Privacy Policy.

Information used to play

We use a guest player ID, your chosen display name and avatar settings, room membership, game settings, scores and submitted content such as drawings, answers, guesses and votes. This lets us run multiplayer games and reconnect you to your session. Players in your room see your name, avatar and content as the game allows. The web version does not require an email address or password.

Playing in Discord

Discord provides identity and Activity membership information so we can place friends in the same room. Your Discord display name becomes your initial room name, and your avatar is displayed from Discord. We store room-specific hashed identifiers to recognise returning participants, rather than raw Discord user IDs. Your room name is stored with the room. Discord access tokens are held in memory, not saved in our game database. We do not request access to your Discord email, messages or voice audio.

Understanding how Afterparty is used

PostHog receives room-level events for room creation, additional players joining, games starting and games finishing. Properties include room/game identifiers, player counts, timings and whether you play on the web or Discord. Known-room join failures are recorded separately to help diagnose problems.

If you allow optional player analytics, we also use a random browser identifier and, when your guest session is established, your anonymous guest player ID to understand return visits, game participation, browser/device types, referring sites and campaign labels. This is pseudonymous tracking, not identification by your name. Page addresses are reduced to general routes and game names, without room codes or private URL parameters. We measure page visits, clicks, scroll depth, page speed, game-action request times and connection/reconnection times. Our host provides approximate country and city for consenting website visitors; we do not request GPS access or send their IP addresses to PostHog. Location is omitted inside Discord because its proxy can obscure it. We also collect browser error types and limited application stack locations, not raw error messages, network contents or console logs.

With that permission, sessions are eligible for session replays to help us understand navigation and usability problems. We do not randomly exclude a percentage of consenting sessions. Public interface text, controls and built-in promotional artwork can appear in recordings, along with your own submitted answers, guesses, clues and revealed Relay pages. Your Quickdraw canvas can be recorded while you draw for the room, and your submitted Relay drawings when they appear in the album. Other players’ submissions, unfinished text, Relay drawing drafts, player names, avatars and identity fields stay hidden. Anything you include in your own submissions can appear in the replay. We do not separately add gameplay content to analytics event properties or capture Discord identity details, account emails or voice audio. PostHog IP storage remains disabled. Click heatmaps and repeated or unresponsive clicks help us find confusing controls; element text, input values, private attributes and drawing pointer trails are excluded.

You can change this choice here at any time. Declining does not affect play or the separate room-level statistics. Turning it off stops future optional collection and removes its browser identifier; your guest session remains available for play. If you later opt in, its ID may associate your consented activity again. Turning analytics off does not automatically delete information already collected. We honour browser Do Not Track and Global Privacy Control signals for optional player analytics.

Server diagnostics also record fixed Discord connection outcomes, operation types and status codes in PostHog Logs. These operational records do not include player or Discord identifiers, names, gameplay content or credentials.

On the website, Vercel Web Analytics collects page visits, referring sites, browser/device information and approximate location such as country or city. It uses a temporary request-derived identifier instead of analytics cookies. These pageviews are disabled inside the Discord Activity.

Cookies and browser storage

We use session cookies and browser storage to keep your guest session, name/avatar preferences and theme, restore Discord launch context, and prevent duplicate room analytics events or retry failed delivery. If you allow optional player analytics, PostHog also uses browser storage for a pseudonymous identifier and analytics sessions. Your choice and our random player-analytics identifier expire after 180 days; you can withdraw permission earlier using the controls above. Clearing this storage resets local preferences and may prevent you from rejoining your existing seat. It does not delete server records.

Service providers and purposes

We use Supabase for guest authentication, game storage and live updates; Vercel for hosting and website analytics; PostHog for room analytics and, with your permission, player analytics and session replays; and Discord for Activities and avatars. Providers process technical information, which can include IP addresses and request/error logs, to deliver and protect their services. This is separate from PostHog's IP setting. PostHog's managed proxy routes website analytics through Cloudflare, its service provider for this routing.

Email sent to our privacy address is forwarded by ImprovMX and received and stored using Google Gmail. We use your email address and message to handle your request. This correspondence is separate from game rooms and remains in the mailbox until deleted.

Our game database is hosted in the UK and PostHog uses EU hosting. Providers may also process information in other countries under their data-processing terms. We use information to provide the service you request and for our legitimate interests in security and understanding how the games are used. Optional player analytics and recordings are based on your permission.

How long information stays

Rooms expire after 24 hours and are normally removed by the next hourly cleanup, together with their game content and Discord room mappings. Guest authentication records and analytics are separate: they are not deleted with a room and currently have no automatic deletion period set by Afterparty. They remain until deleted or removed under provider retention settings. Provider logs and any backups follow separate retention schedules. Browser storage can remain until it expires or is cleared by you, the browser or the app.

Your choices and privacy requests

You can change your room name/avatar, leave a room, clear browser storage, or revoke Afterparty's access in Discord's Authorized Apps settings. Revoking access does not itself delete existing records. Depending on applicable law, you may request access, correction, deletion or a copy of personal data, or object to or restrict its use. You may also complain to your local data-protection authority.

For privacy questions or requests, contact privacy@afterparty.games. Include a room code and approximate play time where possible to help locate relevant records. Please do not send passwords or access tokens.

Policy updates

We may update this policy as Afterparty changes. The date above shows the latest revision.