Privacy notice

Version 2026-10. Applies to bigupscreen.com, the contact form and BigUpScreen studio accounts.

Who we are

BigUpScreen is a trading name of Mick Brennan, a sole trader based in Dublin, Ireland. We are the “controller” of the personal data described here. Contact us about anything in this notice at info@bigupscreen.com.

What we collect and why

Data	Why	Legal basis
Your email address	To sign you in with your password, to send password reset links, and to tell you about your account, e.g. when it’s approved.	Contract
Your name and business or venue name	To set up and manage your account.	Contract
Your plan, shows, the packs and content you request, storage used	To provide the service and apply your plan’s limits.	Contract
Sign-up date, last sign-in date, the date you agreed to this notice	To run and secure the account and to keep a record of your agreement.	Contract; legal obligation
What you create: quizzes, countdowns, settings, images and audio you upload	To show it on your shows. Anything you publish is visible to anyone with your show’s link.	Contract
When you accept the notice before your first request, or for question bank rounds: the account, the login, the email, the time, the quiz and round, the questions, the IP address and browser	To keep a record that the quiz creator checked and accepted responsibility for that content.	Legitimate interests (being able to show who accepted responsibility if published content is ever questioned)
BigUp Live shows, if switched on for your account: your running order, the videos, frames and graphics you upload, and the private key in your stream links	To play your show on your stream. Only people with the private link can open it.	Contract
What you send through the contact form: name, email, venue and message	To reply to you.	Legitimate interests (answering you)
A scrambled (hashed) form of your IP address and email, kept for one hour	To stop abuse, such as someone guessing passwords or requesting hundreds of codes.	Legitimate interests (security)
Scrambled codes made from your email address, business name and internet connection when you sign up	To spot repeat free trials, so we can check them before approving. They can’t be turned back into the original details.	Legitimate interests (preventing misuse)

We don’t ask for, and you shouldn’t upload, sensitive information about yourself or anyone else.

Playing along on your phone

If you play a quiz on your phone at www.bigupscreen.com/play, we keep only what the game needs:

• Your email, to send your sign-in code. We store it only in scrambled form, so we can’t read it back or email you anything else.
• The name you pick, and whether it’s a team, shown on the leaderboard and on the “Playing tonight” list on the venue’s show before the game. Choose a nickname if you prefer.
• Where you’re from, if the show asks and you choose to say: a county or country you pick from a list, shown beside your name. You can skip it or change it. We never use your phone’s location.
• Your answers and scores, to work out the leaderboard. Single answers are deleted after 30 days.
• A short record of each game you play: your points, how many questions you answered, when you joined and left, how you joined (the QR code on the TV, the venue’s link, or typing the code), where you said you’re from, and your phone type (iPhone, Android, tablet or computer, never the model, browser or anything that tells your phone apart from others). It lets the venue see how its quiz is doing and whether players come back. It is deleted after 12 months.
• Prize codes, if you win a game at a venue that gives prizes: your name, where you’re from, your score and when you won, so the staff can check the code. A code expires after 24 hours, and the record is deleted within 7 days.

What the venue sees. The business running the quiz sees reports for its own quizzes: the nickname you picked, where you said you’re from, your phone type, your score, how you joined and how many of its games you’ve played before. It never sees your email. It may share totals with an advertiser (for example “64 players, 41% came back”), and that sponsor report contains no player names.

Why we can. Running the game is the service you ask for when you join. The game records are kept on the basis of legitimate interest: helping the venue run and fund its quiz night, with nothing that identifies you beyond the nickname you chose. You can object at any time by deleting your profile.

Your rights. From the menu on the play page you can download all your data (as a file) or delete your player profile, which removes your name, every score and every game record straight away. You can also email info@bigupscreen.com with the player reference shown after a download, and we’ll send you a copy or delete it within 30 days. You can also complain to the Data Protection Commission (dataprotection.ie).

Emails you ask for (optional)

When you join a quiz, your phone shows two boxes, both unticked: one for emails from the venue running the quiz (quiz nights, prizes and offers), and one for news from BigUpScreen. If you leave them unticked, nothing changes: we still only keep your email in scrambled form.

If you tick one, we keep your email address encrypted so we can send those emails, together with the exact words you agreed to and when. The legal basis is your consent.

