Privacy

Last updated: October 2026

Draft. A plain-language summary for testing. Have it reviewed before any public or commercial launch.

What we keep

On each phone: your name, your character's colours and a random player id, saved in the browser so you can rejoin quickly. Clear your browser data to remove them.
In a room (temporary): player names, characters, teams and scores, so people can reconnect. Rooms are deleted when the host leaves.
On the host's screen: best scores and ghost runs for solo games, saved in that browser only.
If you make an account (optional): your username, your password stored only as a salted one-way hash (we can't read it), your character, and how many rounds of each game you have played and won. Your username, character and wins appear on the public leaderboard. Phones keep a sign-in token so you stay signed in; signing out removes it.

What we do not do

No email, phone number, real name or payment details. Accounts are optional and need only a username and a password.
No advertising or tracking cookies.
Phone motion sensors are used only while playing, to steer or aim, and are never recorded.

How the connection works

Phones connect to the host screen directly where possible; otherwise game messages pass through our server (hosted on Cloudflare). Fonts are loaded from Google Fonts.

Remote play

If the host turns on remote play, a live picture of the game is sent to players' phones. It is not recorded.