Privacy policy
This page explains what personal data PlayMoh processes, why, how long it is kept and what rights you have. We only collect what the games need to work, and we never sell data.
Controller and contact
PlayMoh is the controller for processing on playmoh.com, playmoh.se, the sign-in service auth.playmoh.com and PlayMoh's games, currently Secret Santa and Rolehunt (rolehunt.strandbrink.se).
What we process and why
PlayMoh account
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email address, name, password (stored as a hash) or passkey, whether the email is verified | Creating an account and signing in | Contract | Until you delete the account |
| Game spaces, memberships and roles | Letting you and other administrators manage games | Contract | Until the account or space is deleted |
| Email address of people you invite | Sending the invitation | Legitimate interest | Invitations are valid for 7 days |
| Sign-in events in the sign-in service (time, IP address and browser) | Security, e.g. detecting intrusion attempts | Legitimate interest | As long as the account exists |
| Sign-in session and security events (e.g. that an account was deleted) | Security and abuse prevention | Legitimate interest | Sessions at most 12 hours; events are kept without name and email once the account is deleted |
You can delete your account yourself under “Delete account” while signed in. This deletes the sign-in account and removes your name and email from PlayMoh.
Purchases
If you buy something through PlayMoh, payment is handled by Paddle, which acts as reseller and is independently responsible for payment details. We receive information about the purchase (what was bought, email address and status) so we can activate it. It is kept while the purchase is valid and afterwards for as long as accounting rules require.
Secret Santa
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Participant names and exclusions entered by the organizer, the draw itself and single-use links | Running the draw and showing each participant their recipient | Legitimate interest (the organizer's and participants' interest in a working draw) | Until an organizer deletes the group; deleted groups are purged after 30 days and groups without activity are deleted automatically after 13 months |
| Activity log: which organizer did what and when, and for recipient reveals a coarse device description (e.g. “iPhone · Safari”) | Making cheating detectable, since organizers can also be participants | Legitimate interest | |
| Email address of invited co-organizers | Sending the invitation and linking it to the right account | Legitimate interest | As long as the group |
Participants don't need an account. The recipient is also stored locally on the participant's own phone (see cookies). IP addresses are not stored; they are only held in memory for a minute to limit abuse of the codes.
Rolehunt
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Game masters and administrators: email address, username, name and password (as a hash) or a link to the PlayMoh account | Sign-in and permissions | Contract | Until the account is removed |
| Participants: name, team, optional profile picture, guesses, scores and game events | Running the game and showing results | Legitimate interest (the game master's and participants' interest in a working game) | Until the game master resets or deletes the game |
| Sign-in attempts: time, username or participant, IP address and whether it succeeded | Security and protection against guessing passwords and game codes | Legitimate interest | 90 days |
| Notification subscription (an address from the browser's push service) | Sending notifications to game masters who turned them on | Consent (you turn it on yourself) | Until notifications are turned off |
If the game master turns on AI judging of guesses, the role's name and description and the text of the guess are sent to the AI provider the game master chose (OpenAI or Anthropic), using the game master's own API key. Participant names are not sent.
Providers that process data for us
PlayMoh, the games and the sign-in service run on servers we operate ourselves. We use the following providers when needed:
- Mailtrap – sends email (verification, password reset, invitations).
- Paddle – payments, if you buy something.
- OpenAI or Anthropic – only if a game master turns on AI judging in Rolehunt.
- Google – only if a game master casts Rolehunt's TV view to a Chromecast.
- The browser's push service (e.g. Apple, Google or Mozilla) – delivers notifications to game masters who turned them on.
Some providers may process data outside the EU/EEA, for example in the United States. Such transfers rely on the European Commission's adequacy decision (EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.
Security
All traffic is encrypted (HTTPS). Passwords are only stored as hashes, and you can sign in with a passkey. Access to the databases is restricted, and the application cannot change or delete Secret Santa's activity log after the fact.
Your rights
You have the right to know what data we hold about you and get a copy, have incorrect data corrected, have data erased, restrict processing, object to processing based on legitimate interest, and receive data you provided in a machine-readable format. Where you gave consent, you can withdraw it at any time.
Contact gdpr@strandbrink.se and we will reply within one month. If you are in a Secret Santa group or a Rolehunt game, you can also ask the organizer to remove or change your name.
If you are unhappy with how we process your personal data, you can lodge a complaint with the Swedish Authority for Privacy Protection (IMY), imy.se, or the data protection authority where you live.
Changes
We update this policy when we change how we process personal data. Significant changes are announced on the website.
Last updated 14 November 2026.