Privacy Policy
Notice dated October 31, 2026. Effective upon publication.
GameNightRoom is operated by Aman Gore. This policy covers the GameNightRoom website, Draft Night, Imposter, Build Your Own, Who Said That?, Dial It In, Scribble Chain, Yearbook, and Gumdrop Hop. Contact the operator using the request form below.
Past Forward
Your room sees final timelines and scores after each reveal. Private timelines stay hidden while players are arranging them. Rooms expire under GameNightRoom’s standard room policy. One-phone play loads verified event data while connected and keeps that game on the shared device.
Information we use
- Playing: nicknames, room codes, player credentials, custom category text, bids, teams, Imposter words and roles, votes, Who Said That? answers and author guesses, and Dial It In clues, targets, dial positions, scores, and connection status. Other people in your room can see names, categories, teams, and bids. Individual ballots are hidden from players; the server stores them to calculate the vote. In Imposter, each player receives only their own role before results; the word and all imposters are revealed at the end. In Who Said That?, answers appear without authors during voting; authors and points are revealed afterward. At reveal, correct guessers are identified. Scribble Chain stores compressed drawings; each player receives only the preceding page during play, and all pages become visible during the final reveal. Yearbook stores player names and votes; it no longer accepts photos or avatars. Votes stay anonymous unless the host selects No secrets. In Dial It In, only the Tuner receives the target before the reveal, and each guesser receives only their own position. At the reveal, targets, positions, and points are shared with the room. This is anonymity within gameplay, not anonymity from the operator or hosting providers. Use nicknames and avoid sensitive information.
- X Marks: Your room sees crews, clues, suggestions, and revealed map tiles. Captains see a private treasure map during play. Room data is stored until the room expires.
- Ballpark: Your room sees your guesses and bets. Stored until the room expires. Guesses remain private until betting opens; answers are revealed after betting closes.
- One-phone games: once the offline download is ready, one-phone games can run on this device. The app shell, fonts and built-in word lists are cached; active sessions, names and private game data are stored locally where needed for recovery. Online rooms and multiplayer secrets are never put in this shared cache. Before the offline download is ready, some one-phone games use first-party server storage. Browser storage can be cleared in your browser settings; this also removes local game recovery.
- Online games: room state is stored to synchronize players and permit reconnection. A credential saved on your device grants access to your player seat; protect your device and room code.
- Optional gameplay analytics: First-party analytics is on unless you turn it off in Privacy settings, a known restriction applies, or your browser sends Global Privacy Control or Do Not Track. Turning it off does not affect your games. Measurement includes actual pages and screens opened, setup steps, game starts and finishes, anonymous player counts, built-in categories or packs, invite methods, repeat play, and result shares. Events use random device and session identifiers, timestamps, and coarse device types (iPhone, Android, or desktop). We reduce referrers and campaign sources to broad source categories; we do not store full referring URLs or their query strings. Analytics contain no player names, room codes, answer text, custom prompts, photos, or other directly identifying information. Random identifiers are pseudonymous rather than a guarantee of legal anonymity. API calls, room polling, reconnect requests, and background refreshes are never page views. We do not use third-party ad trackers, advertising profiles, or precise location.
- Security and hosting: requests necessarily expose IP addresses and technical request data to our hosting providers. The app hashes IP addresses for abuse limits; hashing does not make them inherently anonymous.
- Game notifications: if you choose Notify me for a coming-soon game, we store your email address, that game, and the signup date in the owner’s private dashboard for its one-time launch notification. Signing up is optional. The owner can export the list; other players cannot see it. You can request removal using the contact form below.
- Contact: the message and optional email you choose to send through a contact or feedback form, used to handle your request. Problem reports include the current game, screen and coarse device type; they do not automatically attach names, answers or room codes.
- Owner sign-in: The owner uses ChatGPT authentication to set or reset the dashboard password. Passwords are stored as salted, slow hashes, never plaintext. A secure session cookie authorizes the private dashboard for up to eight hours. ChatGPT supplies the signed-in account identifier and email for owner verification. Players do not need a ChatGPT account to play.
New party games
Poke the Bear, Poker Face, Top Five, Hot Spud, Letter Rush, High Noon, and Mind Reader use first-party room storage for own-phones play, which needs an internet connection. One-phone games use device storage after the offline download is ready. We store the player nicknames, settings, and current game state to run timers, private turns, and scores. In own-phones games, secret bear positions and future High Noon cues stay on the server. One-phone games keep their private state on the device. Poker Face lies and Top Five rankings are sent only to their authors before the relevant reveal; Letter Rush answers are private until their category is revealed. Poker Face statements and Letter Rush answers are cleared from active server state when the game finishes or the host ends it; export highlights stay only in the current browser screen. Rooms expire after two hours without activity. Mind Reader uses motion readings on the device for tilt controls; it does not upload those readings. High Noon sends measured reaction times for scoring. Words, statements, rankings, motion readings, and custom input are not included in gameplay analytics.
