Privacy

The short version

• There are no accounts, cookies, analytics, ads or third-party scripts.
• Your phone keeps a random device code, your name, your recent rooms and any moves that haven't sent yet.
• The name you choose and the moves you make are shared with everyone in your room.
• Each room, with its record of moves, is deleted after three days with no activity.
• Cloudflare, which runs the site, processes your IP address to deliver it.

Who is responsible

The site is run by Codify Limited, which is responsible for your data under UK data protection law (the UK GDPR and the Data Protection Act 2018). To ask anything about it, email harry@meetcodify.com.

What stays on your phone

The site saves a few things in your browser's local storage, so a game survives a dropped connection or a closed tab:

• A random device code, made the first time you open a room. It proves which seat is yours when you come back, which is why you never need an account or a password.
• The name you last played under, so you don't have to type it again.
• Up to four rooms you've been in during the last three days, so you can rejoin from the home page.
• For each room you've opened, the last state of the game you were shown, so it can redraw with no signal, and any moves you made that haven't reached the server yet.
• A few small settings and markers, such as whether to keep the screen awake and which reveals you've already seen, so a reload doesn't replay them.

Your device code, your name and your moves go to the server when you play. The rest never leaves your phone. The app's own files are kept too, so it opens without a signal; they contain nothing about you.

To remove all of it, clear this site's data in your browser. You'd lose your seat in any game in progress.

What the server keeps

Each room is a small database on Cloudflare, called a Durable Object. It holds:

• the room code, the game and its settings;
• each player's name, colour mark and seat, and the device code that proves which seat is theirs;
• the state of the game, including secrets such as hidden roles and hands, which the server only ever shows to the player allowed to see them;
• a record of every action in the room: what was done, which device code did it, and when. The server uses it to rebuild a game exactly, to check it was played fairly and to recover from a crash.

Anything you type into a game, such as a write-in card, is part of that record. Rooms don't store IP addresses.

Who can see what

Everyone in your room sees your name, your mark, your seat and what you do in the game, apart from the parts the game keeps secret. Anyone with the room's code or link can open it, and join or watch, so share it only with people you want to play with.

How long it's kept

A room deletes itself, record and all, three days after the last thing anyone did in it. Your phone forgets recent rooms after three days too. Everything else on your phone stays until you clear the site's data.

Cloudflare

The site runs on Cloudflare's servers. Like any web host, Cloudflare receives your IP address and basic details about your browser with every request, and uses them to deliver the site and protect it from attacks. Cloudflare also keeps short request logs for us, which can include your IP address. We only use them to fix problems, and they're deleted after a few days.

Cloudflare handles this data on our behalf under its data processing terms, which also cover any processing outside the UK. Its own privacy policy is at cloudflare.com/privacypolicy.

Why it's used

Only to run the games you choose to play: to seat you, keep each game fair and its secrets secret, recover from dropped connections, and keep the site working and secure. The legal basis is our legitimate interest in running the service you asked to use. None of it is used for advertising or profiling, and none of it is sold or shared with anyone except Cloudflare.

No cookies, so no banner

The site sets no cookies. It uses your browser's storage only for things a game needs to work or that you asked for, like holding your seat and remembering your name. UK law (the PECR) doesn't require consent for storage that's strictly necessary in that way, which is why there's no cookie banner. If Cloudflare ever needs to check that a visitor isn't a bot, it may set a short-lived security cookie of its own, which counts as strictly necessary too.

No third parties

There are no third-party scripts, fonts, trackers or embeds. Everything loads from this site. When you paste a link into a chat app, the app fetches the page to show a preview; that's between you and the app.

Children

The site isn't meant for children, and we don't knowingly collect data from them. Cards Against Humanity is for adults only.

Your rights

You can ask to see the data held about you, to correct it or delete it, to restrict or object to how it's used, or to get a copy to take elsewhere. Email harry@meetcodify.com.

With no accounts, the only way to find your data is by the room code and the name you used, and only while the room still exists. The quickest way to delete it is to leave the room and clear this site's data; the room deletes itself within three days.

If you're unhappy with how your data is handled, you can complain to the Information Commissioner's Office at ico.org.uk.