Privacy Policy

GhostRooms ("the app", "we", "us") is a social party game where friends answer prompts anonymously and guess who wrote what. This policy explains what information we collect, how we use it, and the choices you have. By creating an account or using GhostRooms, you agree to this policy.

1. Information we collect

• Account information — your email address, a password (stored only as a securely hashed value, never in plain text), and your chosen display name.
• Profile — a display name and avatar you select.
• Game content — the answers you write, the guesses and votes you cast, the rooms you create or join, and your scores. This content is created by you during play.
• Notification token — if you enable push notifications, a device token provided by Firebase Cloud Messaging so we can send game alerts.
• Technical data — standard server logs (such as IP address and request time) generated automatically for security, abuse prevention, and reliability.
• Analytics — we use Google Firebase Analytics, which collects app‑usage events (such as screens viewed and games started), a Firebase installation identifier, and general device and app information, to help us understand how the app is used and improve it.

We do not collect your contacts, precise (GPS) location, or photos, we do not use third‑party advertising networks, and we do not sell your personal data. Our analytics may infer only an approximate, city‑level location from your IP address.

2. How we use your information

• To create and secure your account and sign you in.
• To run games — assign your anonymous nickname, show your answers to other players in your room, and calculate scores.
• To send you game notifications (only if you allow them).
• To keep the service safe: prevent abuse, rate‑limit, and fix problems.

3. Anonymity and the "Big Reveal"

4. How we share information

We do not sell your personal data. We share limited data only with service providers that help us run the app:

• Google Firebase Cloud Messaging — to deliver push notifications (uses your device token).
• Google Firebase Analytics — to measure app usage and improve the app (receives usage events and an app‑instance identifier).
• Hosting provider (Hetzner, Germany) — our servers and database run on their infrastructure.

We may also disclose information if required by law or to protect the rights and safety of our users.

5. Data retention and deletion

We keep your information for as long as your account exists. You can delete your account at any time from the app (Profile → Delete account). Deleting your account permanently removes your profile and associated data — including rooms you created and their game history — from our database. Backups, if any, are rotated and purged over time.

6. Security

Passwords are stored using strong one‑way hashing (bcrypt), all traffic is encrypted with HTTPS/TLS, and our database is not exposed to the public internet. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your data.

7. Children

GhostRooms is not directed to children under 13 (or the minimum age required in your country). If you believe a child has provided us personal data, contact us and we will delete it.

8. Your rights

You can access and update your display name in the app, and delete your account and data at any time. For any other request regarding your data, contact us using the details below.

9. Changes to this policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date above.

10. Contact

Questions about this policy or your data? Email us at haikuappdeveloper@gmail.com.