Privacy policy

The short version

• No account, no email address, no password, no payment details — ever.
• No advertising, no ad networks, and nothing sold or shared with a data broker.
• No cookies used for tracking you.
• A room and everything said in it is deleted after the game ends.

What you give us

A display name. Whatever you type when you join. It is shown to everyone else in the room, so pick something you are happy for them to see — it does not need to be your real name and we never check.

What you do in the game. Answers, votes, guesses, drawings and chat-style prompts, for as long as the round needs them. Most of this lives only in the server's memory while the game is running. A few games that pass work between players — the ones where you write a line or draw a panel and hand it on — keep it until the game ends so it can be shown back to the room, and no longer.

Nothing else. We do not ask for your age, location, contacts, camera, microphone or address book, and there is no field anywhere on the site that asks for a real identity.

What your browser stores

Three things, all in your own browser's local storage rather than in a cookie, and all readable and clearable by you at any time:

• A session token. A signed token that proves you are the player who joined, so a refresh or a dropped connection puts you back in your seat instead of kicking you out. It expires on its own.
• A random browser id. A meaningless random string, created on this device. Its only job is to make a host's kick stick, so that someone removed from a room cannot walk straight back in under a new name. It is not linked to anything about you and never leaves the game.
• Which page you arrived on. So that when a room gets created we can tell which page sent the group here, in aggregate. No browsing history, just the first page of this visit.

Clearing site data in your browser removes all three and costs you nothing except your seat in a room you are currently in.

What the server keeps, and for how long

Rooms. A room — its code, its player names and its game state — is deleted after roughly 45 minutes of inactivity. Nothing from it survives: no transcript, no record of who played with whom, no leaderboard you can look up later.

Counts, not content. To know whether a game is worth keeping we record round-level events: a game started, a round ended, how long it lasted, how many players were in it. These deliberately carry no display names and no IP addresses, and they are not joinable back to a person. Raw rows are deleted after 90 days; only anonymous daily totals outlive that.

Errors. When something breaks, the error message and the code path it came from are recorded so it can be fixed. Deleted after 30 days.

IP addresses. Your IP is used, in memory and in the moment, to cap how many connections and how many actions one source can make — the mechanism that stops one script ruining everyone's game. It may appear briefly in server logs, which rotate. It is never written into the analytics above and is never used to profile anyone.

Third parties

There is no Google Analytics, no Meta pixel, no ad network and no social embed on this site. Fonts are served from our own domain rather than fetched from a font CDN, so loading a page does not tell anyone else that you did.

If aggregate visitor statistics are enabled on this deployment they come from a self-hosted, cookieless analytics install — pageviews and referrers with no cross-site identifier and no profile. The only other party involved in serving you this page is the hosting provider that runs the server.

Children

Most of the catalogue is written to be family-safe, and hosts can switch on a family mode that filters language. A small number of games are adult-only: they are unlisted, left out of every browse page, and their stronger content sits behind a toggle a host has to turn on deliberately. This site is not directed at children under 13, and because we ask for no personal details we do not knowingly hold any about them.

Your rights

The usual rights — access, correction, deletion, portability — exist, but there is very little for them to reach: we hold no account and nothing keyed to you. In practice, leaving a room and clearing your browser's storage for this site removes everything connected to you. If you want a specific room dealt with sooner, get in touch with the room code and we will delete it.

Changes, and who to ask

If this policy changes, the date at the top changes with it, and it is only bumped when the wording actually does — not on every deploy.

Questions about any of the above go through the contact page. See also the terms of use.