Privacy

Data we collect and store

Session data (temporary)

• Game session settings (game type, configuration, status)
• Game-specific content (responses, positions, votes, statements)
• Real-time presence information (who's online or offline)

Participant information (temporary)

• Display name you provide
• Avatar selection and color preference

Local storage (your device only)

• Participant ID for session continuity
• Your display preferences (name, avatar, color)

How we handle your data

Real-time synchronization

• All session data is synchronized in real time through Ably LiveObjects
• Data is transmitted over secure WebSocket connections
• Each session uses a private channel accessible only to participants

No permanent storage

• Game sessions are ephemeral — data exists only during active sessions
• No user accounts or long-term data retention for participants
• Session data is automatically cleaned up after 90 days of inactivity

Data isolation

• Each session operates in a completely isolated private channel
• Session IDs are randomly generated for security
• Participants cannot access data from other sessions

Third-party services

AWS (static content hosting)

• Serves static application content

Ably (real-time infrastructure)

• Handles real-time data synchronization, WebSocket connections and temporary data persistence (Ably LiveObjects)
• Data is transmitted through Ably's secure infrastructure
• Subject to Ably's privacy policy and security measures

Anthropic (AI content generation)

• Used to generate facilitator-prompted content like quiz questions or icebreaker prompts
• Only the facilitator's prompt seed is sent — no participant content, names, or session data
• See the AI page for details on how we use AI

Error monitoring (Rollbar)

• Collects technical error information to improve app reliability
• No personal data is included in error reports
• Used solely for debugging and performance optimization

Analytics (Plausible)

• Privacy-focused analytics without personal data collection
• Tracks general usage patterns to improve the application
• No cookies or persistent tracking

Your privacy rights

Data control

• You control what information you share (name, avatar selection)
• You can leave sessions at any time
• Local preferences can be cleared through browser settings

No tracking

• We don't track you across sessions or websites
• No persistent user profiles or behavioural tracking
• Session participation is anonymous by default

Security measures

Secure transmission

• All data is encrypted in transit using industry-standard protocols
• WebSocket connections use secure authentication
• Private channels ensure data isolation between sessions

Access control

• Sessions require knowledge of the specific session ID to join
• Participant authentication through secure relay endpoints
• Automatic session cleanup prevents data accumulation

Data retention

Session lifetime + 90 days

• Data exists only for the duration of game sessions plus 90 days
• Automatic deletion 90 days following last activity
• No long-term storage of session content or participant responses

Local data

• Only participant preferences are stored locally on your device
• You can clear this data through browser settings at any time
• Local data is never transmitted to other participants