• The venue never sees your address. It writes the email in its BigUpScreen studio and we send it. The venue only sees how many players asked.
• Sponsors never get your address. A venue’s email may include an offer from a local business in a box marked “Sponsored”. That business gets nothing about you.
• Stopping is easy. Every email has an unsubscribe link that works in one click, and you can unsubscribe from any list under Email preferences in the menu on the play page. When you unsubscribe, we delete the copy of your address we kept for that list.
• A venue can email its list at most once a day and 8 times a month.

BigUp Live shows

• Twitch chat. If you set a Twitch channel, the stream page reads that channel’s public chat as a guest, without signing in, and counts A, B, C or D answers during a trivia question. It uses viewers’ chat names only inside the page, to count one answer each. Names and messages are never sent to us or stored, and the page never posts in the chat.
• The video helper. The helper you can run on your own computer only shares your video folder with the stream page on that same computer. Your videos and file names are not sent to us.
• What’s on air. Each stream page tells us every few seconds which item it is playing, so the studio can show what’s on air and keep every feed in step. It contains nothing about viewers, and each check-in replaces the last.
• Connect Twitch (Add-ons). If a streamer connects their Twitch channel, Twitch sends us that channel’s follows, subs, gift subs, bits and raids as they happen: the viewer’s display name, the amount and any message they added. We use them to show alerts, move the subathon clock and fill goals. We keep them for 7 days, then delete them. We only read: we never post or change anything on the channel. The streamer can disconnect at any time from the studio, and Twitch’s own settings let them remove access too.
• Clip wall. If a BigUp Live show has a clip wall, we ask Twitch for that channel’s public clips (title, who made the clip, views and length) every few hours and keep the list for up to 2 days. These are public on Twitch already.
• Polls and predictions. During a chat poll the page counts votes inside the page only. For predictions, the page sends us each viewer’s chat name, their pick and the free points they bet, so everyone’s points can be kept across the stream. Points are free, can’t be bought, swapped or cashed in, and are kept until the streamer clears them or deletes the show.

Brag Board, Sweat Sheet, What’s On When and Jukebox Hero shows

• Google reviews. A Brag Board show asks Google for the business’s rating and up to 5 reviews, with each reviewer’s display name as Google shows it. We keep Google’s answer for up to 6 hours to save repeat requests, and show it with credit to Google.
• Gym leaderboards. A gym types in member names and scores. A name only shows on the TV when the gym has ticked that the member said yes. The gym is responsible for asking.
• Song requests. A guest’s phone sends the song, an optional table number and a random number made on the phone (no name, no sign-in). We also keep a scrambled version of the internet address for 24 hours to stop floods of requests. Requests are deleted 2 days after they’re played or turned down. Votes are counted once per phone.
• Shout-outs. A guest’s phone sends the message, what it’s for, an optional name and table number, and the same random phone number. It passes a safety filter, the venue’s DJ decides whether it shows on the TVs, and it’s deleted after 2 days at most.
• Song search. Searches from guests and the DJ go to Deezer’s public song search (Apple’s if Deezer is busy) to find the title, artist and cover art. Nothing about the guest is sent with them.
• ListenBrainz and Last.fm. If a venue switches it on, we read what its own ListenBrainz or Last.fm account is playing, about every 20 seconds while a TV is showing it.

The staff app

• Staff logins. An account holder can make logins for their staff (a username and a password they choose). Staff sign in at www.bigupscreen.com/host. We keep the username, the scrambled password, what the login may do, and when it last signed in.
• What staff did. Each change made in the staff app (for example an offer put on, a room running late, a goal, an urgent message) is logged with the username, the show, what was done and when, so the account holder can see it. The log is kept for 90 days, then deleted.
• Urgent messages. The words of an urgent message are kept only while it’s on the TVs, plus a line in the log above.

Passwords

Account passwords are never stored as written: we keep only a salted, scrambled version (PBKDF2) that can check a password but can’t be turned back into it. We never email passwords. A password reset link works once, for 1 hour.

Cookies

We use three cookies, all strictly necessary, so they don’t need consent, and none is used for tracking: tdc_s keeps account holders signed in for up to 30 days, tdc_h keeps staff signed in to the staff app for up to 14 days, and tdc_p keeps players signed in to play-along for up to 180 days. Signing out deletes them.

