Legal

Privacy Policy

Last updated: September 19, 2026

What We Collect

We collect minimal data to keep the app running smoothly:

  • Device identifier - a randomly generated UUID stored on your device. This is not linked to your identity. It is used for crash reporting, game statistics, and to attribute chat messages and reports so that abuse can be acted on.
  • Crash logs and diagnostics - sent to Sentry when the app encounters an error. These include device model, OS version, and stack traces. No personal information is included.
  • Game statistics - win/loss records and roles played, stored on our server and associated with your device UUID.
  • Usage events - anonymous counts of which parts of the app get used: the app opening, which game mode you choose, and when a game starts and ends, with how many players it had, how long it ran and which roles were dealt. We also count when a role card is opened, in the app or on this website, so we can tell whether the QR codes are useful. These counts never include names, chat or anything else typed during a game. Chat is covered separately below.
  • Chat messages - in an online game, what you type in chat and the note you leave behind when you die are stored on our server together with your device UUID. We keep them so that reports of harassment or abuse can be acted on. They are deleted after 5 days. If a report from that game leads to a suspension, that game's messages are kept for 7 days so the suspension can be reviewed. Chat is never used for advertising and never sold. The only place a message goes is the translation service described below, and only when a player reads in another language.
  • Notification token - if you turn on game alerts for an online game, your device's notification token is stored with your device UUID and your chosen language, so we can tell you when your game is starting. The token is issued by Expo and the alert is delivered through them. An alert only ever says that a game is starting - it never contains names or anything typed during a game. Turn alerts off in your system settings and the token stops working; we delete it once it does.
  • Country - when you play online or join a narrated game, our server records the two-letter country code of your connection (for example "GB" or "US"), so we can see roughly where the game is played. Your IP address is never stored. Games you run entirely in person never reach our server at all, so they carry no country.

What We Don't Collect

We do not collect names, email addresses, phone numbers, photos, contacts, or any other personal information. We never store your IP address, and we never ask for or receive your precise location - the two-letter country code above is the only thing we know about where you are. There are no user accounts. A display name you choose in-game is kept only as part of a chat record or a report, and is deleted along with it.

Third-Party Services

Chat can be shown to each player in their own language. To do that, the text of the message - and nothing else, never your device UUID and never your display name - is sent to Microsoft Azure AI Translator, or to Cloudflare Workers AI when Azure is unavailable, which sends the translation back. We do not store translations.

Data Retention

Crash logs are automatically deleted by Sentry after 90 days. Chat messages and death notes are deleted after 5 days, or after 7 days when a report from that game led to a suspension. Notification tokens are kept until they stop working, and are deleted once they do. Translations are not stored: a translated line sits in the server's memory only for the rest of that game, so the same message is not translated twice, and goes when the game ends. Game statistics are retained as long as the service is active. Since there are no user accounts, you can reset your data by reinstalling the app (which generates a new device UUID).

Reports and Suspensions

If enough different players report the same device, our system can suspend it from online play automatically, before anyone has looked at it. Suspensions last 7 days, then 30 days, then permanently. It works this way so a table is protected from harassment straight away rather than days later. A report stores the category chosen, anything the reporter typed, the reported player's in-game display name, and both device UUIDs.

You can appeal a suspension from inside the app. A person reads the appeal, you can give us your side of it, and the decision can be reversed.

Children's Privacy

This app is not directed at children under 16. We do not knowingly collect data from children.

Changes

We may update this policy from time to time. Changes will be reflected on this page with an updated date.