Privacy Policy
Who we are & scope
Thesara Space d.o.o. ("Thesara", "we") operates the Thesara platform available at thesara.space and acts as the data controller for all visitors, creators and players. We limit processing to the data that is necessary to create or manage your account, publish and play browser apps, provide support, and meet legal obligations.
Information we collect
When you sign up we store your email, display name, profile photo (if provided) and basic usage telemetry so we can secure your account and keep the service reliable. Publishing or editing apps requires us to process the content you upload (titles, descriptions, assets, bundles, preview images) as well as metadata such as room codes or leaderboard states you create. If you purchase paid plans or add-ons we keep subscription identifiers, invoice references and tax-relevant details; payment card data is handled directly by our payment provider.
Processors & integrations
To run Thesara we rely on a short list of trusted partners: Firebase and Cloudflare store authentication records, databases, media and backups; Stripe processes payments and sends us non-sensitive billing metadata; Redis/BullMQ powers build queues; our translation feature can call an LLM provider to generate optional localisations; transactional email is delivered via an SMTP relay; advertising inventory is served through Google AdSense if you consent to it. These partners only receive the data required for their function and they all commit to appropriate contractual safeguards.
Google AdSense & cookies
Display ads are offered only to visitors who have not purchased our No Ads plan or similar entitlements. Before we load any Google script we ask you to choose whether personalised ads are allowed. If you decline, AdSense runs in non-personalised mode (npa=1) and shows contextual placements based on the page content. Users who buy No Ads or access apps through the Play sandbox do not load the AdSense script at all.
Storage & retention
Account data remains stored while you maintain a Thesara profile. App bundles, previews and storage namespaces stay online until you delete the related listing, clear the data yourself, or request removal through support. Billing records are retained only for the period required by tax and audit regulations, and system logs used for security are rotated on a regular schedule.
Your controls
You can update or delete listings, assets, rooms and storage data you control, adjust consent preferences through the banner, disable ads by purchasing No Ads, and manage account information from settings. If any action is unavailable in the interface, contact us and we will make the change manually.
Your rights
Depending on your location you may have the right to request access, correction, objection, restriction or deletion of personal data. We will honour verified requests within the timelines required by law. Please write from the email associated with your account so we can confirm ownership before acting.
Contact
For privacy questions or to exercise your rights email reports@thesara.space. We aim to answer within a few business days.