Storage and choices
Stack House keeps your best floor count, supporting best-run statistics, and first-play hint state on this device. The current tower stays in browser memory for results and sharing; a refresh ends that run while preserving the saved best. Stack House creates no multiplayer room and does not upload tower geometry. Sharing sends the card only through your chosen share destination or downloads it to your device.
Gumdrop Hop stores the shared course seed, jump durations, and match scores in the room until the room expires after two hours without activity. Solo practice scores stay only on your device. Jump data is used to run the match, not included in gameplay analytics.
Essential cookies store your privacy choice for up to six months. Earlier versions also stored a Terms acknowledgment or an age-group eligibility decision. We continue to honor existing restrictions. The current entry flow does not ask for your age, birth date or a Terms checkbox. Local browser storage keeps your theme, room credential, Game Finder preferences, and the last three games played for Jump back in. The recent-games list and finder preferences stay on this device and work independently of optional analytics. A browser-exclusion cookie can disable traffic and gameplay analytics on a testing device for six months. Page views are explicit browser events for pages or screens; known automated clients are excluded. These filters estimate human usage but cannot guarantee that every automated browser is identified. Optional analytics identifiers are created only when analytics is enabled under the choices described above. Turning off analytics removes those browser identifiers; it does not erase earlier server records.
We use information to run games, protect the service, honor requests, and—when allowed—measure usage. We do not sell personal information, share it for cross-context behavioral advertising, or install advertising trackers. Global Privacy Control and Do Not Track disable our optional analytics even if you previously allowed them. We do not track you across unrelated websites.
Privacy settings
Optional analytics is loading. First-party analytics measures site and game usage. You can turn it off without affecting your games. Your saved preference is loading. Global Privacy Control, Do Not Track and known restrictions keep collection off.
Who receives information
OpenAI Sites and Cloudflare provide hosting, storage, and security. They process requests and may maintain technical logs or authentication cookies under their own terms and policies. Their infrastructure practices are outside this app’s privacy settings. The operator can access stored records to maintain games and respond to requests. Your room participants receive the gameplay information described above. We may disclose information if legally required or necessary to investigate misuse or protect users.
Infrastructure may process information in the United States or other locations where providers operate. See OpenAI’s Privacy Policy and Cloudflare’s Privacy Policy.
Retention
Online rooms expire after two hours without activity. Switching games keeps the room code and player names and starts a new two-hour inactivity window. The previous game state is replaced. Who Said That? answers are cleared from active server state when the host finishes or ends the game; the funniest-line export remains in the current browser memory. Photos uploaded to older Yearbook rooms are deleted from active storage when those games end or expire. New games do not accept photos. Uploaded drawings and abandoned photos expire after 24 hours. Current gameplay analytics have a one-year retention target; older legacy analytics retain their 30-day target. Privacy requests and feedback messages are retained for up to 90 days, and abuse-limit records for the duration of their limit window (normally one hour). Expired app records are deleted during subsequent gameplay, privacy-request, or dashboard activity; deletion is not an exact-time background schedule, so an inactive site may retain expired records until activity resumes. Provider logs and backups follow provider retention practices. Browser data remains until cleared or replaced; use the controls above or your browser’s settings.
Your requests
You may ask to access, correct, or delete information, withdraw analytics permission, or raise a privacy concern. Available legal rights depend on where you live. We may ask for information needed to verify a request and protect other players’ data. We will handle requests within applicable legal deadlines and explain any lawful limits. You can continue playing without optional analytics. Clearing a room credential may prevent us from verifying ownership of that player seat, so submit any relevant request first.
Children and teens
This is a general-audience service for ages 13 and up, not a service directed to children under 13. Players aged 13–17 need a parent or guardian’s permission. Existing records identifying a device as restricted or belonging to a teen keep optional analytics off. We do not infer an adult age from missing records. You can browse game descriptions and rules without accepting the Terms. To play, request a game notification or submit ordinary feedback, you must be at least 13. If you are under 18, you also need a parent or guardian’s permission. The privacy request and parent contact form is available without the play check. Do not submit information about children under 13 through the games, notifications or ordinary feedback. If you believe a child’s information was collected, a parent or guardian should use the form below so we can investigate and remove it as appropriate. Browsing and ordinary play do not require an age question or Terms checkbox. Terms and Privacy remain available from the site menu. We do not ask you to declare your age or confirm guardian permission on a form.
Changes
We will update the effective date when this policy changes. Material changes will be highlighted on this page and, where appropriate, in the game before they take effect. If a new use requires consent, we will request it before starting that use.
Contact and privacy requests
Send the GameNightRoom operator a question, correction, access or deletion request, or report of a child’s information. Include the room code and nickname if relevant. Do not send passwords, identity documents, or sensitive information. We may need to verify your connection to a room before changing shared records. A parent or guardian should submit requests for a child.