Privacy Policy

Effective 20 October 2026 · Version 1.4

Who is responsible

The game operator is the controller of the game data described here. Contact shitheadsupport@icloud.com or write to 52 Daisy Way, Louth, Lincolnshire, LN11 0FS, United Kingdom. This notice covers this game; provider accounts and services are also subject to the providers’ own notices.

Data we use and why

For email accounts, Supabase manages your email address, password authentication, email confirmation and login sessions. Passwords are sent securely for authentication and are not stored in game records. The game verifies your account with Supabase before using its account identifier and email address. We use the verified identifier to associate saved features with you; the verified owner email is checked for administrator access. Account identifiers are hashed in game records. Hashing does not make those records anonymous. Your email is not shown as your player name or leaderboard name.

We store the nickname and friend code you create, requests, accepted links and invitations to provide the social features you choose. Accepted friends can see your name, code, level/title and whether you have recently had the game open. Profile data comes from you; invitations and chat also come from players you interact with.

Multiplayer records contain room codes, access tokens, player names/account references, cards, actions, readiness, connection timestamps and results. These run the game and restore your seat. Other room participants receive public cards, their own hidden information and other players’ hidden-card counts. Keep your room access private.

Chat and nudges are visible to the room. A room retains up to 40 recent chat messages. Chat is not end-to-end encrypted and should not contain private information. XP records contain totals and recent award references to prevent duplicate awards. Account-linked levels are visible to accepted friends; earned XP appears in room results.

If you opt into the Premium leaderboard, your chosen public nickname and eligible results appear on the live board for Premium viewers. Free viewers see labelled samples. You can leave the leaderboard using its controls.

When you email support, we receive your address, message and any attachments you choose to send. Please avoid unnecessary personal details. Support email is handled through iCloud Mail. There are no marketing emails or advertising trackers added by the game application.

Stripe processes Premium payments. We use purchase references, payment status and account-linked entitlement records to verify purchases, restore access, prevent fraud and handle refunds. Card entry is handled by Stripe; the game does not store your full card details. Stripe processes payment information under its own privacy notice: https://stripe.com/gb/privacy.

Chat mute and reports

You can mute room chat or an individual player on this device. This hides incoming messages, popups and reminders locally; it does not stop other room members receiving messages. Mute preferences are stored in this browser and do not carry to other devices.

When you report a message, the server checks that you belong to the room and that the selected message exists. The report contains that message, its sender/time, room code, reporter name/seat, selected reason and any existing hashed account references for the reporter and sender. Room tokens, hidden cards and unrelated chat are not included in the report. Reports are available only to the administrator for investigating abuse and protecting players. Reports do not automatically punish a player. The administrator can remove the message or restrict and later restore that player’s chat in the reported room; gameplay remains available. Contact support to question a restriction.

Reports expire after 30 days. An hourly background task removes expired records in bounded batches, with traffic-triggered cleanup as a fallback. Removal is not instantaneous; backlogs or service interruptions can delay a batch. The in-game data-deletion process removes reports linked to the deleting account; guests can contact support about a report. A removed chat message may remain in a report until that report is removed. Do not add sensitive details to reports. Reporting is not an emergency response service.

Legal bases

We use data necessary to provide the gameplay and saved account features you request to perform our agreement with you. Our legitimate interests support protecting accounts and players, preventing duplicate/manipulated awards, maintaining service security and dealing with support enquiries or complaints. We balance these interests against your rights, especially for younger players. Optional social features are used only when you choose them; choosing a feature does not mean that all processing relies on GDPR consent.

Where a legal duty applies, such as retaining a transaction record or responding to a lawful request, we rely on that duty. If we introduce processing that requires consent, we will explain it and provide a way to withdraw consent before it starts.

Who receives information

OpenAI/ChatGPT Sites supplies hosting and separately authorized administrator maintenance access. Its deployed runtime uses Cloudflare infrastructure and storage. Supabase provides email-account authentication. Resend delivers account confirmation, invitation and password reset emails, processing the recipient address and email content for delivery. Apple/iCloud handles support email. Other players receive the game/social information described above. Clicking a social-share link takes you to that service, whose own terms and privacy notice then apply. We may disclose information where legally required or necessary to address a specific security or legal claim.

The game does not request access to your ChatGPT conversations or email inbox. Platform providers may separately process technical information such as IP addresses, devices, authentication cookies and service logs under their own arrangements.

Provider information: https://openai.com/policies/privacy-policy/ and https://www.cloudflare.com/privacypolicy/ . For questions about the handling of a specific record in this game, contact us rather than relying only on a provider’s general notice.

Storage locations and international processing

Players may be outside the UK; data is not guaranteed to stay in the UK. Hosting, authentication and email providers operate internationally and may process data outside the UK. Their general privacy notices describe their international processing. Contact us for information about the processing location and applicable transfer arrangements for your request. We do not represent a provider’s general policy as confirmation of the particular contractual safeguards for this deployment.

