Privacy
Policy
The short version: we collect what the game needs and nothing else. No ads, no trackers, no analytics scripts, no selling or renting your data. A guest gives us a display name. An account adds an email. We keep your scores so you can see them. You can delete it all from your card page.
1. What we collect
Guests (no account). The display name you type, the head shape and colour you pick, the face you draw (stored as pen strokes), your answers, bets, wagers and mini-game results, your score and rank, and the room and venue you played in. A random seat token is kept in your phone's browser so a reload brings you back to the same seat. We do not know who you are.
Accounts. Your email address, the name on your card, your avatar choices, and the history of your rounds: scores, ranks, answers by category, streaks, mini-game places, wagers, venues, badges, XP, arcade scores and the friends you add. Your card can be shared by a code you choose to give out; the shared card shows your name, avatar and stats, never your email.
Hosts. Your email, the rooms you open, the venues you name, the question packs, images, audio and video you upload, and the badges you create.
Technical. Your IP address, for rate limits on sign-in links and for the service's security logs at our hosting provider; the kind of browser you use; timestamps of what you did in a room. The room keeps an event log of a night (joins, answers, scores) so results can be rebuilt and audited.
2. Cookies and storage
- tt_session: one cookie, set only when you sign in, so the site knows it is you. It is HttpOnly, lasts 90 days, and holds a random id, not your email.
- Browser storage: your seat token for the current room, your last room code and small conveniences like a collapsed panel. These stay on your device and are never sent anywhere but to the room you are in.
- No advertising cookies, no third-party analytics, no fingerprinting. We do not use Google Analytics, pixels or tag managers.
3. How we use it
- To run the game: show your name and avatar on the room's screens, score you, show the board.
- To keep your stats and badges on your card, if you have an account.
- To send you a sign-in link when you ask for one. We send nothing else by email unless you write to us.
- To keep nights fair and the service up: rate limits, abuse prevention, debugging.
We do not sell, rent or share personal data for advertising. We do not profile you across other sites.
4. Who sees it
- The room. Everyone in a room sees your display name, avatar, rank and score on the big screen and on their phones. That is the game. Pick a name you are happy to show a bar.
- The host. A host sees the room's players, their names, answers and scores, and can rename, hide a face or remove a player.
- Friends. Someone who adds you by your card code sees your card and your head-to-head record.
- Our providers. The service runs on Cloudflare (Workers, Durable Objects, D1, R2) and sends email through Cloudflare's email service. Data is processed on Cloudflare's network, which stores it in the United States and may process requests at edge locations worldwide. Cloudflare acts on our instructions.
- The law. We disclose data if a law, court order or safety emergency requires it.
5. How long we keep it
- Sign-in links: 15 minutes to use, deleted within a day.
- Sessions: 90 days, or until you sign out or delete your account.
- Room event logs and results: kept so stats and audits work. Rooms can be closed by their host; closed rooms stop accepting players but their results stay with the players' cards.
- Guest results: kept with the night they belong to, under the display name only.
- Account data: until you delete the account. Deleting removes your email, name, avatar, friends, badges, XP and the link between you and your rounds. Backups clear within 30 days.
6. Your choices and rights
- Play as a guest: no email, nothing kept that identifies you.
- Change your name or avatar between rounds from your phone's menu.
- Delete your account from your card page at tabletoptrivia.party/me, or email us.
- Ask us what we hold about you, ask for a copy, or ask us to correct or erase it: hello@tabletoptrivia.party. We answer within 30 days. This covers rights under the GDPR, the UK GDPR, the California Consumer Privacy Act and similar laws. We do not sell personal information and have not in the past twelve months, so there is nothing to opt out of.
7. Children
The service is for venues and adults. We do not knowingly collect personal data from anyone under 13. Accounts are for people 18 and over. If you think a child has given us data, email us and we will delete it.
8. Security
Sign-in links work once and expire. Passwords do not exist here, so they cannot leak. Session ids and link tokens are stored hashed. Host actions are checked on the server on every call. Traffic is encrypted in transit. No system is perfect; if we learn of a breach that affects you, we will tell you.
9. Changes
When this policy changes, the date at the top moves. Big changes get a note on the home page.
10. Contact
Crate Creatives LLC · hello@tabletoptrivia.party