Privacy

The short version

There are no accounts, no cookies and no advertising. The site keeps anonymous page-view statistics, one anonymous total for each would you rather question and this or that pair, and, only if you ask for it, your email address for the Host Pass launch notice.

Analytics

Pages are measured with Umami, a privacy-focused analytics tool that I host myself. It records the page address, the referring site, browser, device type, country and a few events such as starting a game. It sets no cookies and keeps no IP address in its database.

Would you rather and this or that votes

When you tap an answer, the site adds one to that side of that question or pair in a database at Cloudflare. The only things stored are the question and the two running totals. Your IP address, browser details and the time of your vote are not recorded with it. Your device keeps a list of the questions and pairs you answered so you do not get them twice. That list never leaves your device.

Host Pass launch notice

Every game page and the home page offer an email notice for the Host Pass, a paid add-on that is planned and not yet on sale ($4.99 once at launch, for new packs written for it and your own word lists for Imposter and Pictionary; everything that is free today stays free). The notice sits at the bottom of the page. After you finish a game, a small card on the last screen offers the same notice, with Tell me, Not now and No thanks buttons. If you put it off or ignore it, it can return once, after at least 14 days and four finished games. If you tap No thanks, it never returns. If you enter your email address and tap the button, the site stores the address, the page you were on (for the card, the game page followed by “finish”), the date and time, and the exact consent text shown next to the button. It uses the address for one email, when the Host Pass launches, and for nothing else. It is not shared, sold or added to any other list. To have your address deleted, email hello@sneakyword.com and it will be removed. Your IP address is used for a short rate limit that stops form spam and is not stored with the sign-up. The form does nothing unless you submit it, and no game needs it.

What stays in your browser

Player and team names, MASH options, game settings, never have I ever statements, trivia scores and imposter words exist only on the page while you play. They are never sent to a server and are gone when you reload or close the page. The same goes for Secret Santa names and the draw. A Secret Santa private link carries one match in the part of the address after the # sign, which browsers do not send to any server; whoever receives the link can open it. The site saves three things on your device. One is the list of would you rather questions and this or that pairs you have answered. Another is three small notes for the Host Pass card: how many games you finished and on which of the last ten days, whether and when the card was shown or put off, and whether you signed up. The third is for the Spanish snake game (juego de la serpiente): your settings, your best score for each mode and speed, and the colours you unlocked. None of it leaves your device; the Host Pass notes only decide whether the card appears. Clear your site data and all of it is gone.

Share links and images

If you share a MASH fortune or a would you rather result, the link carries the result text, for example “Home: Mansion”. When someone opens the link or a social network previews it, the site draws a picture from that text. The text is not saved. Anyone who has the link can read what is in it, so do not put anything private into a MASH option you plan to share.

Hosting

The site runs on Cloudflare. Like any host, Cloudflare handles your IP address to deliver pages and protect the site. It is covered by Cloudflare's privacy policy. I use that address only for a short rate limit that stops vote spam, and I do not store it.

Questions

Email hello@sneakyword.com. There is no personal data on file to delete, but I am happy to answer anything about how the site works.