2 months after it ends, then deleted or anonymized.
  • Error logs (Sentry): Retained for 90 days.
  • Support communications: Retained for up to 2 years from the date of last contact.

9. Your Privacy Rights

9.1 Rights for EEA, UK, and Switzerland Residents (GDPR)

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights under the GDPR:

  • Right of Access: You may request a copy of the personal data we hold about you.
  • Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
  • Right to Erasure ("Right to Be Forgotten"): You may request that we delete your personal data, subject to certain exceptions (e.g., where we are required to retain data by law).
  • Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
  • Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, machine-readable format.
  • Right to Object: You may object to our processing of your personal data where we rely on legitimate interests as our legal basis.
  • Right to Withdraw Consent: Where we process your data based on consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

9.2 Rights for California Residents (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of that information, the business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions.
  • Right to Correct: You may request that we correct inaccurate personal information we hold about you.
  • Right to Opt-Out of Sale or Sharing: We do not sell your personal information. We share certain data with analytics providers as described in this policy; if this constitutes "sharing" under CCPA, you may opt out by emailing [email protected]. We also honor opt-out preference signals, including the Global Privacy Control (GPC): if you visit our website with a recognized opt-out signal enabled, we will treat it as a request to opt out of sharing for that browser or device.
  • Right to Limit Use of Sensitive Personal Information: You may direct us to limit the use of sensitive personal information to purposes necessary to provide the Service.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

9.3 Rights for Other U.S. Residents

Residents of states with comprehensive privacy laws (including but not limited to Colorado, Connecticut, Virginia, Texas, Indiana, Kentucky, and Rhode Island) may have similar rights to access, correct, delete, and opt-out of certain data processing. We will honor requests consistent with applicable state law.

9.4 How to Exercise Your Rights

To exercise any of the rights described above, please contact us at:

Email: [email protected] Subject Line: Privacy Rights Request

We will respond to your request within the timeframe required by applicable law (generally 30–45 days). We may need to verify your identity before fulfilling your request.

10. International Data Transfers

Dauber HQ is operated in the United States. If you access the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States or other countries where our service providers are located.

For users in the EEA, UK, or Switzerland, we rely on appropriate legal mechanisms for international data transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable. Our key service providers (including Google, Stripe, HubSpot, and others listed in Section 7) maintain their own transfer mechanisms consistent with applicable data protection law.

11. Security

We take reasonable technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

  • Encryption of data in transit using TLS (Transport Layer Security)
  • Access controls limiting who can access user data within our organization
  • Use of reputable third-party providers (such as Stripe) with industry-standard security certifications for sensitive data like payment information
  • Regular monitoring for errors and security incidents via Sentry

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at [email protected].

12. Children's Privacy

The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If you are under 13, please do not use the Service or submit any personal information.

If we learn that we have inadvertently collected personal information from a child under 13, we will take prompt steps to delete that information from our records. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected].

Users must be at least 13 years of age to create an account or use the Service. By creating an account, you represent that you are at least 13 years old.

Viewers and classroom use. Players who view a bingo session by scanning a QR code or opening a session link are not required to create an account, and we do not ask Players to provide personal information to view a session. We do not knowingly collect personal information from children. Where an Organizer uses the Service in a classroom or any other setting that may include children under 13, the Organizer is solely responsible for complying with applicable child- and student-privacy laws — including the Children's Online Privacy Protection Act (COPPA) and, where applicable, FERPA and state student-privacy laws — and for obtaining any required parental, guardian, or school consent.

13. Third-Party Links

The Service may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing them with any personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date at the top of this policy and, where required by applicable law, notify you by email or through a prominent notice within the Service.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Dauber HQ LLC
c/o Northwest Registered Agent, LLC
522 W Riverside Ave Ste N
Spokane, WA 99201-0581
Email: [email protected]
Website: https://dauberhq.com

For users in the EU/UK, if you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority.

This Privacy Policy was last reviewed and updated in August 2026.