Privacy Policy

Last updated: May 2025

1. Data Controller

The controller of personal data processing is BingoNerd, reachable at the email address

2. Data Collected

We collect the following personal data:

Registration data: email address, username, password (hashed)
Purchase data: card purchase history, amounts paid
Shipping data: first name, last name, address, only in case of a win
Technical data: IP address, access logs, session data

3. Purposes of Processing

Data is processed for the following purposes:

User account management and authentication
Provision of the online game service
Payment processing via SumUp
Shipping prizes to winners
Service-related communications (win notifications, event updates)
Compliance with legal and tax obligations

4. Legal Basis

Processing is based on:

Performance of the service contract (art. 31 FADP; art. 6(1)(b) GDPR)
Compliance with legal obligations (art. 31 FADP; art. 6(1)(c) GDPR)
Legitimate interest of the controller for security and anti-fraud purposes (art. 31 FADP; art. 6(1)(f) GDPR)

5. Data Retention

Data is kept for the time strictly necessary for the purposes for which it was collected:

Account data: until account deletion + 30 days
Purchase and payment data: 10 years for tax obligations
Technical logs: 90 days

6. Third Parties

Data may be shared with:

We do not sell or transfer your data to third parties for commercial purposes.

SumUp: for payment processing
Express couriers: for shipping prizes (only in case of a win)
Infomaniak: hosting and cloud infrastructure (CH/EU)

7. Rights of the Data Subject

Under the FADP and the GDPR, you have the right to:

To exercise your rights, write to

Access your personal data
Rectify inaccurate data
Request deletion (right to be forgotten)
Restrict processing
Data portability
Object to processing

8. Cookies

We use technical cookies necessary for the operation of the service (session, authentication, language preference). With your consent, we also use Google Analytics to collect aggregated usage statistics with anonymised IP addresses. You can change your preferences at any time via "Cookie settings" in the site footer.

9. Security

We adopt appropriate technical and organisational measures to protect your data: TLS encryption, passwords hashed with bcrypt, access limited to authorised systems only.