Privacy
Short version: there are no accounts, no ads, no analytics and no game server. The game runs in your browsers.
What is stored, and where
- On each device (browser storage): your display name, the room you are in and a seat token so a refresh puts you back in your seat, your sound setting, and, on the host's device only, the AI settings (including an API key if the host typed one).
- On the host's device (IndexedDB): the current game, so the host can refresh without ending it. Ending the game deletes it.
- Nothing is stored on our side. Clearing site data in your browser removes all of it.
What leaves your device
- Game traffic (names, answers, votes) goes directly between the players' browsers and the host. Over the internet, phones find each other through public WebTorrent trackers and STUN servers, which see your IP address and connection offers but not game data. With the LAN server, everything stays on your network.
- The AI. The AI is served on the host side. When enabled, requests (the prompt and anonymised answers, never player names) are sent by the host's browser to this site's free AI route (Cloudflare Workers AI, which runs the model and stores nothing for us), or, with the host's own key, through this site's relay (a Cloudflare function that forwards them and stores nothing) to OpenCode Zen, or directly to the configured provider, under that provider's privacy policy. With the AI off, built-in questions are used and no AI calls are made.
- Hosting. The website files are served by a static host, which keeps standard access logs (such as IP address and time of request).
Children
The game is meant for groups of friends and is not directed at children under 13. Players write their own answers, so the host is responsible for the room.
Contact
Questions or concerns: open an issue on the project's repository.