Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains what information Kilotronic LLC ("Kilotronic," "we," "us") collects when you use this website and its related games, applications, and services (together, the "Service"), how we use it, and who may process it on our behalf.

See your data live: the Data page shows the information your browser makes available to the Service right now and summarizes what we store for hosts and players.

Information We Collect

The Service has two kinds of participants: hosts, who sign in to set up and run games, and players, who join a host's game to participate. A host can also play. We collect different information for each role.

Hosts

To host a game, you sign in through an identity provider (Google, Apple), via text message code sent to your phone number, or as a guest. When you sign in with Google or Apple, that provider handles the sign-in under its own privacy policy and gives us the identity information described here; it is not our subprocessor. When available, we collect the email address, name, and basic profile (including profile image URL if one is provided) and identifier information during the sign-in process. We collect your phone number if you sign in via text message. We use this identity information to secure your account, to meet legal and compliance obligations, and to contact you using the information you provide. Guest data is deleted after a period of inactivity.

You may also set an optional display name from your account settings. We store it with your account and show it to players in place of a name provided by an identity provider (if one is supplied). Signed-in hosts can also opt out of non-essential messages from us in Profile; we still send the account messages you need.

Players

Players are not required to have an account to join a game. When joining, a player picks a nickname (the game suggests one, and it need not be a real name) used to label that player's responses in the host's games. A nickname is not an account, and we do not use it to identify a person.

Game content

As a game is played, hosts and players enter content into the Service: game elements such as prompts, answers, words, categories, and other text. We collect and store this content. If a host shares a game recap link, anyone with the link can see the winner, the scores, and game statistics such as the best turn, not the prompts or answers that were submitted.

Messages you send us

If you contact us (by email, through a form on our website, or through any other channel), we receive whatever you choose to include, such as your name, your email address, and your message. We use it to respond to you, to keep a record of our correspondence, and to fix problems and improve the Service based on what you tell us. The help page is one such form.

IP addresses

If you use the Service, your browser or device sends its IP address with every request; that is how the internet delivers a response back to you. We and the hosting providers listed under Subprocessors may log IP addresses along with those requests. We use them to deliver the Service, keep it reliable, and protect it against abuse, and not to build a profile of you or to track you across other websites.

Technical information

We collect basic operational data generated by normal use, such as request logs, timestamps, and game-session identifiers, so the Service can function and so we can keep it reliable and secure.

Error reports from the host console, whether or not you are signed in, and its activity records while the console is open also note two coarse characteristics of your device: its operating system family (such as iOS, Android, or Windows) and a display-size range (small, medium, or large). An error report is linked to the game session it came from; an activity record is not. Both are deleted after about two weeks. The operating system family also appears in the error alerts our team receives, which are kept longer (currently 90 days). We use these details to keep the Service working across the range of devices people use. The `/info` page shows them as your browser reports them.

Cookies and browser storage

We use two first-party cookies, both only to secure sign-in: a session cookie that holds the sign-in flow's one-time checks, and, when you sign in with Apple, a cookie that carries the same check for up to ten minutes; no third-party, advertising, or tracking cookies. The Service keeps your sign-in token, game state, and settings in your browser's local storage so you stay signed in and a game can continue on your device; that data stays in your browser until it is cleared.

How We Use Information

We use the information we collect to:

How Information Is Stored

The information described above is stored in a database operated for the Service and hosted by the infrastructure providers (subprocessors) listed below.

Sharing and Disclosure

It is our policy not to sell or rent personal information, or to share it with third parties for their own advertising or marketing. If that ever changes, we will update this Policy and give notice first.

We do share information with subprocessors: service providers who process data on our behalf to run the Service. We engage them to process the data described in this Policy for us, under their terms with us. We may also disclose information where required by law or to protect our legal rights.

If Kilotronic is involved in a merger, acquisition, reorganization, or sale of assets, personal information may be transferred as part of that transaction. It is our policy to require that the recipient honor this Policy for the information it receives, and to give notice before a different policy applies.

Subprocessors

We use the following subprocessors, the ones material to operating the Service.

Primary subprocessors store or process the personal data and game content you provide, to deliver the Service:

Operational subprocessors receive limited data in the course of operating and supporting the Service, such as error reports, diagnostics, new-account notices, feedback you send, and support communications.

It is our policy to list every subprocessor material to the Service and to update this list when they change. It reflects the subprocessors in use as of the "Last updated" date.

