No accounts
You never sign up. You type a display name when you join a room. We keep that name, whether you are voting or watching, and the times you joined and were last seen in the room.
How: there is no sign-up, email field or login anywhere in the service.
What a room stores
- The room's settings: its deck, its timer length, its music choice and whether it has a passcode.
- For each person who joined: their display name, whether they vote or watch, whether they are a moderator, and when they joined and were last seen.
- For each revealed round: the story title, the time, and which card each named person played.
Votes in a round that has not been revealed are never written down. They exist only in the server's memory until the reveal.
How: a round is saved at the moment it is revealed, and not before. Passcodes, the secret that keeps you signed in to a room, and the moderator link's secret are stored only in scrambled form that cannot be read back. The room's own link code is stored as it is, because it is how the room is found.
How long it is kept
A room, with everything in it, is deleted 30 days after it was last used. "Used" means someone joined, a round was revealed, or its settings were changed.
A moderator can delete a single round or all history at any time, and the room's owner can delete the whole room. Deletion takes effect at once. A room keeps its newest 1,000 rounds; older ones are deleted as new ones are saved.
Deleted data can remain in database backups until those backups are replaced.
How: a job runs every hour and removes rooms past that age.
Who can see a room
Anyone who has the room's link, and its passcode if a moderator set one, can join and can read the room's history. Treat the link as you would the contents of the room.
Nobody, the moderator included, can see how someone voted before the reveal. Before then everyone sees only who has voted.
How: room links are long random codes that cannot be guessed, and the server does not send any vote to any browser until the reveal.
Removing your name
On a room's history page you can remove your name from the votes you cast there. The votes stay and show as "Anonymous".
This reaches the votes you cast since you last joined. If you were removed from a room, or signed out because a passcode was set or because you had not visited, you come back as a new participant and cannot reach your earlier votes; a moderator can delete those rounds for you.
Cookies and your browser
We set one cookie for each room you join. It keeps you in that room and does nothing else. It cannot be read by scripts and is sent only to this site. If you do not open the room for 30 days you are signed out of it. The room's owner can come back with the moderator link. Your past votes keep your name.
Your browser also remembers whether you chose the light or the dark theme, whether you turned sound on, and how loud. Those choices stay on your device and are never sent to us. Sound is off until you turn it on, and no music is downloaded before that. When it is on and a room plays music, your browser asks this site for the music file, as it does for any page.
How: there are no advertising, analytics or third-party cookies on this site.
What we do not collect
- We do not store your IP address. A scrambled form of it, which cannot be turned back into the address, is kept for up to an hour to stop abuse such as creating thousands of rooms, and is then forgotten.
- We do not use analytics, trackers, advertising or fingerprinting.
- We do not load anything from other companies' servers: no fonts, scripts, images or embeds.
- The application does not write room links, names, story titles or votes to its logs.
How: the site instructs your browser to refuse anything not served by this site, so even a mistake on our side could not load a tracker.