1. Who is responsible for your data?
PostitGuess.io is operated by Maxime Girard, the controller for personal data processed to operate this website and game. For privacy questions or to exercise your rights, email solucidia@gmail.com.
This policy covers the website, multiplayer game and its own statistics system. Advertising, audience measurement and external platforms also have their own notices, linked below. Playing does not require an account, an email address or your real name.
2. Information used to run a game
When you create or join a room, the game processes your chosen nickname and avatar, room name and optional room password, game settings, assigned names to guess, guesses, chat messages, scores and connection state. These let us connect players, manage turns, check answers and display results. Essential game information is required to participate; chat is optional. Use a nickname and avoid sharing personal or sensitive information in chat, room names or names to guess. Do not reuse a password from another service for a room.
Players in your room see your nickname, avatar, messages, game activity and the identities revealed by the game rules. They may make screenshots or share results. Invite links grant room access and may contain access information: share them only with intended participants.
Servers receive technical connection information, including IP addresses and request information, to deliver the website and realtime game. Infrastructure logs may contain this information. Game-server logs also contain gameplay events and may include nicknames, room names, assigned identities and chat messages.
Your personal notepad stays in your browser; it is not sent to other players or our game-statistics database. If you contact us, we receive your email address, request content and any details you provide.
3. Why we use information
We process information necessary to provide the game you request, including room access, turns, answer checking and active-game reconnection, to perform that service. We use limited technical records and our own game statistics for our legitimate interests in keeping the service reliable, preventing abuse and improving the game, taking account of players' rights. We handle support and privacy requests to respond to you and comply with applicable obligations.
Optional advertising or measurement trackers require consent where applicable law requires it. Merely using the game is not consent to optional tracking. Advertising partners may use consent or another lawful basis for particular processing, as explained in their notices and any consent interface. We do not use game results to make automated decisions with legal or similarly significant effects on you.
4. Browser storage and cookies
The game saves language, sound and camera-view preferences in local storage. They remain until changed or you clear the site's stored data; they are not an account or an advertising profile.
During a game in progress, per-tab session storage holds a private reconnection credential, room details and your notepad to recover the same tab's session. Recovery is not offered in the lobby or after a game ends. The server reserves an unexpectedly disconnected player's place for up to 90 seconds; credentials are revoked when the game ends or you intentionally leave. Clearing this storage prevents recovery and removes saved notes.
The administration area uses a secure, HTTP-only session cookie lasting up to eight hours for authenticated administrators. Ordinary players do not need this cookie.
Google Analytics and AdinPlay can also use cookies or similar technologies, separately from game preferences and reconnection. Browser settings let you clear cookies and site storage; blocking essential storage can disable saved preferences or reconnection. Where an advertising consent interface is shown, it explains vendor choices. Contact solucidia@gmail.com with questions about your choices or withdrawing consent. Clearing storage alone does not prevent a third-party script from loading again on a later visit.
5. Game statistics, Google Analytics and advertising
Our own statistics system records game dates, duration and completion status, maps and modes, player counts, avatar choices, guess counts, whether an identity was found, and disconnection or reconnection counts. It uses random game and participation identifiers rather than a persistent player account. It can record the identifier of a name from our built-in catalogue.
That database does not store nicknames, room names or passwords, chat text, typed guesses, manually entered names to guess, IP addresses or browser fingerprints. This exclusion applies to our statistics database, not gameplay memory, logs or third-party services. Public statistics show aggregated results; detailed game records are restricted to administration.
We use Google Analytics to understand website use, including page visits and interactions such as opening the trailer. Google can process browser and device information, cookie identifiers, referral information and interaction data. Its processing is separate from our own game statistics. See Google's Privacy Policy: https://policies.google.com/privacy and Analytics privacy information: https://support.google.com/analytics/answer/6004245.