Where Information Is Processed

We are based in the United States, and the subprocessors above process information there and, for telephone support, in Canada; our hosting provider also handles requests at data centers worldwide. Data protection law in those countries may differ from the law where you live. Where the law of the European Economic Area, the United Kingdom, or another region requires a safeguard for a transfer, it is our policy to rely on one it recognizes, such as the standard contractual clauses in our providers' data processing terms.

Security

It is our policy to use reasonable administrative, technical, and physical safeguards to protect personal information. No system is perfectly secure, and we cannot guarantee the security of your information.

Data Retention

We retain information for as long as needed to provide the Service and for the purposes described in this Policy, including to satisfy legal and compliance obligations. In practice, and as our policy rather than a guarantee: guest accounts are deleted after about a day of inactivity; diagnostic records are deleted after about two weeks; backups are kept for about a week; a deleted account is erased after its 7-day grace period; feedback you send in the app is kept for about 90 days; and other messages you send us are kept as long as we need them for our records.

Removing Your Data

Self-service deletion. Signed-in hosts can delete their account directly from the account menu (Profile → Delete account). Deletion is scheduled after a 7-day grace period, during which you can cancel; after it elapses, we delete your account and the data linked to it from our systems, including your display name and the game content you created. Copies may remain for a limited time in backups (which we keep for about a week), in logs, and in support or operational records until they expire on their normal schedules.

If you would like your data removed, send an email to [email protected] from the email address associated with your account, or, if your account has no email address, tell us and we can verify your request another way (for example, through your signed-in session). We may retain certain information where required to meet legal or compliance obligations.

Children's Privacy

The Service is a general-audience party game that is set up and run by a host. You must be at least 13 years old to host a game or create an account. Players do not create accounts, and we do not ask anyone's age.

Players, whatever their age, do not give us a name, an email address, or an age. They give us a nickname and the content they enter during the game, and, like any visitor, their device sends the technical information described above (IP address, device and session data). The game suggests a nickname, and it need not be a real name. We use a player's nickname and content to run the game and show them to the other participants, and for the operational purposes described in this Policy (keeping the Service working and secure); we do not link them to an identity, publish them, or use them for advertising, and it is our policy not to sell them or share them with third parties for their own advertising or marketing.

Because we do not ask for ages, we do not know whether any particular player is a child, and we do not try to find out; the information a player gives us is the nickname, game content, and technical information described above. If you believe a child has provided personal information that should be removed, contact [email protected] and we will delete it.

If you are a host, you are responsible for supervising the participants you invite and for any consent they or their parent or guardian need to give before they join. This is a responsibility you accept as host; it does not change our own obligations under applicable law.

Changes to This Policy

We may update this Policy from time to time and will post the new version here with a new "Last updated" date. If we make a material change to how we use personal information we already hold, it is our policy to give notice (for example, in the Service or by email) and, where the law requires, to ask for your consent.

Your Rights and Regional Disclosures

We generally offer the rights described below to all users, wherever they live; where local law doesn't grant a right, we'll consider your request but reserve the right to decline.

GDPR (European Economic Area, UK). These are the core rights granted by the General Data Protection Regulation. They include the rights to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. We process personal data on the basis of our legitimate interest in operating and improving the Service, the performance of our agreement with you when you hold an account, your consent where required, and our legal obligations. Where we rely on your consent, you may withdraw it at any time. To exercise these rights, contact us at the address below. If you live in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your data protection authority.

CCPA/CPRA (California). Although we may not be required to comply with the CCPA, we honor these rights for California residents. California residents have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.

Do Not Track and Global Privacy Control. Because we do not track users across third-party websites or sell personal information, browser "Do Not Track" (DNT) and Global Privacy Control (GPC) signals do not change what we collect. We treat a GPC signal as a valid opt-out of sale/sharing where applicable — which, as noted, we do not do.

To make any of these requests, email [email protected] from the email address associated with your account so we can verify the request. We will respond within the timeframes required by applicable law.

If your account has no email address, tell us and we can verify your request another way (for example, through your signed-in session). Signed-in hosts can download their data (Profile → Download my data) and delete their account (Profile → Delete account) without asking us.

Contact

Questions about this Policy or your data may be sent to [email protected], or by post to Kilotronic LLC, 2 Vera Pl, Montclair, NJ 07042, USA.