TVs and shows

A TV added with a pairing code (at www.bigupscreen.com/tv) also remembers which show or schedule its account set it to play. A TV playing a show keeps a random ID for itself (in the browser’s storage, as tdc_dev) and checks in about once a minute, so the account holder can see which of their TVs are on, what they’re showing, and get an email if one goes off during their opening hours. A check-in includes the show or schedule it’s playing, a short description of what’s on screen, the screen size and the type of device (for example “Fire TV”). It contains nothing about the people watching. The TV also keeps a copy of the screen’s content and pictures so it can keep playing if the internet drops. Account holders can remove a TV from their list at any time, and a TV’s record is deleted with the account.

Who processes it for us

Service	What it does
Cloudflare, Inc.	Hosts the website and stores account data, content and uploads.
Resend	Delivers our emails (password reset links, play-along codes and account notices).
Google (Places API)	Gives a Brag Board show the business’s rating and reviews. Only the business’s Google place id is sent.
Deezer and Apple (song search)	Finds songs for guests’ and DJs’ requests. Only the words typed in the search are sent.
Last.fm	Tells a Jukebox Hero show what the venue’s own Last.fm account is playing, when the venue switches it on.
ListenBrainz (MetaBrainz Foundation) and the Cover Art Archive	Tells a Jukebox Hero show what the venue’s own ListenBrainz account is playing, and gives the album picture, when the venue switches it on.
Anthropic, PBC	Powers BigUpAI. It only receives the theme, topic, film names and notes in a request, the official announcements we turn into ticker stories, or the menu or showtimes you ask it to read, never your account details.

Some of these providers process data outside the EEA (for example in the USA). Where they do, the transfer is protected by the European Commission’s Standard Contractual Clauses or the EU–US Data Privacy Framework. Each provider is bound by a data processing agreement.

How long we keep it

Your account and content	Until you delete your account (or ask us to). Deleting removes your account, shows, history and uploads straight away.
Earlier published versions of a show	60 days, then deleted automatically.
Play-along sign-in codes and password reset links	10 minutes and 1 hour, stored only in scrambled form.
Sign-in sessions	30 days, or until you sign out.
Abuse-prevention counters	1 hour.
Repeat-trial codes	While your account is open, and for 12 months after you delete it (the code for your email only).
Play-along answers and scores	30 days, then deleted automatically.
The “Playing tonight” list on a venue’s show	Names show for 3 hours after you join, and the record is deleted after a day.
Play-along player profile (name)	Until you delete it from the play page menu.
Play-along game records (score, phone type, how you joined, where you’re from)	12 months, then deleted automatically.
Your email for a list you asked to join	Until you unsubscribe or delete your player profile, or the venue closes its account.
What a stream page is playing	Replaced every few seconds, and deleted with the show.
Advert counts on quiz TVs	12 months. They contain nothing about people.
Records of accepting the BigUpAI notice	6 years from the date it was accepted, including after the account is deleted, because it may be needed if a claim is made about published content.
Contact form messages	In our inbox for as long as the conversation needs, and no longer than 2 years.

If you leave an account unused for a long time, we may email you and then close it.

Your rights

Under the GDPR you can ask to access your data, correct it, delete it, restrict or object to how we use it, and take it with you. Two of these you can do yourself in Account & plan: Download all my data and Delete my account. Quiz players can do the same from the menu on the play page: Download my data, Email preferences and Delete my player profile. For anything else, email info@bigupscreen.com and we’ll reply within one month.

If you’re unhappy with how we handle your data, you can complain to the Data Protection Commission in Ireland at dataprotection.ie, or to the authority where you live.

Age

Accounts are for people aged 16 and over, and are meant for businesses, venues and creators. Play-along is also for people aged 16 and over.

Security

Everything travels over HTTPS. Passwords are stored only in salted, scrambled form, password reset links work once for 1 hour, and repeated wrong passwords are locked out. Sessions use a secure, HTTP-only cookie. Each account can only see and change its own shows and uploads.

Changes

If we change this notice in a way that matters, we’ll tell you by email or when you next sign in.