Privacy Policy
Last updated: October 2026
Overview
gamefriday.party is a collection of free online party games. Some are also available on their own domains, including Music Quiz at musicquiz.party and Bingo Caller at bingocaller.games. This privacy policy applies to all games and services operated under these domains. We are committed to protecting your privacy and being transparent about what data we collect.
Information We Collect
Game Data
When you use our games, we may temporarily store:
- Your chosen display name or player name
- Game scores, guesses, and in-game actions
- A randomly generated player or session ID (stored in your browser)
- User-generated content such as playlists, game rooms, or custom settings
Account Data
Accounts are optional — you can play most games without signing in. If you choose to create an account at auth.gamefriday.party, we store:
- Your email address and (for email/password accounts) a hashed password — we never store passwords in plain text
- Your display name and whether your email is verified
- If you sign in via Google, GitHub, or Twitch: the unique user ID and basic profile information (name, email, avatar URL) returned by that provider. We do not receive your password for these providers.
- Sign-in session records, including the IP address and browser you signed in from, used to keep you signed in across our games and to protect your account
- Badges and achievements you earn
- Per-feature usage counters such as your daily AI playlist generation count, used to enforce fair-use limits
Account data is stored securely with our hosting provider, under our control, and is not sold or shared with third parties for marketing.
Browser Storage
We use cookies and local storage to remember:
- Content you have created (for easy access later)
- Your cookie consent preference
- Game preferences and settings
- Your authenticated session (when signed in), so a single sign-in works across all our games
Public Leaderboards
Signed-in players can choose to appear on our public weekly and all-time leaderboards. This is off by default— your results are never shown publicly unless you explicitly opt in from your profile settings at /me.
When you opt in, the following becomes visible to anyone viewing the leaderboards:
- Your public handle (a display name you choose, separate from your email)
- Your avatar image, if you have one
- Your win counts, win streaks, and best-score metrics for each game
Anonymous (signed-out) play never appears on leaderboards. You can withdraw your consent at any time by turning off the leaderboard option in your profile settings, which removes you from the public boards going forward. To keep the boards fair, we apply anti-abuse rules to which wins count, and we may exclude entries we believe to be manipulated.
Information We Do Not Collect
- Email addresses or contact information from anonymous (signed out) play
- Payment or financial information
- Precise location data
- Advertising data, or tracking of your activity on other websites
- Social media graph data from OAuth providers beyond the basic profile fields listed above
Analytics
We use the following analytics to understand how our games are used, find what is confusing or broken, and improve the experience. We do this on the basis of our legitimate interest in running and improving the games.
Website analytics (Umami, self-hosted)
We run our own instance of Umami, an open-source, privacy-focused analytics tool, for page views and basic interaction counts (such as when a share button is used). It does not use cookies and does not track you across other websites.
For some visits it also records heatmaps and session replays: how the page is used (clicks, scrolling and pointer movement) and what is shown on screen at the time. Anything you type into form fields is masked before it leaves your browser, but a recording may include what the game displays, such as player names and in-game messages. Recordings are used only to improve the games, are viewed only by us, and are never sold or shared with third parties.
Game statistics (server-side)
Our game servers record aggregate, non-identifying events — such as a room being started, a match completing (with its duration and player count), and a share link being opened. These are counts and trends only; no cookies, no IP addresses, and no personal profiles are stored.
Game identifier (local storage)
To let you reconnect to a room and carry your game history across our games, we store a random identifier in your browser's local storage. We also use it in aggregate to understand how many players go on to create an account. It is not a cookie, is never sold or shared, and you can clear it at any time by clearing your browser storage. If you create an account, your prior guest history can be linked to it at your request.
Third-Party Services
Our games may use the following third-party services:
Deezer API
Used by Music Quiz to search for music and play 30-second preview clips. Audio previews are streamed directly from Deezer's servers.
OAuth Providers (Google, GitHub, Twitch)
If you choose to sign in with Google, GitHub, or Twitch, we redirect you to that provider so you can authorise our application. The provider then returns a basic profile (typically: unique user ID, name, email, and avatar URL). We do not see your password. Each provider's handling of your data is governed by its own privacy policy: Google, GitHub, Twitch. You can revoke our access at any time from the security or connected-apps settings of the provider.
Cloudflare
Our websites and services, including the storage of account data, are hosted on Cloudflare's infrastructure. Cloudflare may collect technical data as described in their privacy policy.
Cloudflare Turnstile
We use Cloudflare Turnstile to protect account sign-up, our contact form and game-room creation from bots and automated abuse. It usually runs invisibly in the background, with nothing for you to do, and may process technical signals from your browser and device to tell people from bots. This processing is described in the Cloudflare Turnstile Privacy Addendum.
Data Retention
- User-generated content: Stored indefinitely unless deleted by the user or removed for policy violations
- Game session data: Retained temporarily and may be cleaned up periodically
- Account data: Retained for as long as your account exists. When you request deletion, we remove your profile, linked OAuth identities, and active sessions.
- Authentication sessions: Expire after a fixed period (typically 7 days) of inactivity and on sign-out.
- Cookies: Expire after 30 days
- Analytics: Aggregate statistics are kept long-term; session recordings and heatmap data are kept for a limited period and then deleted
Your Rights
You can:
- Clear cookies and local storage from your browser at any time
- Use most of our games without providing any personal information — sign-in is only required for features that need it
- Sign out at any time from auth.gamefriday.party to invalidate your current session
- Revoke our access to your Google, GitHub, or Twitch account directly from that provider's security settings
- Contact us to request access to, correction of, or deletion of your account and any content you have created. Under UK GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing.
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us.