Privacy Policy

Last updated July 11, 2026

What we collect

Account info (your display name, which we take from the first name on your social sign-in; an automatically generated username used in your card’s share link; and your sign-in identity from Apple, Google, or your phone number), the photos and videos you post, the game answers you write (which may include sensitive details you choose to share, like ethnicity), your guesses, likes, favorites, messages, and profile-view events. We confirm you passed the 18+ check but do not store your date of birth.

Sensitive information you choose to share

Some game topics involve information laws treat as sensitive — for example your ethnicity. Adding these topics is entirely optional and constitutes your explicit consent to display them as part of the guessing game. You can remove them at any time in your profile.

Photo screening (biometric notice)

Uploads are screened by automated moderation (Amazon Rekognition) to detect prohibited content. This processing analyzes the image, not you: we do not create or retain face templates or other biometric identifiers, and we do not use facial recognition to identify people. Screening data is kept only as long as needed for moderation and legal-compliance purposes.

Who can see your profile

Profiles are public by default so people can play — you can set yours to private in Settings at any time. Views of your profile are counted; the list of who viewed you is visible only to you (with Pro).

Retention & deletion

Delete your account in Settings and we delete your profile, posts, prompts, and messages within 30 days, except records we must keep by law (for example, content preserved in connection with child-safety reports). Content that fails moderation is quarantined, not published, and retained only as long as legally required.

Your rights

Depending on where you live (GDPR, CCPA, and similar laws), you may have rights to access, correct, delete, or export your data, and to object to processing. Contact [PRIVACY EMAIL]. EU/UK users: our legal bases are contract (running the service), consent (optional sensitive topics), and legitimate interest (safety and moderation). [Data controller entity, DPO, and international transfer mechanisms to be completed by counsel.]