← Bingo 2027 · Termos · Reembolso · Terms (EN) · Refunds (EN)
The controller is José Covas Education Academy, Lda, a Portuguese private limited company (sociedade por quotas), company and tax number (NIPC) 519 093 500, with registered office at Avenida Engenheiro Duarte Pacheco, Torre 1, Piso 2, Escritório 10, 1070-101 Lisboa, Portugal. Privacy contact: academy@josecovas.com. Telephone: +351 962 802 463.
Board metadata: display name, timezone, country, hashed owner and recovery tokens, public slug. Squares: text (up to 80 characters) and an optional nickname. Abuse tools: reports, blocked nicknames, short-lived hashed rate-limit keys. Event counters only — no square content in analytics. We do not require an account or an email address.
Storage: a Cloudflare D1 database on our account (tables prefixed bingo_*). Legal basis: performance of the service you request when you create or write on a board (art. 6(1)(b)) and legitimate interest in stopping abuse (art. 6(1)(f)).
Forms are protected by Cloudflare Turnstile, which checks the browser for signs of automated abuse when you create a board, propose, accept or reject, cross off, report, block or recover. Cloudflare acts as our processor for this check.
No sale of data. Friend proposals stay hidden until the owner accepts. We do not use Cloudflare Web Analytics, advertising or any other tracking tool.
Creating and using a board is free, and this site does not collect payment data. If you buy an optional extra (the printable PDF or Group bingo, €3 each), payment happens in the checkout of Paddle.com, our reseller and Merchant of Record: Paddle receives your payment and billing data (e.g. name, email, country and card details) and processes it as controller under Paddle's privacy policy. We never see or store card data; Paddle shares with us only what is needed to deliver the purchase, handle refunds and give support (email, country, product and amount), and we use it only for that. Legal basis: performance of the purchase contract (art. 6(1)(b)).
Bingo 2027 is intended for users 16+.
This site is hosted on Cloudflare Pages. Cloudflare, as our hosting and security processor, may process technical data for each request (IP address, user-agent, URL, time, status code) to deliver the page and prevent abuse, usually for no more than 30 days unless an incident must be investigated. Legal basis: legitimate interest in keeping the site available and safe (GDPR art. 6(1)(f)).
You may request access, rectification, erasure, restriction, portability (where applicable), object to processing based on legitimate interest, and withdraw consent. These rights are not absolute. Write to academy@josecovas.com. You may also lodge a complaint with the Portuguese supervisory authority, the CNPD (cnpd.pt).
See also the terms (PT · EN) and the refund policy (PT · EN).