Privacy Policy
Last updated September 12, 2026
Guesswork collects as little as a multiplayer game can. Here is exactly what, why, and for how long.
What we store
- Guests: a random session id in a cookie so the game knows which player you are, the name you type, and the lobbies you join. Lobbies are deleted 24 hours after they are created.
- Accounts: your username, a scrypt hash of your password (never the password itself), your display name, and the lists you create. Accounts and lists are deleted after 180 days without a sign-in.
- Discord Activity: when you launch Guesswork inside Discord we receive your Discord user id, display name, and avatar to show on your card. We do not receive your email, messages, or friends, and we store nothing about your server beyond the activity instance that maps your voice channel to a lobby for 24 hours.
- Technical: your IP address is used in memory for rate limiting (counters expire within a day) and appears in our hosting provider's request logs.
What we do not do
- No advertising, no selling or sharing of personal data, no tracking across other sites.
- No email marketing; we do not even collect email addresses.
- Custom-list images are only ever loaded from Wikimedia, so no third party can see who is in your lobby.
Analytics
We use Vercel Web Analytics and Speed Insights on the website (not inside Discord) to count page views and measure performance. They are cookie-less and do not identify you.
Where data lives
The game runs on Vercel and stores its data in Upstash Redis, both in the United States. Passwords are hashed before storage; session tokens are stored hashed too.
Your choices
- Play as a guest: nothing about you persists beyond the lobby's 24 hours and the cookie in your browser.
- Delete your account or lists: email us and we will remove them within a few days, or simply stop signing in and they expire on their own after 180 days.
- Clearing your browser cookies signs you out everywhere.
Children
Guesswork is not directed at children under 13 and we do not knowingly collect data from them.
Changes and contact
We will update this page if our practices change. Questions or deletion requests: ronald@aibaker.io.