Privacy Policy

Last updated: 25 September 2026

Hey, ya WYRDO. Yes, this is a privacy policy. No, we didn't write it to confuse you. It covers everything WYRDO does: our store at wyrdo.com, where we sell the WYRDO party games, and the daily WYRDO game — the iOS and Android app and play.wyrdo.com. Here's what we collect, why we collect it, and what you can do about it, in words normal humans use.

WYRDO Pty Ltd (“WYRDO”, “we”, “us”, “our”) is responsible for your personal information. If you're in the UK or the European Union, that makes us the “controller”. We follow the Australian Privacy Act 1988 and the Australian Privacy Principles and, where they apply to you, the UK and EU General Data Protection Regulation (GDPR) and US state privacy laws.

The short version

• We collect what we need to sell you games, run the WYRDO game, run our referral and unlock programs and, if you ask us to, email you.
• We don't sell your personal information. Not to anyone. Not ever.
• The game has no ads and doesn't track you across other companies' apps or websites.
• We share the funniest comments and results from the game on our socials. Never with your name on them.
• You can play as a guest, with no account, and you can delete your account yourself any time: You → Settings → Delete account.
• Questions? Email hey@wyrdo.com. Real humans read it.

1. What we collect

When you shop at wyrdo.com

• Contact and delivery details: your name, email address, phone number, and billing and delivery addresses, so we know who you are and where to send your game.
• Payment information: handled by our payment provider through Shopify's checkout. We never see or store your full card details.
• Order information: what you bought, your order history, and anything you return or cancel.
• Store account: your sign-in details and preferences, if you create a customer account.
• Messages: anything you send us by email or through our contact forms.
• Device and browsing data: your IP address, browser type, the pages and products you look at and how you move around the site, collected automatically through cookies and similar technologies, including Klaviyo's site script (see section 7).

When you play the WYRDO game (the app and play.wyrdo.com)

• Your account: your email address, the password you choose when you sign up (kept securely by our sign-in provider, Clerk — we never see it) and, if you add one, a display name. You sign in with a one-time code sent to your email, or with Apple or Google, in which case they share your email address (and your name, if you let them) with us. You don't need an account to play: guests can play today's question without one.
• A device ID: a random ID the game creates and keeps on your device, so each device gets one answer a day and your progress sticks. If you create an account, your device ID is attached to it.
• What you play: your daily answers, streaks and stats, the archive questions you play, and your group-game rounds and results.
• What you write: the comments you add to your answers, group chat messages and reactions, group names, question ideas you send us, reports you make about other players' content, and anything you write in the in-game feedback form (with your email, so we can reply).
• Your connections: who you add as a friend, invite to a group game, or block.
• Your settings: your notification and analytics choices, time zone and language, so the daily question and reminders turn up at the right time for you, and your country or region, which we work out from your device's region, language and time-zone settings (never from GPS) so that any launch news we send you is about your market.
• Your age range (some US states only): where a state law makes the app stores check ages, the app asks Apple or Google whether you’re 16 or over and doesn’t let you play if you’re not (or haven’t shared it). We only see an age range, like “16 or over”. It stays on your device: we don’t send it to our servers or keep it.
• Notifications: if you turn on push notifications, your device's push token, so we can send them.
• How the game gets used: a hand-picked set of in-game events (like opening the game, answering, viewing results, sharing and group-game actions) with basic device information (device type, operating system and app version), linked to your account or, for guests, your device ID. We don't automatically record everything you tap, and we don't make session recordings.
• Crash reports: when the app crashes or hits an error, a report with your device model, operating system, app version and what went wrong. No account ID is attached.
• Offers and launch news: if you give us your email in the game for an offer or for launch news (for example “Claim offer” or “Be first to know”), your email address, the consent you gave and when you gave it, and your market.

When you join our referral, unlock and offer programs

• Your claim: your email address, your social media handle and platform, links to your posts, and any footage or files you send us. Footage can show you, your voice, and anyone else in it.
• Your promises: the boxes you tick to confirm that everyone in your footage agreed to it being used (and, for anyone under 18, their parent or guardian), and that you're giving it to us when we accept your claim (see our Terms).
• Your referrals: how many orders used your referral code, so we can send your rewards.

