What we collect, why, how we protect it, and for how long. Written to meet UK GDPR.
Playing without an account
When you join a game we store the team name you type, your answers and the time you gave them, so we can score the game and show standings. We do not ask for your name or email. A random token in your link identifies your phone for the length of the game.
Games that were not created from an account are anonymised 30 days after they are created: team names become "Team 1, Team 2…", the host's name and any invite details are removed, and the join links stop working. The questions, answers and scores stay as anonymous results.
Hosting with an account
If you register we store your name, email address and a hashed password, and keep the games you host so you can see your history. On your account page you can:
- download everything we hold about you
- choose to have your games anonymised 30 or 90 days after they are played (off by default: you have to switch it on)
- anonymise all your finished games straight away
- delete your account and its games entirely
A host can invite people by email. We send one email with a join link and nothing else; the address is deleted as soon as the invite is used, and in any case within a few hours. If you forget your password we email you a one-hour reset link. We never use addresses for marketing.
How we protect it
Every piece of personal data we hold is encrypted in our database with a key kept outside it: names, email addresses, team names, leaderboard nicknames, invite details and the network addresses in our security log. If the database were ever copied without permission, those fields would be unreadable. Passwords are never stored, only a one-way hash.
Nothing personal is shown publicly. Team names are visible only to the people in the same game while it runs, and a game's results can be opened only by its host. Account holders see their own details only after logging in, and the site owner must pass an extra security check before any personal data is shown in the admin area, with every such access logged.
To stop password-guessing, repeated failed logins lock the address and the account for a growing period; a locked account is unlocked by resetting the password by email.
Leaderboard
Solo scores appear on the public leaderboard only if you choose to submit them, under the nickname you pick at that moment. Nicknames stay on the board after a game is anonymised because you chose to publish them; ask us at and we will remove one.
Cookies
One session cookie keeps you signed in and protects forms; one remembers your theme choice. No advertising or analytics cookies are set.
Where data is stored
On servers in the European Economic Area, with our hosting provider. We do not sell or share personal data with anyone else.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Contact . You can also complain to the Information Commissioner's Office (ico.org.uk).
Children
The site is designed to be played by families together on one screen. We do not knowingly collect personal data from children: joining a game needs only a team name, and accounts are for adults who host games.
Last updated 2026.