How long information is kept

Room access ends 24 hours after creation. Expired rooms, including their retained chat and card state, are removed in bounded cleanup batches by an hourly background task, by site traffic or when an expired room is requested. The task runs without a player keeping the game open. Physical removal is batched and can be delayed by backlogs or service interruptions. Invitations expire after at most one hour, and expired entries are pruned during cleanup. Presence records older than 24 hours are also eligible for cleanup; an online indicator normally becomes inactive after about a minute.

Profiles, friend links, Power Card presets, XP and rankings are retained to provide your saved account features until you remove them or delete your game data. Recent XP award references are pruned when that account next earns XP after their two-day duplicate-check window. Browser settings and statistics remain until cleared or removed using the controls on that device.

Support correspondence is kept while needed to resolve the enquiry and any related dispute or legal obligation. Relevant factors are whether the matter is open, the nature of the issue and any applicable claim or record-keeping requirement. You can ask us to delete correspondence no longer needed.

Purchase/entitlement and administrator records are retained separately for restoring access, financial/legal obligations and service security. A minimal account-hash/reset marker is retained after game-data deletion to prevent historic rounds restoring erased XP and to record deletion state. Those retained records can be reviewed through a support request; deletion is not refused simply because a record is technically stored separately.

The in-game deletion control does not delete a provider’s own account, logs or backups. Those are governed by provider arrangements and any applicable retention duties. Contact support for assistance with a request concerning these records.

Administrator account support

Signed-in accounts have a private support record containing the account email supplied by the sign-in provider, first recorded sign-in and recent activity time. Administrators can view these alongside player profile, Premium status and level/XP to support customers and manage accounts. These details are not shown to other players. The game-data deletion control removes this support record; separately retained purchase and administrator records remain as described above. Passwords are used to authenticate with Supabase and are not stored in game records. We do not receive full payment-card details.

Your controls and rights

Use Data & privacy on Home to request deletion of your game data. Sign in, read the consequences and type DELETE. It removes your game profile, friends, invites, XP, presets and leaderboard entry, and closes rooms you joined, deleting their shared cards/chat. Other players lose access to those rooms. If interrupted, resume from the same screen. You can subsequently start a fresh profile. Your login account is unaffected. For help deleting an email login account and its authentication records, contact support. Purchase and administrator records are not removed by that button.

Deletion clears this device’s game browser data. Clear it separately on other devices. Removing a friend or hiding your leaderboard entry is not the same as deleting all account records.

You may request access, correction, erasure, restriction or portability where applicable by emailing shitheadsupport@icloud.com. We may need proportionate information to confirm your identity; do not email passwords or verification codes. We normally respond to data-rights requests within one month, explaining any permitted extension or reason a particular request cannot be fulfilled.

You have the right to object to processing based on legitimate interests. Contact us and explain the processing you object to so we can assess it. Where processing relies on consent, you may withdraw it. You can complain to the Information Commissioner’s Office at https://ico.org.uk/make-a-complaint/ without first having to resolve the matter with us.

Browser storage

The game uses localStorage for room reconnection, names, settings, sounds, statistics and remembering which notifications have been shown. These are browser records, not public profile fields. Clearing them can reset preferences and remove access to a saved seat. The game uses secure, HttpOnly sign-in cookies to maintain your email login session; signing out clears them. Authentication and hosting providers may also use cookies or related storage; see their notices and browser controls. The game application has not added analytics or marketing scripts.

Younger players and changes

The game welcomes players aged 16 or over, including players outside the UK. The game is not intended for under-16s. If you believe an under-16 has supplied personal data, contact support. Use a nickname, keep personal information out of chat and report unwanted contact. Before play, you confirm that you are 16 or over . We save the confirmation version and time on your signed-in game account and remember it in this browser without a routine expiry; you can revisit it using Age confirmation on Home. Online room creation/joining and new saved social activity require that declaration, and room membership records include its version/time until the room is removed. We do not collect your date of birth or identity documents for this check. It is self-declaration: age is not verified, and it is not a geolocation restriction.

We will date changes to this notice. Material changes will be explained through an appropriate notice before new processing starts where required. This page describes the current game, including optional Premium purchases and notifications.

Optional push notifications

If you enable notifications, we store your browser’s push subscription endpoint linked to your game account. We send a generic alert when a friend invites you; no phone number is collected. Your browser’s push provider processes delivery. Disable notifications in your account on each device or in browser settings. Unused subscriptions expire after 180 days and are removed when your game data is deleted.

Additional provider information: Supabase privacy notice · Resend privacy notice.

Private friend messages

Accepted friends can exchange text messages. We store the latest 100 messages per conversation, plus read positions, mute settings and any conversation restriction. Messages older than 30 days are no longer shown; expired messages and conversations are removed during routine cleanup. The two participants can open the conversation; a message you report is copied to the administrator report queue for review and may be retained for up to 30 days after reporting. Removing a friend stops messaging access. Account deletion removes conversations involving that account. Message alerts appear inside the game; this feature does not send email, SMS or push notifications.