Free-beta privacy
Personal stories belong to the people in them.
This product only works because friends type true things about someone they know. That material is theirs, not ours and not the organizer's, and the whole design follows from that.
Account and event data
Signing in stores your email address and an authentication record. Creating an event stores its occasion, title, subject name, date, time zone, settings, invited collaborators, and the content you choose to collect. Secret contributor and play links are stored as one-way hashes rather than readable tokens.
Organizers control their events. Contributors can access only the event linked by their invitation, and players can access only a published game through its play link.
Photographs
Photographs a contributor uploads are stored in a private bucket that no browser can read directly. Organizers see them through short-lived signed links, never a storage path. When an event is deleted the image files are removed from storage before the database rows go, so nothing is left behind that a row no longer points at.
Playing in the browser
Joining a game stores the display name a guest types and the answers they give, tied to a random identifier held in a cookie on their own phone. That cookie is what lets somebody rejoin after their screen locks. We never ask a guest for an email address or an account, and play data is deleted with the event.
Reporting something
Anyone holding a contributor link or a join card can report what they see, at /reporton their own link, without an account. Every reason except “something is broken” pauses the game immediately: nobody is shown the pack again until the organizer has looked at the report.
We do not record who reported it. The organizer sees the reason chosen and anything the reporter chose to type, and cannot delete the report.
Taking your contribution back
A contributor can withdraw what they sent from their own link. If approved material of theirs has already reached a published pack, publication is paused and the organizer is told to regenerate before the game runs again.
What the site measures
A first-party endpoint records an anonymous visitor ID, session ID, landing path, traffic-source tags, and named funnel steps such as starting personalization, completing a preview, submitting a value verdict, or indicating purchase intent. The records are stored in a private Supabase table that browsers cannot read directly.
The browser uses localStorage for the anonymous visitor ID and sessionStorage for the current session and landing path. This test uses no tracking cookies, advertising pixels, session replay, or automatic click-and-text capture.
What analytics and logs never receive
The guest of honour's name, trivia questions, answers, contributor names, memories, photographs, blocked topics, and relationship details are not sent as event properties.
The same rule applies to the audit trail an organizer can read on their own event. It records that something happened and how many rows it touched — never anybody's words. Metadata is restricted to counts, flags, and values from a fixed list, and anything else is refused rather than trimmed.
How long anything is kept
An event and everything in it is deleted 90 days after the event date, whether or not anyone asks. The organizer gets 14days' notice on the event's privacy page, with an export link, before that happens.
An organizer can delete an event at any time from that page. Every contributor and join link stops working the moment they ask; the stored data is erased after a 24-hour window in which they can change their mind. After that it is gone, including the photographs in storage and the audit trail itself.
Anonymous validation events and unused reservation emails are deleted within 90 days of the validation period ending.
Free beta
No payment is collected in the beta, and there is nothing to buy. If you submit an email through the preview or feedback flow, it is used only to invite you, contact you about your experience, or match a privacy request.
Operator and requests
This independent beta is operated by Personalized Party Games. Use this form to request deletion or ask how your data is handled. The email is stored only with the request so it can be matched to an account, event, or reservation record.