Privacy policy

What we collect

• Your email address, when you create an account. If you sign in with Google, Google gives us your email address and nothing else we keep.
• A display name and a preferred language, if you set them.
• Your credits: the balance, and a list of credits added and spent.
• The games you host: team names, player names, scores, answers and votes typed during the game.
• If you play while signed in: for each game, which game it was, how many rounds you played, whether you won, and the experience points it earned you. Your profile adds its wins and level up from these.
• A leaderboard among the people you have played with shows each of you the others' display name and how many games they played and won this month. Nothing else about an account is shown to anyone.
• If you join someone's game as a guest: only the name you type. No account and no email are needed.
• If you buy credits: which pack, the amount, and the payment's reference from Stripe. We never see or store your card number. If you choose to save a card for next time, Stripe keeps it, not us, and deleting your account removes it.
• If you send credits as a gift: your friend's email address, kept with the gift so the credits reach them. We email them once to say the credits are theirs.

What we do not collect

• No advertising identifiers and no tracking across other apps or websites.
• No precise location, contacts, photos, microphone or camera. The only thing we use about where you are is your country, to show prices in your currency. It comes from your internet address and we do not store it.
• No analytics or advertising scripts from other companies.

How we use it

• To sign you in and keep your account.
• To run the games and show them on every player's screen.
• To add the credits you buy and take them when you start a game.
• To email you a sign-in link. We do not send marketing email.

Who else handles your data

• Supabase stores the accounts and games database.
• Cloudflare carries the traffic to our site, protects it, and tells us which country a visit comes from.
• Stripe takes payments. Card details go straight to Stripe and are covered by Stripe's own privacy policy.
• Resend delivers the sign-in emails.
• Google, only if you choose to sign in with Google.
• We do not sell your data and we do not share it with anyone for advertising.

Cookies and storage on your device

• One cookie keeps you signed in, and one remembers your language.
• When you join a game, your device stores a private key for that game so you stay the same player if the page reloads. It also keeps the codes of the games it opened in the last day, so you can get back into one you left.
• Stripe sets its own cookies on the payment form to prevent fraud.
• There are no advertising cookies.

How long we keep it

• Your account and everything tied to it stay until you delete the account.
• Deleting your account removes your profile, your credits and their history, and the games you hosted, straight away.
• One thing is kept after deletion: if the account had used its free game, a scrambled fingerprint of its email address, which cannot be turned back into the address. It only stops the free game being claimed twice.
• The same kind of fingerprint is kept for each promo code an address has used, so a code cannot be collected twice by making a new account.
• Stripe keeps payment records for as long as the law requires it to.

Children

Yalsatna is a family game, but accounts are for people aged 13 and over. Younger players can join a game as a guest with only a name. If you believe a child has given us an email address, write to us and we will delete it.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the date at the top.