Bluff It!
Privacy Notice
This notice explains what Bluff It! handles when you visit the site or play a game, why it is needed, and how to contact us. Do not use a real name or include sensitive information in your nickname.
Information used to run the game
We handle the nickname and emoji you choose, an anonymous browser or player identifier, the room code, and game state such as room membership, roles, and scores. Bluff It! does not require a permanent account.
Browser storage and security
Your browser stores the interface language and recent room-session details. The Mainland China route uses a Secure, HttpOnly, SameSite session cookie for up to eight hours and an IP-derived pseudonymous key to limit abuse.
Before analytics events are sent from the game, private room URLs are reduced to a fixed placeholder so the room code is not included in the event URL.
Service providers and retention
Vercel hosts the site and same-origin API and provides web analytics. Google Firebase provides anonymous authentication, database, server functions, and App Check when it is enabled.
Room records expire eight hours after the latest room-changing activity, and an hourly cleanup removes expired rooms. Data stored in the browser remains until the app or the user removes it. The project does not define a retention period for service-provider security or operational logs.
Advertising and Google AdSense
Bluff It! may use Google AdSense on public content pages. When advertising is enabled, Google and its partners may use cookies, web beacons, IP addresses, or other identifiers, and may place or read cookies on your browser, to serve and measure ads. Depending on your consent and settings, ads may be personalized using information from visits to this and other sites, or may be non-personalized. Advertising is not enabled on private room or gameplay routes.
Where consent is required, we will not enable advertising that requires consent until you can make a choice through a Google-certified consent platform.
Google explains how it uses information from partner sites and provides controls for ad personalization at the links below.
Privacy questions and requests
For questions or requests about your information, email the address below. If it helps identify a game session, you may include the approximate play time and room code, but never send a session token or another secret.