AdinPlay displays advertisements. AdinPlay and its advertising partners can process device and connection information, IP addresses, cookie or advertising identifiers, ad interactions and browsing information for advertising delivery, measurement, fraud prevention and, depending on your choices and applicable rules, personalised advertising. See AdinPlay's Privacy Policy: https://adinplay.com/privacy-policy and vendor information in its consent interface.
6. Who receives information and where it is processed
Information needed for a game is shared with room participants according to the game rules. The operator and authorised administrators access information needed to operate, support and protect the service. Production infrastructure is hosted by OVHcloud (OVH) on a server located in France. OVHcloud provides hosting services and may process connection and operational information to deliver those services. See OVHcloud's privacy information: https://www.ovhcloud.com/en/terms-and-conditions/privacy-policy/. Information may also be disclosed where required by law or necessary to establish or defend legal claims.
Google, AdinPlay and their relevant service providers receive information through their integrations. Email sent to solucidia@gmail.com is handled by Google's Gmail service. These providers may process information outside your country, including outside the European Economic Area. Their notices explain processing locations and transfer safeguards, such as applicable adequacy decisions or standard contractual clauses. Contact us for information about arrangements relevant to your request.
7. How long information is kept
Live room information is held in game-server memory while the room exists. Leaving does not immediately remove content shared with remaining participants. Room information is discarded when the room is removed or the server process ends; copies in logs, screenshots or external services have separate lifetimes.
The active-game disconnection grace period is up to 90 seconds. Browser preferences persist until changed or cleared. Recovery data is cleared when recovery ends or you leave. Closing the tab normally removes its session storage, although browser session restoration can preserve it.
PM2 application logs are retained for two weeks and then deleted through the server's log-management configuration. Other infrastructure logs have separate retention settings.
Records in our private game-statistics database are retained for one year. To ask about retained records or request deletion where applicable, contact solucidia@gmail.com. We assess requests against the data we can identify and applicable obligations. Provider-managed advertising and measurement records follow their own settings and retention policies; the one-year period applies to PostitGuess's own game statistics.
We keep support correspondence as long as needed to resolve the request and address related obligations or disputes. Privacy-request records are retained only as needed to demonstrate how the request was handled. A longer period may apply where legally required.
8. Victory photos and external links
Victory photos are created in your browser and may include nicknames, avatars and revealed identities. Downloading saves the image on your device; PostitGuess does not automatically upload it to a social network. Sharing is your choice: consider the other players before publishing.
Share on X opens X's posting interface with suggested text. It does not connect an X account to PostitGuess or request access through an X API. Following links to X, Discord, Twitch or other websites lets those services receive information under their own policies. Live-stream listings may load images from Twitch's content servers, which receive the network request for those images.
9. Your rights and how to contact us
Depending on applicable law and the processing involved, you may request access, correction, erasure, restriction or portability, and object to processing based on legitimate interests. You may withdraw consent without affecting the lawfulness of earlier consent-based processing. These rights are subject to legal conditions and exceptions.
Email solucidia@gmail.com with your request and, if relevant, the approximate game date and nickname or room name to help locate records. Never send a password or reconnection credential. Because there is no account and our statistics omit nicknames, we may be unable to connect a statistical record to you. We may request only information reasonably necessary to locate the data and verify your request.
Under the GDPR, we normally respond within one month. Where a permitted extension is necessary, we explain it within that initial period. Requests are normally free. You may complain to your local data-protection authority; in France, this is the CNIL: https://www.cnil.fr/en.
10. Children, security and policy changes
We do not ask players for their age or knowingly build profiles of children through the game's own statistics system. Young players should avoid sharing their real name, contact details or other private information. Where a child cannot legally consent to optional tracking independently, a parent or guardian must provide the required authorisation. Parents or guardians can contact us about a child's data.
We restrict administration access, keep recovery credentials private and use safeguards intended to protect the service. No online service can promise absolute security. Contact solucidia@gmail.com if information or a room credential may have been exposed.
We may update this policy when the service or its data practices change. The date above identifies the current version. Material changes will be communicated as appropriate; an updated policy does not replace consent where consent is required.