The game doesn't access your contacts, photos, camera, microphone or precise location, and it doesn't use advertising identifiers.

2. Where we get it

• From you: when you buy something, create an account, play, write something in the game, send us a claim, or get in touch.
• From your device or browser, automatically: through cookies, local storage and similar technologies (section 7), and the in-game events and crash reports described above.
• From others who work with us: Shopify and our payment and delivery partners when you shop, Apple or Google if you sign in with them, and the social platforms where you've published a post you've told us about.

3. How we use it (and why we're allowed to)

We only use your information for things you'd reasonably expect. The legal reasons in brackets matter mostly if you're in the UK or EU.

• To sell you games: taking payment, delivering your order, handling returns and cancellations, and sending order and shipping emails. (Performing our contract with you.)
• To run the game: your account, one answer a day, results and streaks, friends, group games and chat, and the emails and notifications that are part of the game, like sign-in codes, friend nudges, and group-game invites and results. (Performing our contract with you. Push notifications are sent only if you turn them on, and you can switch nudge, invite and result emails, and each type of push, off in Settings.)
• To run our programs: checking claims, sending codes and free products, and counting referrals. (Performing our contract with you: the program rules in our Terms of Service.)
• To show off the funny stuff: featuring comments from the game (never with your name, and never group chat), results and stats, and the posts and footage you send us, in our social media, ads, website, emails and products. (Our legitimate interest in promoting WYRDO, and the rights you give us in our Terms.)
• To keep WYRDO safe and fair: stopping vote-stuffing, fraud and abuse, securing accounts, and reviewing reported content, which can mean removing content and suspending accounts that break our Terms of Service. (Our legitimate interest in a safe, fair game, and complying with the law.)
• To understand and improve WYRDO: the in-game events, crash reports and store analytics described above. (Our legitimate interest in making the game and store better. In the UK and EU, we collect the in-game events only if you say yes — see section 7.)
• To talk to you: replying to your messages, feedback, claims and requests. (Our legitimate interest in helping you, or our contract with you.)
• Marketing emails: offers, launch news and store updates, only if you've opted in, and tailored to the products you've looked at on the store. (Your consent, which you can withdraw any time by unsubscribing.)
• Store advertising: on wyrdo.com, measuring our ads and showing you WYRDO ads on other platforms based on your activity on our store (see section 7). (Your consent where the law requires it, otherwise our legitimate interest in promoting WYRDO. You can opt out any time.) We never give the game's data, or email addresses you give us in the game, to advertising platforms, or use them to target ads.
• To meet our legal obligations: tax, accounting and consumer law, responding to lawful requests, and handling disputes. (Legal obligation, and our legitimate interest in protecting our rights.)

You don't have to give us anything to browse the store or to play as a guest. To buy something, we need your contact and delivery details; to create a game account or claim a reward, we need your email address. Without them we can't take your order, set up your account or send your reward.

We don't make decisions about you based only on automated processing that have legal or similarly significant effects on you. Reports and automatic flags are reviewed by a person before we take action on an account.

4. Who can see what

• Your answers count towards the global results anonymously. In the global results, other players see totals, never who voted. Your friends see your answers.
• Comments you add to your answers can be seen by everyone who plays: in the global results without your name, and by your friends with your name.
• Your display name is visible to your friends and to the people in group games with you. Group chat messages, reactions and group names are visible to that group.
• We may feature comments and results from the game on our socials, in ads and on our products. We never put your name on a comment we feature, and we never feature group chat.
• Posts and footage you send us for a program may be shared publicly. That's rather the point.
• If you block someone, they can't see your content and you can't see theirs.
• Our moderators can see content that's been reported and the account behind it.

5. Who we share it with (and who we don't)

We do not sell your personal information. We share it only with the service providers who help us run WYRDO, for the purposes in this policy. Most of them can only use your information to provide their service to us, and they're contractually required to keep it secure. Three exceptions also use what they collect under their own privacy policies: Apple and Google when you sign in with them, Shopify for the features in section 6, and advertising platforms like Meta, Google and TikTok if we run ads for the store (section 7).

