The only identifier we create

On first launch the app generates a random anonymous identifier (a UUID we call the install ID) and stores it only on your device using AsyncStorage. This ID is never tied to your name, email, Apple ID, Google account, advertising identifier, or any personal information.

We use this install ID for two narrow purposes only:

• Linking your device to an optional anonymous Supabase record when you choose to save your game setup preferences.
• Identifying your subscription status with RevenueCat (currently iOS only) so we can unlock Pro features you paid for.

You can delete and reinstall the app at any time to get a fresh install ID.

What we never collect

• No accounts, emails, phone numbers, or names
• No contacts, photos, camera, microphone, or location data
• No analytics, tracking pixels, crash reporters, or advertising SDKs
• No IDFA / advertising identifiers
• No data from other apps on your phone

How the game actually works (local by default)

Normal gameplay is 100% local. All questions, answers, votes, and game state live only on the phones in the room. Nothing is sent to us or anyone else.

Optional local Wi-Fi multiplayer

If you use the Host & Join feature, devices discover each other using Bonjour/mDNS and communicate directly over your local Wi-Fi using WebRTC data channels. Nothing ever leaves your router. There are no central servers, no logs, and no internet connection required for multiplayer.

Optional Supabase features (anonymous only)

Two features can optionally talk to our Supabase backend. Both are anonymous and off by default in spirit:

• Save my setup – You can choose to store your preferred player count, themes, imposter settings, language, etc. We store this against your anonymous install ID and an anonymous Supabase auth user ID. You can play the entire game without ever using this.
• Subscription entitlement sync – When checking or restoring Pro status, the app can call a Supabase Edge Function that looks up your status from RevenueCat using your install ID and records the result so the app knows you have access.

In both cases we only ever see the random install ID and the configuration or entitlement data — never anything that can identify you personally.

Subscriptions (currently iOS only via RevenueCat + Apple)

Pro features are optional. Payments are processed entirely by Apple (or Google Play once Android is released). We use RevenueCat to receive subscription status. RevenueCat is given only your anonymous install ID — never your real identity, email, or payment details.

We store subscription status in our database linked only to anonymous IDs so the app can know you have Pro access across reinstalls (if you choose to sync). We never see your credit card, billing address, or Apple/Google account email.

Children

The app does not knowingly collect any information from children under 13. Most question packs are light-hearted and suitable for mixed groups. The “Spicy” and adult-oriented packs are clearly labeled 18+ and hidden behind the optional Pro paywall.

Your choices and deletion

You can:

• Never use the optional Supabase features — the game works fully without them.
• Delete the app at any time (this removes the local install ID and all local data).
• Email us at the address below if you want us to manually delete any anonymous records associated with a specific install ID (provide the ID shown in Settings → About if you have it).

Changes to this policy

If we ever make meaningful changes, we will update the date at the top and include it in the next app update. Continued use after changes means you accept the updated policy.

Contact

Privacy questions or concerns? Email us at [email protected]. We actually read and respond to these.