Privacy Policy
Last updated: 2026-04-28. Working draft pending counsel review.
1. Who we are
DecKid ApS, Copenhagen, Denmark ("we") operates Biggie (working name "RapBattle") under the LabelKid umbrella. We are the data controller under the EU General Data Protection Regulation (GDPR) for personal data processed via this service.
2. What data we collect
- From TikTok Login: your TikTok stable identifier (open_id), display handle, avatar URL, and follower count, with your consent at sign-in.
- From the Display API: public metadata about videos you submit as entries — video ID, share URL, sound ID, posted timestamp, and engagement counts (views, likes, shares, comments, saves).
- From your in-app activity: bets placed, predictions, Bars currency transactions, lounge messages, notification preferences, age you provide at signup.
- Technical data: IP address, device, browser, and standard log data.
3. Why we collect it
- To provide the tournament gameplay and prediction features.
- To compute engagement scoring and bracket outcomes.
- To prevent fraud and abuse.
- To send notifications you opted into.
- To meet legal obligations, including age verification.
4. Lawful basis
Consent (TikTok Login, optional notifications) and contract performance (running the gameplay you signed up for).
5. Sharing
We do not sell personal data. We share with: TikTok (for OAuth and Display API calls); our hosting providers (Vercel, Supabase); and legal authorities when required.
6. Retention
TikTok-derived fields are purged within 30 days of deauthorization or account deletion. Aggregate, anonymized statistics may be kept for product reporting.
7. Your rights (GDPR)
You may at any time request access, rectification, erasure, restriction, portability, or object to processing. Contact us at the email below. You may also lodge a complaint with the Danish Data Protection Agency (Datatilsynet).
8. Contact
This is a working draft. Final Privacy Policy will be drafted with Danish counsel before public launch and will replace this version.