gamefriday.party
Back to Home

Privacy Policy

Last updated: June 2026

Overview

gamefriday.party is a collection of free online party games including Music Quiz (also available at musicquiz.party), Themed Werewolf, and Bingo Caller (also available at bingocaller.games). This privacy policy applies to all games and services operated under these domains. We are committed to protecting your privacy and being transparent about what data we collect.

Information We Collect

Game Data

When you use our games, we may temporarily store:

  • Your chosen display name or player name
  • Game scores, guesses, and in-game actions
  • A randomly generated player or session ID (stored in your browser)
  • User-generated content such as playlists, game rooms, or custom settings

Account Data

Accounts are optional — you can play most games without signing in. If you choose to create an account at auth.gamefriday.party, we store:

  • Your email address and (for email/password accounts) a hashed password — we never store passwords in plain text
  • Your display name and whether your email is verified
  • If you sign in via Google, GitHub, or Twitch: the unique user ID and basic profile information (name, email, avatar URL) returned by that provider. We do not receive your password for these providers.
  • Session records (token, expiry, IP address, and user-agent string) used to keep you signed in across our games
  • Per-feature usage counters such as your daily AI playlist generation count, used to enforce fair-use limits

Account data is stored in a Cloudflare D1 database operated by us and is not sold or shared with third parties for marketing.

Browser Storage

We use cookies and local storage to remember:

  • Content you have created (for easy access later)
  • Your cookie consent preference
  • Game preferences and settings
  • Your authenticated session (when signed in), scoped to .gamefriday.party so a single sign-in works across all our games

Public Leaderboards

Signed-in players can choose to appear on our public weekly and all-time leaderboards. This is off by default— your results are never shown publicly unless you explicitly opt in from your profile settings at /me.

When you opt in, the following becomes visible to anyone viewing the leaderboards:

  • Your public handle (a display name you choose, separate from your email)
  • Your avatar image, if you have one
  • Your win counts, win streaks, and best-score metrics for each game

Anonymous (signed-out) play never appears on leaderboards. You can withdraw your consent at any time by turning off the leaderboard option in your profile settings, which removes you from the public boards going forward. To keep the boards fair, we apply anti-abuse rules to which wins count, and we may exclude entries we believe to be manipulated.

Information We Do Not Collect

  • Email addresses or contact information from anonymous (signed out) play
  • Payment or financial information
  • Precise location data
  • Advertising or behavioural tracking data
  • Social media graph data from OAuth providers beyond the basic profile fields listed above

Analytics

We use the following analytics services to understand how our games are used and to improve the experience:

Umami (Self-hosted)

We use a self-hosted instance of Umami, an open-source, privacy-focused analytics tool, for aggregate page views and basic interaction counts (such as when a share button is used). Umami does not use cookies, does not collect personal data, and does not track you across other websites. All data is stored on our own infrastructure and never shared with third parties.

Cloudflare Analytics Engine (Server-side)

Our game servers record aggregate, non-identifying events — such as a room being started, a match completing (with its duration and player count), and a share link being opened — to Cloudflare Analytics Engine. These are counts and trends only; no cookies, no IP addresses, and no personal profiles are stored.

Game identifier (local storage)

To let you reconnect to a room and carry your game history across our games, we store a random identifier in your browser's local storage. We also use it in aggregate to understand how many players go on to create an account. It is not a cookie, is never sold or shared, and you can clear it at any time by clearing your browser storage. If you create an account, your prior guest history can be linked to it at your request.

Third-Party Services

Our games may use the following third-party services:

Deezer API

Used by Music Quiz to search for music and play 30-second preview clips. Audio previews are streamed directly from Deezer's servers.

OAuth Providers (Google, GitHub, Twitch)

If you choose to sign in with Google, GitHub, or Twitch, we redirect you to that provider so you can authorise our application. The provider then returns a basic profile (typically: unique user ID, name, email, and avatar URL). We do not see your password. Each provider's handling of your data is governed by its own privacy policy: Google, GitHub, Twitch. You can revoke our access at any time from the security or connected-apps settings of the provider.

Cloudflare

Our websites and services are hosted on Cloudflare's infrastructure, and our user, session, and account data is stored in Cloudflare D1 (a managed SQLite database). Cloudflare may collect technical data as described in their privacy policy.

Cloudflare Turnstile

We use Cloudflare Turnstile to protect our contact form and game-room creation from automated abuse. Turnstile runs both visibly and invisibly and may process technical signals from your browser to distinguish people from bots. This processing is described in the Cloudflare Turnstile Privacy Addendum.

Data Retention

  • User-generated content: Stored indefinitely unless deleted by the user or removed for policy violations
  • Game session data: Retained temporarily and may be cleaned up periodically
  • Account data: Retained for as long as your account exists. When you request deletion, we remove your profile, linked OAuth identities, and active sessions.
  • Authentication sessions: Expire after a fixed period (typically 7 days) of inactivity and on sign-out.
  • Cookies: Expire after 30 days
  • Analytics: Aggregate, non-personal data only

Your Rights

You can:

  • Clear cookies and local storage from your browser at any time
  • Use most of our games without providing any personal information — sign-in is only required for features that need it
  • Sign out at any time from auth.gamefriday.party to invalidate your current session
  • Revoke our access to your Google, GitHub, or Twitch account directly from that provider's security settings
  • Contact us to request access to, correction of, or deletion of your account and any content you have created. Under UK GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing.

Children's Privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy, please contact us.