Privacy Policy
Effective
Draft pending legal review. Highlighted text is a placeholder to fill in before launch.
1.Who we are
Jake Amaral (“we,” “us”) operates Plotluck, a party game played on a shared screen and phones. This policy explains what personal information we collect, why, and the choices you have. It applies to our website, the game, and related services (the “Service”).
2.The short version
- Playing needs no account. Players join with a nickname; we never ask players for an email, phone number, or real name.
- What you type in a game lives in our game server's memory for that game and is gone when the room closes.
- A story is saved only if the host shares it, and shared links stop working after 30 days.
- Hosts who subscribe to Plotluckier create an account with an email address. Payments are handled by Stripe.
- We don't sell personal information, show ads, or build profiles of players.
3.What we collect
When you play
- The nickname and avatar you pick, your answers, endings, plans, votes, ratings, reactions, and score.
- A random reconnect code saved on your device, so you can rejoin if your phone sleeps or loses its connection.
- Your confirmation that you're 13 or older.
When you host
- The room's settings and a random host code saved on your device, so a refresh doesn't end the game.
- If you share a story: that story, the nicknames credited for its answers, and the scoreboard at that moment.
If you subscribe to Plotluckier
- Your email address and password. Passwords are stored only as a secure hash by our authentication provider.
- Your subscription status, plan, and a Stripe customer ID. Stripe processes your card; we never receive or store your full card number.
Collected automatically
- A random identifier for your browser, stored on your device, sent with anonymous play events (when a game starts and ends, how many rounds were played, which game and story were used, how long the story took to write, round ratings, and the estimated cost of writing it). These events contain no nicknames, answers, or story text.
- Technical data such as IP address and browser type. To stop abuse, our game server counts requests per IP address in memory; counters are forgotten after an hour without activity. Our hosting providers keep standard request logs for security and reliability.
- Only if you allow analytics: which pages of our website you visit and key actions (such as opening a room), linked to a random identifier. We don't record your screen, your keystrokes, or anything typed in a game.
4.How we use it
- To run games: show your answers to your room at the right moment, write stories, score rounds, and reconnect you.
- To keep games safe: check what players type, and what the AI writes, against our content rules before it's shown.
- To process Plotluckier subscriptions and send receipts and important account notices.
- To prevent fraud and abuse, and to comply with legal obligations.
- To improve the game, using the anonymous play events and ratings described above.
We don't sell your personal information, share it for cross-context behavioral advertising, or use it to infer characteristics about you.
5.How stories are written
When AI stories are on, a round's answers (including any names typed into them), the story template, and players' endings and plans are sent to our AI provider, Anthropic, to write the story, the bonus material, and the Judge's verdicts, and to check custom answers against the room's content rules. Anthropic processes this data on our behalf under its commercial terms, doesn't use it to train its models, and deletes it on its own schedule (currently within [30] days). Don't type personal information such as phone numbers or addresses into a game; our filters block common formats.
9.How long we keep it
- Game content (nicknames, answers, endings, plans, votes): until the room closes, at most a few hours after it goes quiet.
- Shared stories: 30 days, then they stop being served and are deleted.
- Anonymous play events: up to 24 months, then deleted.
- Rate-limit counters: about an hour.
- Plotluckier accounts: while your account is open. When you delete it, we delete or de-identify your information within 30 days, except records we must keep for legal, tax, or accounting reasons (such as payment records).
10.Security
Connections are encrypted in transit. Reconnect and host codes are random, never shown to other players, and checked in constant time. Only our game server can read or write stored data, and our database refuses access from anywhere else. We keep as little as we can. No system is perfectly secure; if a breach affects you, we'll notify you as the law requires.
11.Your choices and rights
- You can play without giving us any contact information at all.
- You can ask us to remove a shared story at any time.
- Plotluckier subscribers can cancel online at any time and can ask us to delete their account.
- We don't send marketing email unless you ask for it, and we never send text messages or make marketing calls.
- We honor Global Privacy Control: if your browser sends it, we don't load analytics unless you turn them on yourself.
- Depending on where you live (for example California, other US states with privacy laws, or the EU/UK), you may have rights to access, correct, delete, or port your information, and to object to or limit certain processing. We won't discriminate against you for using them.
To make a request, email [privacy@yourdomain.com]. Because most play data isn't tied to an identity, we may ask for details (such as a shared-story link or your account email) to find it, and we'll verify your identity before acting. We respond within 30 days.
California residents: in the past 12 months we collected identifiers (nicknames, a random browser identifier, IP address, and, for subscribers, email address), commercial information (subscription status), internet activity (website analytics, only with consent), and game content, for the purposes in “How we use it.” We don't sell personal information or share it for cross-context behavioral advertising.
12.Children and teens
Plotluck isn't directed to children under 13, and players confirm they're 13 or older before joining. We don't knowingly collect personal information from children under 13; if you believe a child under 13 has shared personal information in a game or a shared story, email [privacy@yourdomain.com] and we'll delete it. Plotluckier subscriptions are for adults (18 or older).
13.Where data is processed
We and our providers process data in the United States. If you use Plotluck from elsewhere, your information is transferred to and processed in the US.
14.Changes to this policy
If we make material changes, we'll update the date at the top and, for Plotluckier subscribers, tell you by email before they take effect. See also our Terms of Service. (Plotluckier costs $4.99 a month; see the Terms for billing.)
15.Contact
Jake Amaral, 1120 SW 9th Rd. Privacy questions and requests: [privacy@yourdomain.com].