Privacy Policy

This Privacy Policy tells you what to expect when Wink Back, Inc., also known as "the Go Game" and "Weve" ("we", "us", "our"), collects personal information about you. This Privacy Policy covers our marketing site atwww.thegogame.com(our "Marketing Site"), the platform on which we run our games, located atplay.thegogame.com("Breadcrumb"),weve.co("Weve"), and our internal CRM platform together with the third-party integrations we operate from it.

Information Collection

We collect information from you when you browse pages, complete a form, participate in a game using Breadcrumb or Weve, or otherwise interact with our Services.

When you fill out a form on our website, we may ask you for your name, email address, phone number, and other contact details. When you play a game on Breadcrumb, you may be asked to provide limited information including an email address and non-identifying information required to run the game. You may visit our Marketing Site anonymously. However, when you fill out a form or participate in a game on Breadcrumb, you are not anonymous to us.

We may also automatically receive and record information on our server logs from your browser, including your IP address and the page you requested. On Weve, we collect first and last name. Passwords are never stored locally as we use Google Cloud services for Authentication.

Use of Your Information

Any of the information we collect from you may be used for the following purposes:

• To improve our online offerings. We continually strive to improve our website offerings based on the information and feedback we receive from you.
• To improve customer service. Your information helps us to more effectively respond to your customer service requests and support needs.
• To host games. We will use the information you provide to run games in which you and others participate. Your information, whether public or private, will not be sold, exchanged, transferred, or given to any other company other than the Go Game for any reason whatsoever, without your consent, other than for the express purpose of completing a game in which you participate or otherwise completing a transaction that you initiate.
• To operate our internal CRM and finance reporting, including reconciling expenses, invoices, and customer records across the third-party platforms we have authorized integrations with (see "Third-Party Integrations" below).

Third-Party Integrations

Our internal CRM connects to third-party business platforms when an authorized Go Game administrator enables those connections. We access and store data from these platforms only as needed to provide the integration features we have enabled, and we do not sell, rent, or share that data with unrelated third parties, and we do not use it for advertising. An administrator may revoke our access at any time from the third-party platform or by clicking "Disconnect" in our CRM settings, which deletes the stored authentication tokens. Current integrations include:

• QuickBooks Online (Intuit). Connected via OAuth 2.0 with read access to financial records — customers, classes, accounts, purchases, bills, journal entries, and related metadata — used to associate expenses with the corresponding events inside our CRM for internal reporting.
• Google Workspace (Calendar & Gmail). Connected via OAuth 2.0 to schedule events on staff calendars and to send and track event-related email.
• HubSpot. Synchronizes contacts, companies, deals, meetings, tasks, and notes between our CRM and HubSpot.
• Stripe. Processes payments for self-service checkouts; payment card data is handled directly by Stripe and is not stored on our servers.
• SendGrid. Delivers transactional and operational email on our behalf.
• Slack, Airtable, Weve API, and Google Analytics 4 for internal notifications, feedback collection, session enrichment, and aggregate web-traffic reporting.

Information Security

We implement security measures commensurate with the sensitivity of the data we collect. Passwords are encrypted during storage and transmission. Other information may be stored in clear text. We do not accept sensitive information such as credit card numbers, social security or tax identification numbers, or other non-public personal information on the Marketing Site, Breadcrumb, or Weve. We do take credit cards inside of Client Portal, which are not stored locally but are encrypted and transmitted through Stripe and QuickBooks fulfillment. Data accessed through authorized third-party integrations is transmitted over encrypted connections (HTTPS/TLS) and protected at rest by role-based access controls inside our CRM.

Cookies

We use cookies on our Marketing Site and on Breadcrumb. Cookies are small files that a site or its service provider transfer to your computer's hard drive through your web browser (if you allow) that enable the site to recognize your browser and capture and remember certain information.

We use cookies to help us keep track of the information you submit on forms, to identify and track your progress in games, to understand and save your preferences for future visits, and to compile aggregate data about site traffic and site interaction so that we can offer better site experiences and tools in the future. We may contract with third-party service providers to assist us in better understanding our site visitors. These service providers are not permitted to use the information collected on our behalf except to help us conduct and improve our business.

Third-party cookies from Google Analytics are used to determine which site to measure, distinguish unique users, remember the number and time of previous visits, and remember traffic-source information. Other cookies we set are used to authenticate logged-in users (Breadcrumb's remember_token and session), to maintain real-time game connections (PubNub's pnctest), and to protect form submissions against forgery (csrftoken).

We sometimes embed photos and video content from websites such as YouTube. As a result, when you visit a page with embedded content, you may be presented with cookies from those websites. We do not control the dissemination of these third-party cookies. You should check the relevant third-party website for more information.

Controlling and Blocking Cookies

If you wish to restrict or block the cookies set by the Go Game, or any other website, you can do this through your browser settings. The "Help" function within your browser should tell you how. Alternatively, you may wish to visitwww.allaboutcookies.orgfor comprehensive information on cookies and how to manage them. For mobile browsers, refer to your handset manual.

Please be aware that restricting cookies may impact the functionality of the Marketing Site and will prevent you from being able to effectively use Breadcrumb to participate in a game. You may contact us without the use of cookies by phone at +1.415.734.9330 or by email atinfo@thegogame.com.

Information Sharing and Disclosure

We will not sell your personal information to anybody.

We may disclose personal information about you to our business associates and other professional advisers, our employees and agents, suppliers and providers of goods and services (including the third-party integration platforms listed above), and regulatory authorities, and as required by law or regulation.

Your personal information may be transferred to the above individuals and organizations located in countries which may not provide legal protection of information equivalent to that in the jurisdiction from which you are visiting this site. Details of the individuals, organizations, and countries involved in your case will be provided upon request.

Access to Your Information

You have the right to request a copy of the information we hold about you. You can make such a request by emailing or writing to us using the contact details below. We require evidence of your identity in the form of a copy of your passport, driver's license, or birth certificate. Once we have received evidence of your identity we will commence fulfilment of your Subject Access Request and respond within 30 calendar days. Agents acting on behalf of an individual must also provide us with a letter of authority signed by the individual concerned that authorizes you to receive personal data on their behalf.

Other Important Information

This policy has been developed with the recognition that internet technologies are rapidly evolving. This policy is subject to change and any such changes will be posted on this page. We want you to be aware that the Go Game is not responsible for the content or the privacy policies of websites to which there may be a link.

We only retain your personal information for as long as is necessary for the purposes described above. If you have requested that we send you material of interest, we will cease doing so if you so request.

Children's Online Privacy Protection Act Compliance

We comply with the requirements of COPPA (Children's Online Privacy Protection Act); we do not collect any information from anyone under 13 years of age. Our website, products, and services are all directed to people who are at least 13 years old or older.

California Online Privacy Protection Act Compliance

Because we value your privacy, we have taken the necessary precautions to comply with the California Online Privacy Protection Act. We therefore will not distribute your personal information to outside parties without your consent.

Getting in Touch with Us

If you have any questions or concerns about privacy and security or the handling of your personal data, or if you wish to make a request to access your information, please contact the Go Game Data Protection Officer in writing at 2232 McKinley Ave, Berkeley, CA 94703, by phone at +1.415.734.9330, or by email atinfo@thegogame.com.

We reserve the right to make changes to this policy. Any changes to this policy will be posted.