Privacy Policy

Imposter Night · last updated 29 August 2026

Imposter Night is a party game you play with your friends. It is built to hold as little data as it can: there is no account to create, it never asks for an email address or a phone number, it does not touch your contacts, and it contains no advertising network.

What we collect

An anonymous identity. The first time you open the app it gives you an anonymous identity (Firebase Authentication). It is not tied to your email address or to your device, and deleting the app makes it unusable.
The name you type and the face you pick. This is how the others at the table see you. It does not have to be your real name.
Your game statistics. Rounds played and won, per mode.
Your friend list and your six-digit friend code.
A device identifier. The first time you open the app it generates a random number and keeps it in the iOS Keychain. It is not derived from your hardware, is never linked to who you are, and does one job: keeping count of your free games. It stays on the phone even if you delete the app — if it did not, anyone out of free games could reinstall and play for ever. Erasing the device removes it.
Room data. The room code, the players, drawing coordinates, chat messages and votes. These exist only while the game is being played: a room is deleted in full six hours after the last thing anyone does in it, and the drawings are wiped at the start of every new game. A drawing is never turned into an image file.

Reported content. When you report a player, what is kept alongside the report is only that player's own strokes and messages from that room. This is needed to make a report reviewable somewhere the game otherwise keeps nothing; the rest of the room is not copied.

Usage and crash data

So that we can tell whether the app is working, we use two Google Firebase services: Crashlytics for crash reports and Analytics for usage statistics. What is sent is the shape of a game, never its content: which mode was played, how many players, whether the game finished, and whether somebody joined through an invite link.

Never sent: names, notes, chat messages, drawings or room codes. Reports are tied to a randomly generated app instance identifier, which stops being valid when you delete the app and is not connected to who you are.

What we do not do

We show no adverts and collect no advertising identifier (IDFA).
We do not sell your data or share it with anyone for advertising or marketing.
We do not track you across other apps and websites.
We do not ask for your location, contacts, photos, microphone or camera.
There is no voice chat; audio is limited to the music that ships with the app.

Where it is held

Data is processed on Google Firebase (Realtime Database, Firestore, Authentication, Cloud Functions), on servers inside the European Union (europe-west1, Belgium). Google is our data processor for these services and is subject to its own privacy terms.

Children

The app is not directed at children under 13 and does not knowingly collect data from them.

How to exercise your rights

To ask for a copy of your data, or for all of it to be deleted, write to the address below. Deleting the app makes your anonymous identity unusable (the device identifier described above stays on the phone); to have the remaining records deleted you have to write to us, because your identity is not tied to an email address and we cannot recognise you any other way. Requests are answered within 30 days.

Changes

If this text changes, the date at the top is updated.