Privacy Policy

Last updated: September 3, 2026

Guesstastic is a party game. It needs remarkably little about you, and there is nothing here that sells you to anybody.

The short version

What we collect

When you play, with or without an account

The name you type
Whatever you enter when you join a game. It's shown to the other players, so pick whatever you like — plenty of people don't use their real one.
The words you write
They're the game. We keep them so the game can tell you when a word is already in the pot, and so it can avoid repeating words from your recent games. Only players in your game ever see them, and only one person sees a given word at a time — the one performing it.
How the game went
Which team you were on, which words were guessed, and how long each one took. That's the scoreboard.
A device identifier
A random string we generate and store on your device — in the Keychain in the app, in an encrypted cookie in a browser. It's what lets a phone hold a set of players without anybody signing in. It identifies the device, not you, and it isn't linked to anything outside Guesstastic.

If you sign in

Signing in is optional and only ever adds things: your word bank, your past games, and a name that follows you between devices.

From Sign in with Apple
An identifier Apple gives us for you, plus your name and email address if you let Apple share them. If you choose to hide your email, Apple gives us a relay address instead and we never see the real one.
From Google, on the web
An identifier, your name, your email address, and your profile picture URL.

What we don't collect

Motion
The app watches how you're holding the phone so it can black the screen out when you turn it toward the room. That reading is used on the device, to decide one thing — dark or not dark — and is never sent anywhere or stored.
Photos and camera
The QR scanner is a live camera view that looks for a code and nothing else. No image is saved, uploaded, or read from your photo library.
Contacts, location, health, or anything like it
We never ask for any of it.
Advertising or tracking identifiers
There are none, in the app or on the site. The app contains no third-party SDKs at all.

Who else sees it

Almost nobody. We don't sell or rent anything about you, and we don't share it for advertising. A few services are involved in running Guesstastic:

Our own server
Guesstastic runs on a server we operate. Game data lives in its database.
An error monitoring service
Catches errors so we can fix them. When something breaks on the website, the report can include the URL, your browser, your IP address, and — if you're signed in — your name and email, so we can tell whether a bug hit one person or everyone. The app doesn't use it.
Apple and Google
Only if you choose to sign in with them, and only to confirm it's you. They tell us who you are; we don't tell them anything about your games.
Stripe
Any payment collected outside of an app store is processed by Stripe. We never receive or store card details — Stripe handles those and keeps its own record of the transaction under its privacy policy.

How long we keep it

Games and the words in them stay in the database, because the "have we had this word before?" check looks back over your recent games, and because people like looking at their old scores. Games nobody ever started get cleared out periodically.

Delete your account and we immediately delete the account itself, your word bank, and any sign-in tokens. Games you played in stay, because they belong to everyone who played them — your name stays on that roster, no longer attached to any account.

Deleting your account

In the app: Settings → Delete account. It takes effect right away — no waiting period and nothing to ask us for.

If you only ever signed in on the web, email hello@guesstastic.com and we'll delete it for you.

You can also just stop. Playing without an account leaves nothing to delete beyond the games themselves.

Children

Guesstastic is meant to be played by a room full of people, which often includes kids — there's a Kids mode that limits words to emoji. We don't knowingly collect personal information from children, and playing needs none: no account, no real name, nothing but a word or two. If you believe a child has given us something they shouldn't have, email us and we'll remove it.

Security

Everything travels over HTTPS. Sign-in tokens are stored in the iOS Keychain on a phone and in encrypted cookies in a browser. We don't store passwords at all, because we never have any — signing in always goes through Apple or Google.

Your rights

Wherever you are, you can ask us what we hold about you, ask for a copy, ask us to correct it, or ask us to delete it. Email us and we'll do it. Account deletion in the app is the fastest route and doesn't require asking anybody.

Changes

If this changes in a way that matters, we'll update the date at the top and say so on the site. Continuing to play after that means the new version applies.

Contact

Questions about any of this go to hello@guesstastic.com.

Support · Terms of service