Privacy policy

Last updated: 16 July 2026 (beta)

The short version: playing needs no account and keeps almost nothing. You play with a nickname that lives in memory for the length of a game night and then disappears. An optional account (for the quiz builder) stores just an email, a display name and a hashed password.

What we process

• Player nicknames and scores — held in the server's memory during a game and deleted when the room ends (at most 2 hours after it goes quiet). One exception: if the host is signed in, that game's final results (the pack played, plus each nickname and score) are saved to the host's account so they can look back on past games. Ask us and they're deleted.
• The beta-access cookie (bbgate) — set when you enter the beta password so you don't have to type it again. It contains no personal data (just a signed expiry date) and lasts 30 days. It is strictly necessary to provide the service you asked for, which is why there is no cookie banner.
• Device-local preferences — your mute setting and your current room are kept in your own browser's storage and are never sent to us.
• Accounts (optional) — only needed to build quizzes. We store your email address, a display name and a scrambled (hashed) password — never the password itself — plus the quiz packs you create. Your display name is shown next to packs you publish. A second strictly-necessary cookie (bbsess) keeps you signed in. Delete requests: email us and the account and its packs go.
• Server logs — like nearly every website, our web server records requests (IP address, URL, time) for security and debugging. Logs are kept short-term on our own server and are not used for profiling or shared with anyone.

What we don't do

• No marketing use of your email — it exists for sign-in and (soon) verification and password resets.
• No analytics, no advertising, no tracking pixels, no fingerprinting.
• No third-party scripts — everything the site loads is served by us.
• No selling or sharing of data. There is essentially nothing to sell.

Infrastructure

The site is served through Cloudflare (as a network proxy, which sees traffic in transit to protect the site) and hosted on our own server in the EU. No other processors are involved.

Your rights

Under the GDPR you can ask what we hold about you, and ask for it to be corrected or deleted. In practice, by the time you email us your game data will already have deleted itself — but do get in touch about anything: [email protected].

Changes

If the game ever gains accounts or anything that changes this picture, this page will be updated first and the date above bumped.