• Shopify — our online store, checkout, contact forms and payment processing.
• Shipping and fulfilment partners — to get your order to you.
• Clerk — sign-in and game accounts.
• Convex — the game's database and servers.
• Vercel — hosts play.wyrdo.com.
• Expo — delivers push notifications (through Apple's and Google's push services) and app updates.
• PostHog — the in-game events (product analytics).
• Sentry — crash and error reports.
• Resend — the game's emails, like friend nudges and group-game invites.
• Klaviyo — marketing emails if you've opted in, emails about your claims and codes, and a script on wyrdo.com that notes which products you look at, so our emails can be about things you actually like.
• Google — our email inbox, where your messages and claims land.
• Apple and Google — if you sign in with them, and to deliver push notifications.
• Analytics and advertising partners on wyrdo.com — see section 7.

We may also share information when the law requires it, to protect someone's safety, or to protect our rights, and with a buyer if WYRDO or its assets are ever sold (they'd have to respect this policy). When you publish a post on a social platform, that platform's own privacy policy applies to it.

6. Our relationship with Shopify

Our store is hosted by Shopify, which also collects and processes personal information about how you use the store. Information you submit may be shared with Shopify and third parties in other countries so they can provide and improve the store.

Shopify also powers some features, like personalised recommendations, that use data from your interactions across different Shopify merchants. For that processing, Shopify is the controller and handles your rights requests about it. You can find out more at shopify.com/legal/privacy or exercise your rights at privacy.shopify.com.

7. Cookies, analytics and ads

On wyrdo.com (the store)

The store uses cookies: small files on your device that help the site remember your cart and preferences, understand how people use it, and show you relevant ads. Klaviyo's script also remembers the products you look at, so if you've signed up for our emails, they can be about stuff you actually like. If you're in the UK or EU, the store asks before it sets cookies that aren't essential. You can also manage or block cookies in your browser settings, though turning them off may break parts of the site.

We and our analytics and advertising partners may use your browsing and purchase activity on the store to measure our ads and show you WYRDO ads on other platforms. This can include your email address or phone number, scrambled (hashed) so the platform can match you. Under some US state laws this can count as “sharing” personal information for targeted advertising. You can opt out:

• on our Your Privacy Choices page;
• by visiting the store with the Global Privacy Control signal turned on, which we treat as an opt-out for that browser;
• by emailing hey@wyrdo.com; and
• for marketing emails, with the unsubscribe link in any of them.

In the game (the app and play.wyrdo.com)

The game has no ads and no advertising cookies or trackers. It keeps a few things in your device's storage so it works: your device ID, your settings, and choices like whether you've seen the intro tour and your analytics choice. The in-game events described in section 1 go to PostHog, our analytics provider. On play.wyrdo.com, PostHog also keeps a first-party cookie and a local-storage entry so it can recognise your browser between visits.

Your choice: if you're in the UK or EU, the game asks whether we can collect these events, and only collects them if you say yes. Everywhere else they're on unless you switch them off. Anyone can switch them off, or back on, any time in You → Settings (playing without an account? Tap Share usage data at the bottom of the home screen), and switching them off also stops crash reports from your device. On play.wyrdo.com, if your browser sends a “Do Not Track” signal, we don't collect these events at all.

8. Where your information goes

We're based in Australia, but most of the providers in section 5 store and process information overseas, mainly in the United States and Canada, and sometimes in other countries where they operate. Before we disclose your information overseas, we take reasonable steps to make sure it will be handled in line with the Australian Privacy Principles, including through our contracts with those providers.

If your information comes from the UK or the European Economic Area, we transfer it only where the destination has been found to protect it adequately (for example, to a US provider certified under the EU–US Data Privacy Framework and its UK extension) or under recognised safeguards such as the European Commission's Standard Contractual Clauses and the UK Addendum to them. Contact us for more detail.

9. How long we keep it

• Your game account: for as long as you have it. When you delete it (You → Settings → Delete account, or see play.wyrdo.com/delete-account), we delete your profile, name, email, comments, chat messages, friends and sign-in straight away, except anything we need to keep under “Reports and moderation records” below. Your past answers stay in the global totals but are no longer linked to you. We also delete your analytics profile and remove you from our email list.
• Guests: your answers are linked only to a random device ID, not to your name or email. Deleting the app, or clearing this site's data in your browser, breaks that link for good.
• Orders: for as long as we need them to deal with your order, and then for at least five years, because Australian tax law says so.
• Program claims: your claim details for as long as we need them to run the program and stop people claiming twice. Footage and files you've sent us, and copies of posts we've featured, for as long as we use them, which can be indefinitely.
• Marketing emails: until you unsubscribe. After that, we keep a record of your opt-out so we don't email you again.
• Analytics events: only as long as they're useful for improving WYRDO, and they're deleted with your analytics profile if you delete your account.
• Crash reports: about 90 days.
• Reports and moderation records: as long as we need them to keep WYRDO safe, for example to stop a suspended player coming back.

