Privacy Policy

Last updated: November 2025

What Data We Collect

We collect minimal data to facilitate gameplay:

  • Display names: Automatically generated names (e.g., "Alice52891") assigned when you connect. You can change your display name, but it must be unique among active players.
  • Session data: Your connection status, current room, and last activity timestamp stored temporarily in our PostgreSQL database.
  • Game room data: Room names you create, game type, and privacy settings.
  • Browser storage: Room information temporarily stored in your browser's session storage (deleted when you close the tab), and sound preference in local storage.

Analytics

We use Cloudflare Web Analytics to understand how visitors use our site. Cloudflare Analytics is privacy-first and does not use cookies or track individual users. It collects:

  • Aggregated page views and visitor counts
  • Referrer information (where visitors came from)
  • Browser and device type (anonymized)
  • Country-level location data (derived from IP, not stored)

Cloudflare does not track you across sites or sell your data. Learn more at Cloudflare Web Analytics.

What We Don't Collect

We do not collect or store:

  • Email addresses, phone numbers, or any personal contact information
  • Personal IP addresses or device identifiers
  • Payment or financial information
  • Browsing history or tracking cookies
  • Cross-site tracking data or advertising profiles

How We Use Your Data

Display names and session data are used exclusively to:

  • Identify players within game rooms
  • Manage WebSocket connections for real-time gameplay
  • Display who is in each game room

We do not use your data for advertising, tracking, profiling, or any purpose beyond facilitating gameplay.

Chat Messages

Chat messages are stored temporarily in memory only during your game session. They are automatically deleted when you leave the room or the room closes. Messages are automatically filtered for profanity and rate-limited to 5 messages per 10 seconds to prevent spam.

Data Retention and Deletion

All data is ephemeral and automatically deleted:

  • Display names are deleted immediately when you disconnect
  • Game rooms are deleted when the host leaves or all players disconnect
  • Chat messages are cleared from memory when the room closes
  • Stale connections are automatically cleaned up after 5 minutes of inactivity

Browser session storage is automatically cleared when you close the browser tab.

Third-Party Services

We use the following third-party services:

  • Google Fonts: For web font delivery via Google's CDN
  • Cloudflare Web Analytics: Privacy-first analytics without cookies or cross-site tracking

We do not use advertising networks, tracking pixels, or invasive analytics.

Your Rights (GDPR)

Under GDPR, you have rights regarding your personal data. Given the ephemeral nature of our data collection (no accounts, no persistent tracking), these rights are automatically satisfied by disconnecting from the service, which immediately deletes all your data.

Contact Us

If you have any questions about this Privacy Policy, please contact us at admin@two-players.org.