Privacy Policy
Last updated: June 29, 2026
This Privacy Policy explains what information Kilotronic LLC ("Kilotronic," "we," "us") collects when you use this website and its related games, applications, and services (together, the "Service"), how we use it, and who may process it on our behalf.
See your data live: the Data page shows the information your browser makes available to the Service right now, and summarizes what we store for hosts and players.
Information We Collect
The Service has two kinds of participants: hosts, who sign in to set up and run games, and players, who join a host's game to respond. A host can also play. We collect different information for each role.
Hosts
To host a game you sign in through an identity provider (currently Google or Apple). We collect the email address, name, and basic profile and identifier information the provider returns to us as part of authentication. We use this identity information to secure your account, to meet legal and compliance obligations, and to contact you using the information you provide.
You may also set an optional display name from your account settings. We store it with your account, separately from the name your provider returns, and show it to players in place of that name. If you do not set one, the name from your provider is used.
Players
Players are not required to have an account to join a game. When joining, a player is prompted for an optional game handle used only to label that player's responses within a session. A game handle is not an account, and we do not use it to identify a person.
Game content
As a game is played, hosts and players enter content into the Service — game elements such as prompts, answers, words, categories, and other text submitted from a phone or console. We collect and store this content.
Technical information
We collect basic operational data generated by normal use, such as request logs, timestamps, and game-session identifiers, so the Service can function and so we can keep it reliable and secure.
We also collect technical characteristics of the devices and equipment used with the Service — the type of device, browser, and operating system, the display size, accessibility preferences your browser exposes, and the model or identifier of a connected game controller. This information describes hardware and software, not a person; it is de-identified (not linked to your account, session, or other players) and is recorded at most once a day. We use it to keep the Service working across the range of devices, controllers, and accessibility needs people have. The `/info` page shows you the exact payload that would be sent, field by field.
How We Use Information
We use the information we collect to:
- operate, maintain, and provide the Service and its games;
- understand how the Service is used;
- improve and develop the game and its features; and
- meet legal, regulatory, and compliance obligations, and protect the Service against fraud, abuse, and security threats.
How Information Is Stored
The information described above is stored in a database operated for the Service and hosted by the infrastructure providers (subprocessors) listed below.
Sharing and Disclosure
We do not sell your contact information, and we do not share your contact information with any third party for that third party's own use.
We do share information with subprocessors — service providers who process data on our behalf to run the Service. These subprocessors may have access to all of the data described in this Policy, but only to provide their services to us and subject to their obligations to us. We may also disclose information where required by law or to protect our legal rights.
Subprocessors
We use the following subprocessors to operate the Service.
Primary subprocessors store or process the personal data and game content you provide, to deliver the Service:
- Railway Corporation — application hosting and managed database and cache (PostgreSQL, Redis) for the production and staging Service.
- Google LLC (Google Cloud Platform) — offsite database backups and additional supporting services.
- Google LLC (Google Sign-In) — authentication and identity-provider services.
- Apple Inc. (Sign in with Apple) — authentication and identity-provider services.
- Anthropic, PBC — AI-assisted content generation and spelling correction, when those features are enabled; game content you submit may be processed to provide them.
- Cloudflare, Inc. — DNS, edge content delivery for the public website, the short party-code redirector, and email routing for our domains.
Operational subprocessors incidentally process data in the course of operating and supporting the Service — for example through error reports, diagnostics, and technical-support communications, which may include content you submitted:
- Salesforce, Inc. (Slack) — operations and technical support. We use Slack for service error and deployment notifications and for handling support matters; the messages involved may include internal error reports and content you submitted.
We may add, remove, or change subprocessors at any time without prior notice. The list above reflects the subprocessors in use as of the "Last updated" date.
Data Retention
We retain information for as long as needed to provide the Service and for the purposes described in this Policy, including to satisfy legal and compliance obligations.
Removing Your Data
Self-service deletion. Signed-in hosts can delete their account directly from the account menu (Profile → Delete account). Deletion is scheduled after a 7-day grace period, during which you can cancel; after it elapses, your account and all associated data — including your display name and the game content you created — are permanently erased. De-identified, aggregate diagnostics that cannot be linked back to you may be retained.
If you would like your data removed, send an email to [email protected] from the email address you used to sign in, so we can verify the request. We may retain certain information where required to meet legal or compliance obligations.
Children's Privacy
The Service is a general-audience party game that is set up and run by a host. You must be at least 13 years old to create an account and host a game. Only hosts sign in, so the account and identity information we collect comes from hosts, not from children.
Players join a game without creating an account or providing an email address — a player provides only an optional game handle and the game content they choose to submit. Children may take part as players under the supervision of the host who runs the session.
If you are a host, you are responsible for supervising the participants you invite and for obtaining any consent required from them — or, for younger children, from their parent or guardian — before they join and submit content to the Service. This is a responsibility you accept as host; it does not change our own obligations under applicable law.
The Service is intended for a general audience and is not directed to children. We do not knowingly collect personal information from children under 13. Because players join anonymously — providing only an optional game handle and the content they choose to submit — we do not ask for or hold a player's age. If we learn that we hold personal information from a child under 13, we will delete it.
We do not use content submitted by children for advertising, and we never sell it or share it with third parties for their own use. If you believe a child has provided personal information you would like removed, contact [email protected] and we will address it.
Changes to This Policy
We may update this Policy from time to time. The "Last updated" date above reflects the current version, and continued use of the Service after an update means you accept the revised Policy.
Your Rights and Regional Disclosures
We aim to honor the data-protection rights described below for all users, regardless of where they live — not only where the law requires it.
GDPR (European Economic Area, UK). We extend the core rights granted by the General Data Protection Regulation to every user. These include the rights to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. We process personal data on the basis of our legitimate interest in operating and improving the Service, your consent where required, and our legal obligations. To exercise these rights, contact us at the address below.
CCPA/CPRA (California). California residents have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law, and we do not use it for cross-context behavioral advertising. We will not discriminate against you for exercising your rights.
Do Not Track and Global Privacy Control. Because we do not track users across third-party websites or sell personal information, browser "Do Not Track" (DNT) and Global Privacy Control (GPC) signals do not change what we collect. We treat a GPC signal as a valid opt-out of sale/sharing where applicable — which, as noted, we do not do.
To make any of these requests, email [email protected] from the email address associated with your account so we can verify the request. We will respond within the timeframes required by applicable law.
Contact
Questions about this Policy or your data may be sent to [email protected].