Privacy Policy

Information we collect

We collect account details such as your name and email; organization, venue, host, team, and game information you choose to provide; trivia answers, scores, badges, and event participation; billing identifiers and subscription status from our payment provider; and limited device, browser, IP address, and security-event data needed to operate and protect the service. We do not store complete payment-card numbers.

How we use information

We use information to provide accounts and live games, preserve player and team continuity, manage venue and host access, process subscriptions, send transactional messages, prevent abuse, support customers, improve reliability, and comply with legal obligations. We do not sell personal information.

When information is shared

Public profiles and published venue or host details are visible only when you choose to publish them. During a game, teammates and hosts see the information needed to run that event. We also use carefully selected service providers for hosting, database storage, email, object storage, security, analytics, and payment processing. They may process information only to provide those services or meet legal requirements.

Cookies and analytics

Essential cookies keep you signed in and connect an anonymous player to a game. We use optional Google Analytics and Google Ads measurement only after you allow it. Declining sends no optional tag request or attribution storage. You can withdraw from the control at the bottom of the page, which stops future tags, removes accessible Google measurement cookies (including Google click-attribution cookies), and deletes consented attribution and pending conversion records linked to your signed-in account. We do not use essential session cookies for advertising.

When you sign up through a tagged pricing link, we keep its campaign label with your account and organizations you create. We use this record with billing identifiers to measure which campaigns lead to customers and payments. This campaign record is separate from optional advertising measurement. With consent, we may retain one first-touch source, medium, campaign, content, term, and Google click identifier for up to 90 days with a newly registered account, and only after the server verifies your short-lived consent cookie. We never send names, email addresses, passwords, payment details, game answers, or free-form form text to Google.

Meta (Facebook and Instagram) measurement is on. It uses the same consent choice and applies only if you allow it after the prompt names Meta; an earlier choice that did not mention Meta does not count. We load no Meta script and set no Meta cookie. If you arrive from a Meta ad, we keep that ad's click identifier (fbclid) with your newly registered account for up to 90 days. When your organization makes its first successful paid subscription payment, our servers send Meta one event named GameOnPaidActivation containing that click identifier in Meta's documented format, a random event ID, the time, the address of our billing page (without anything after it), and the browser type your device reported (its user agent) when you started checkout, which Meta requires for an event that happened on a website. We keep that browser type only until the event is sent, and delete it after at most 48 hours in any case. The event has no amount, currency, name, email, phone number, IP address, or account, organization or payment identifier. Withdrawing consent deletes the stored click identifier and browser type and cancels any event not yet sent. An event Meta has already accepted cannot be recalled by us; ask Meta about its handling. Internal and test accounts are excluded.

Retention and your choices

We keep information while your account or an organization you manage is active and for a reasonable period afterward for security, billing, dispute resolution, and legal compliance. Retention depends on the type of record and the circumstances; some shared game, financial, and audit history may need separate review. You may update profile information in the app and request access, correction, export, or deletion through our contact page. We verify requests before acting. Organization owners can export organization records from Reports; exports are paginated and identify their coverage and exclusions. Media bytes, payment credentials, invoices, shared content owned by another organization, and raw audit details are not part of that export. The export does include authored content templates and their versions, media metadata (type, size, purpose, and lifecycle, but not the files themselves), and a billing summary (subscription status, plan, and usage totals). Deletion requests are handled by email: we verify the request and respond within 30 days. An operator follows a documented, audited procedure that removes or anonymises personal data, while some shared game history and financial records may be retained as described above. Disabling an account to contain access does not itself erase its records. We assess any records proposed for retention or removal case by case. See our contact page to submit a request.

Security and children

We use access controls, encrypted connections, protected credentials, audit records, and other safeguards designed for the sensitivity of the information we hold. No system is perfectly secure. The platform is intended for people age 13 or older, and we do not knowingly collect personal information from children under 13.

Changes and contact

We may update this policy as the service changes. Material changes will be announced in the app or by email when appropriate. Questions and privacy requests can be sent through our contact page.