Privacy Policy
Last updated: November 2025
What Data We Collect
We collect minimal data to facilitate gameplay:
- Display names: Automatically generated names (e.g., "Alice52891") assigned when you connect. You can change your display name, but it must be unique among active players.
- Session data: Your connection status, current room, and last activity timestamp stored temporarily in our PostgreSQL database.
- Game room data: Room names you create, game type, and privacy settings.
- Browser storage: Room information temporarily stored in your browser's session storage (deleted when you close the tab), and sound preference in local storage.
Analytics
We use Cloudflare Web Analytics to understand how visitors use our site. Cloudflare Analytics is privacy-first and does not use cookies or track individual users. It collects:
- Aggregated page views and visitor counts
- Referrer information (where visitors came from)
- Browser and device type (anonymized)
- Country-level location data (derived from IP, not stored)
Cloudflare does not track you across sites or sell your data. Learn more at Cloudflare Web Analytics.
What We Don't Collect
We do not collect or store:
- Email addresses, phone numbers, or any personal contact information
- Personal IP addresses or device identifiers
- Payment or financial information
- Browsing history or tracking cookies
- Cross-site tracking data or advertising profiles
How We Use Your Data
Display names and session data are used exclusively to:
- Identify players within game rooms
- Manage WebSocket connections for real-time gameplay
- Display who is in each game room
We do not use your data for advertising, tracking, profiling, or any purpose beyond facilitating gameplay.
Chat Messages
Chat messages are stored temporarily in memory only during your game session. They are automatically deleted when you leave the room or the room closes. Messages are automatically filtered for profanity and rate-limited to 5 messages per 10 seconds to prevent spam.
Data Retention and Deletion
All data is ephemeral and automatically deleted:
- Display names are deleted immediately when you disconnect
- Game rooms are deleted when the host leaves or all players disconnect
- Chat messages are cleared from memory when the room closes
- Stale connections are automatically cleaned up after 5 minutes of inactivity
Browser session storage is automatically cleared when you close the browser tab.
Third-Party Services
We use the following third-party services:
- Google Fonts: For web font delivery via Google's CDN
- Cloudflare Web Analytics: Privacy-first analytics without cookies or cross-site tracking
We do not use advertising networks, tracking pixels, or invasive analytics.
Your Rights (GDPR)
Under GDPR, you have rights regarding your personal data. Given the ephemeral nature of our data collection (no accounts, no persistent tracking), these rights are automatically satisfied by disconnecting from the service, which immediately deletes all your data.
Contact Us
If you have any questions about this Privacy Policy, please contact us at admin@two-players.org.