Privacy Policy
Last updated: October 2025
The short version
Hoodwinked is a party game. We store the bare minimum needed to keep your name, avatar, and scores on your own device, and to sync the live game state with the other players in your room. We do not sell your data, run third-party ad tracking, or build advertising profiles.
What we store on your device
The app uses your browser's localStorage to remember:
- Your chosen display name and avatar
- Mute / sound preference
- An anonymous device ID used to reconnect to your in-progress game
- Solo case scores (wins, losses, streaks) for each of the 12 solo games
- If you host a room: a host token tied to the room code, so refreshing the page keeps your host privileges
This data never leaves your device unless you actively share it (for example, your display name is sent to the other players in your room so they can see who they're playing with). You can wipe all of it at any time on the About page.
What we send to game servers
Multiplayer rooms are powered by PartyKit (Cloudflare-hosted). When you join or host a room, the following are sent to the room server for the duration of the game:
- Your display name and avatar selection
- Your votes, answers, and game actions
- Your score for the current game
Room state is held in memory and is discarded when the room is empty. Solo games run entirely on your device and never talk to a game server.
Third-party services
The app can call these services. Each is opt-in via your actions and gated behind host sign-in where noted:
- Google Sign-In (via NextAuth) — required only if you want to host a room. We receive your Google account email and profile picture so we can verify your host access. We do not store this beyond your session.
- OpenAI image generation — used by the host's device during the picture-reveal party mode to generate the round's artwork. The text prompt is sent to OpenAI; players' personal data is not.
- ElevenLabs voice synthesis — used by the host's device for the announcer voice in some party modes. The short text to be spoken is sent to ElevenLabs.
- Pollinations.ai — used as an image-generation fallback if OpenAI is unavailable.
Each provider has its own privacy policy. We only send the minimum text or prompt the feature needs, and we do not pass personal identifiers to these providers.
Children
Hoodwinked is intended for a general audience. Because party answers and lobby chat are free-form, some game content may be created by other players. We don't knowingly collect personal information from children under 13. If you believe a child has provided personal information, please contact us and we'll delete it.
Your rights and how to delete your data
- Wipe your saved name, avatar, scores, and host tokens at any time from the Clear my data button on the About page.
- Sign out of Google through your Google account settings to revoke our auth access.
- Leave or close a multiplayer room to remove your live presence from the room server.
- Email us with any other request — see contact below.
Changes to this policy
If we make material changes, we'll update the date at the top of this page. Continued use of the app after a change means you accept the updated policy.
Contact
Questions about privacy, data deletion, or anything else: lance@playhoodwinked.com