Copies in our providers' routine backups are overwritten on their normal backup cycle. When we no longer need information, we delete it or de-identify it.

10. How we protect it

We take reasonable steps to protect your information from misuse, interference, loss, and unauthorised access, change or disclosure. Everything travels encrypted (HTTPS), payments go through Shopify's secure checkout, and only the people who need your information to do their job can see it. No security is perfect, though, and information sent over the internet is never 100% secure, so please don't send us sensitive information through unsecured channels like regular email.

11. Your rights and choices

Things you can do yourself, any time:

• change your display name or email in the game (You → Settings);
• switch analytics, nudge, invite and result emails, and any type of push notification off in Settings, or turn notifications off in your device settings;
• block players, and report content you think breaks the rules;
• unsubscribe from marketing emails with the link in any of them;
• delete your game account (You → Settings → Delete account).

Wherever you live, you can ask us for a copy of your information, to correct it, or to delete it, and we'll do it unless the law says we have to keep it. Depending on where you live, you may also have the right to:

• access the personal information we hold about you, and get a copy;
• correct anything that's wrong or out of date;
• delete your information, subject to what the law requires us to keep;
• receive your information in a portable format, or have us send it to someone else;
• object to or restrict how we use it, including anything we do based on our legitimate interests;
• withdraw your consent where we rely on it, without affecting what we did before you withdrew it;
• opt out of targeted advertising and of the “sale” or “sharing” of your personal information (see section 7).

These rights cover footage that shows you, too, even when we own the footage itself, and anyone who appears in footage someone sent us can ask us to take it down. To exercise any of them, email hey@wyrdo.com. We may need to confirm it's really you first, and you can have an authorised agent make a request for you. We'll respond within 30 days, and if a request is complicated and will take longer, we'll tell you why. If we say no, we'll explain why, and if you're in a US state that gives you the right to appeal, you can appeal by replying to our answer. We won't treat you differently for exercising any of these rights.

We don't ask for sensitive information, like your health, sexuality, religion, politics, precise location or government ID. Some questions go there, so think before you share that sort of thing in a comment or chat. We don't sell personal information, including the personal information of anyone under 16.

12. Complaints

If you're unhappy with how we've handled your personal information, please tell us first at hey@wyrdo.com. We'd genuinely like the chance to sort it out, and we'll reply within 30 days.

If you're not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au). In the UK, you can complain to the Information Commissioner's Office (ico.org.uk). In the EU, you can complain to your local data protection authority (listed at edpb.europa.eu).

13. Age

The WYRDO game is for players aged 16 and over and isn't made for anyone younger. In US states where the law requires it, the app checks your age range with Apple or Google before you play (see section 1). If we find out someone under 16 has an account, we'll close it and delete their information. Think that's happened? Tell us. Some WYRDO card games are for adults only (18+). We don't knowingly collect personal information from children under 13. If you send us footage that shows anyone under 18, you're confirming their parent or guardian agreed to it. If you think a child has given us their personal information, contact us and we'll delete it.

14. Links to other sites

Our store and game link to other sites and apps, like social media. Once you leave WYRDO, their privacy policies apply, not ours, so check them before handing anything over.

15. Changes to this policy

We may update this policy, for example if we change how WYRDO works or the law changes. The current version will always be here, with the date it was last updated at the top. If a change is significant, we'll also tell you about it, for example in the game or by email.

16. Contact us

Questions, requests or complaints about your personal information? We don't have a separate data protection officer, so get in touch with us directly:

• Email: hey@wyrdo.com
• Post: WYRDO Pty Ltd (ABN 18 612 282 907), PO Box 184, Balmain NSW 2041, Australia
• Web: wyrdo.com and play.wyrdo.com

Love from a couple of freaking WYRDOs in Sydney.