Privacy Policy

This policy explains what CrowdSays collects and why. We aim to collect as little as possible to run a party game.

1. Information we collect

• Gameplay data — room codes, answers you submit, and in-game events needed to run a match (held primarily in memory during play).
• Account data — if you create an account, we store your email and auth session via Supabase. Host Pro purchases are linked to your account through a Stripe customer id mapping.
• Payment data — if you buy Host Pro, Stripe processes your payment. We receive purchase metadata (e.g. email, payment status, Stripe customer id); we do not store full card numbers.
• Technical logs — standard server/hosting logs (IP, user agent, error traces) from our hosting providers (e.g. Vercel, PartyKit).

2. How we use information

To operate the game, unlock Host Pro after payment for your account, prevent abuse, debug issues, and improve the product.

3. Sharing

We share data with processors that help us run CrowdSays: Stripe (payments), hosting/realtime providers, and an LLM provider used to judge answers. We do not sell personal information.

4. Retention

Live game state is short-lived. Account and purchase records are retained while your account exists. Stripe retains payment records per their policies. Hosting logs are retained according to the provider’s defaults unless we configure shorter windows.

5. Your choices

You can sign out anytime. Host Pro follows your account across devices when you sign in. For payment data requests, contact Stripe support or us with your receipt email.

6. Children

CrowdSays is intended for general audiences in a party setting. If you are under the age where you can agree to these terms in your region, use the service only with a parent or guardian.

7. Changes

We may update this policy. The “Last updated” date below will change when we do.

8. Contact

Privacy questions: use the operator contact on your deployment or Stripe receipt email thread.

Last updated: July 23, 2026