Privacy
What Gumbop keeps about you, where it lives and how to get it removed.
Draft of 2 November 2026. A lawyer hasn’t reviewed this yet, and the yellow blanks still need filling in.
The short version
- You don’t need an account to play. Right now Gumbop has no accounts at all.
- The only personal thing we keep in a database is your email, and only if you joined the waitlist.
- The TV sends us anonymous play counts, like which games were played and for how long. They never include names, avatars or anything anyone types, and the TV can turn them off.
- Your name and avatar are kept on your phone. Your first name also goes through our relay so the room can show who’s playing, and the relay’s log keeps only its first two letters.
- The relay passes game messages between phones and the TV. It doesn’t read them or save them.
- We don’t set cookies, use outside analytics or show ads.
Who runs Gumbop
Gumbop is run by [legal name], [postal address]. To ask about your data, email hello@playgumbop.com.
What we keep today
Your email, if you joined the waitlist
- Where it lives
- Our database at Supabase, with the time you joined. The website can’t read it.
- Why
- To tell you when Gumbop is ready. We only email you about Gumbop.
- How long
- Until you ask us to remove it, or [when we delete the waitlist].
Your first name and avatar
- Where it lives
- On your phone, so you don’t have to type them again. Both are sent to the TV while you play. Your name also goes through our relay, which holds it in memory while the room is open. When you join, its log gets the first two letters of your name, never all of it.
- Why
- So everyone can see who’s who.
- How long
- On your phone, until you clear your browser data. On the relay, until the room closes. The two letters in the relay’s log, [how long Fly keeps relay logs].
A room code, your seat and a random ID for your phone
- Where it lives
- The ID stays on your phone. The relay holds all three in memory and writes the room code and seat to its log.
- Why
- So messages reach the right screen, and you get your seat back if you drop out.
- How long
- The relay forgets them when the room closes, about 90 seconds after the TV goes away. In the relay’s log, [how long Fly keeps relay logs].
The game in progress
- Where it lives
- In the browser on the TV or laptop running the game, or the phone running it with no TV, along with everyone’s names and avatars.
- Why
- So a reload doesn’t lose your game.
- How long
- Until someone goes back to the lobby or a new game replaces it.
Anonymous play counts from the TV
- Where it lives
- Our database at Supabase. The TV sends a few small reports a night: when a game starts and ends, and every ten minutes while the room is open. Each one holds a random ID made on the TV, an ID for that night, which games were played and for how long, how many phones joined, the kind of screen and browser, a frame rate, and any error from our own code with anything quoted taken out. The database only accepts numbers and names from a fixed list, so a name or anything typed has nowhere to go.
- Why
- So we know which games people finish, what screens they play on, whether groups come back, and what breaks.
- How long
- Two years. After that only daily totals with no IDs are kept, and error reports go after 90 days. Turn it off on the TV with “Send anonymous play counts”, or with Global Privacy Control in your browser.
Anonymous step counts from pages
- Where it lives
- Our database at Supabase, as one number per day for each step. The site adds one when someone opens the home page or a game’s page, taps Play, or arrives from the “Host your own night” link. A phone adds one when it opens the join page from a code, joins a room, sees a locked game, or opens checkout. Each step counts once per browser tab. Nothing about the person, the phone or the room goes with it, only which step it was and which page it came from.
- Why
- So we can see where people stop on the way to a game night, and fix that part.
- How long
- Kept as daily totals. Turn it off with Global Privacy Control in your browser.
What the TV is doing right now
- Where it lives
- The relay, in memory. The TV tells it which game is on, whether it’s in the lobby or playing, the kind of screen, how many phones are connected straight over WiFi and the frame rate.
- Why
- So we can see how many rooms are open and spot a problem while it’s happening.
- How long
- The relay forgets it when the room closes. It’s never saved.
Small settings
- Where it lives
- In your browser. This is your light or dark choice, and the room code on the TV so it can come back after a reload.
- Why
- So the site remembers them.
- How long
- Until you clear your browser data. The room code goes when you close the tab.
Game messages
The rules run in the browser on your TV or laptop, or on the phone that started the room when you play with no TV, so that browser holds the whole game. Each phone only gets the part its player should see, so your cards don’t show up on anyone else’s phone.
Moves and game updates go through our relay in Toronto, or straight across your WiFi when your phone and TV can reach each other. The relay only looks at where a message is going. It doesn’t read what’s inside or save it.
Those connections are encrypted on the way, but the relay doesn’t use end-to-end encryption. So “doesn’t read” describes how we built it, not something it couldn’t do.
Who handles data for us
- Cloudflare serves the website.
- Fly.io runs the relay, in Toronto, Canada.
- Supabase stores the waitlist and the anonymous play counts, in [Supabase region].
Like any website, Cloudflare, Fly and Supabase see your IP address and browser details when you connect, and keep them in their own logs for a short time. Our own code doesn’t save your IP address. We don’t sell personal information.
When sign-in and paid plans arrive
Neither is live yet. This is what will change, and we’ll update this page before they go live.
Sign-in
Buying something will need an account. Guests will still play without one. Sign-in will use Supabase Auth, with Google, Facebook, Apple or a code sent to your email. We’ll keep your email address and an account ID. Google, Facebook and Apple tell us who you are, usually your name and email, and we never see your password for those services.
Purchases
Payments will go through Creem, our merchant of record. Creem is the legal seller: it takes your payment and handles sales tax. Your card details go to Creem and never reach us, and Creem’s own privacy policy covers what it does with them.
Creem tells us what you bought. We keep a record of your pass or plan and when it ends.
What stays out
Accounts won’t store what happens inside a game. That means no cards, no answers and nothing anyone types during play.
Getting your data removed
- Leave the waitlist. Email hello@playgumbop.com and we’ll remove your address. Every email we send will also have an unsubscribe link.
- See or delete what we hold. Email hello@playgumbop.com. You don’t need an account to ask.
- Clear what’s on your device. Clear this site’s data in your browser settings. Your name, avatar and any saved game are removed.
- Delete an account, once they exist. Email us the same way, including if you signed in with Google, Facebook or Apple.
[rights that apply by region, for the lawyer to add]
Children
[minimum age and how we handle children’s data]
Changes to this page
When this page changes, the date at the top changes too.