Last updated 12 August 2026
1. Who we are.
Bridge Unlocked is run by NJM Marketing Ltd, Ireland, the data controller for everything described here. The way to reach us is the contact page; a person reads everything. The platform is built and operated with Loco Digital, who act as our processor.
2. What we collect and why.
Your account. Your email address, an optional name, your chosen bidding system, and your locale and timezone. We need these to run your account and to keep your streak honest across time zones.
Your learning progress. Lessons completed, hands played, scores and streaks. This is the product’s core function: it is how the app knows where you are and what comes next.
Payments. Handled by Stripe. We never see or store card numbers; we store your subscription status and your receipts.
Support. Whatever you send us via the contact form. If you use Report a problem in the app, we also receive the small diagnostic bundle sent with your report: the screen you were on, the app version, your browser type and recent error summaries. The dialog shows you exactly what travels before you send it.
Technical. Server logs and error reports, kept short-term for reliability. Each signed-in session also records the IP address and browser it was created from, for security and for your active-sessions list; that record is deleted with the session.
3. Analytics, honestly.
Our analytics are first-party only and run on our own servers. The public site is measured without cookies at all: a daily-rotating hash, no cross-site tracking, no ad networks. The app records product events (like “lesson completed”) under your account or an anonymous id stored in your browser. Nothing is sold or shared for advertising, ever.
4. Legal bases.
Contract, for running your account and subscription. Legitimate interest, for first-party analytics and security. Consent, for the optional reminder and product-news emails, which you can withdraw in Settings any time.
5. Where your data lives.
Our servers are hosted with DigitalOcean in their London data centre, and backups stay on the same server. Email delivery and payment providers will be listed here when live keys are configured.
6. How long we keep it.
- Your account and progress: until you delete your account.
- Analytics events: anonymised when your account is deleted.
- Error logs: rotated on a short schedule.
- Support messages and bug reports: the attached diagnostic context is removed after 90 days, and closed messages are deleted after 12 months.
- Backups: 7 days.
7. Your rights.
You have the right of access, rectification, erasure, portability and objection, and the right to complain to the Data Protection Commission (Ireland). Export and deletion are self-serve in your account page: the export is one file with everything we hold about you, and deletion erases your sign-in, hard-deletes your progress and anonymises analytics events. Deletion is real and permanent.
8. Cookies.
Short version: this site sets no cookies at all, and the app sets only what keeps you signed in. The full list lives on the cookies page.
9. Changes.
We date every revision of this notice at the top of this page. If a change is material, we email you about it.
Draft for review. Legal review before public launch.