Privacy Policy
Last updated: May 2026
Overview
gamefriday.party is a collection of free online party games including Music Quiz (also available at musicquiz.party), Themed Werewolf, and Bingo Caller (also available at bingocaller.games). This privacy policy applies to all games and services operated under these domains. We are committed to protecting your privacy and being transparent about what data we collect.
Information We Collect
Game Data
When you use our games, we may temporarily store:
- Your chosen display name or player name
- Game scores, guesses, and in-game actions
- A randomly generated player or session ID (stored in your browser)
- User-generated content such as playlists, game rooms, or custom settings
Account Data
Accounts are optional — you can play most games without signing in. If you choose to create an account at auth.gamefriday.party, we store:
- Your email address and (for email/password accounts) a hashed password — we never store passwords in plain text
- Your display name and whether your email is verified
- If you sign in via Google, GitHub, or Twitch: the unique user ID and basic profile information (name, email, avatar URL) returned by that provider. We do not receive your password for these providers.
- Session records (token, expiry, IP address, and user-agent string) used to keep you signed in across our games
- Per-feature usage counters such as your daily AI playlist generation count, used to enforce fair-use limits
Account data is stored in a Cloudflare D1 database operated by us and is not sold or shared with third parties for marketing.
Browser Storage
We use cookies and local storage to remember:
- Content you have created (for easy access later)
- Your cookie consent preference
- Game preferences and settings
- Your authenticated session (when signed in), scoped to .gamefriday.party so a single sign-in works across all our games
Information We Do Not Collect
- Email addresses or contact information from anonymous (signed out) play
- Payment or financial information
- Precise location data
- Advertising or behavioural tracking data
- Social media graph data from OAuth providers beyond the basic profile fields listed above
Analytics
We use the following analytics services to understand how our games are used and to improve the experience:
Cloudflare Web Analytics
We use Cloudflare Web Analytics, a privacy-first analytics service that does not use cookies or collect personal data. It provides aggregate data about page views and visits without tracking individual users.
Umami (Self-hosted)
We use a self-hosted instance of Umami, an open-source, privacy-focused analytics tool. Umami does not use cookies, does not collect personal data, and does not track users across websites. All analytics data is stored on our own infrastructure and is never shared with third parties.
Third-Party Services
Our games may use the following third-party services:
Deezer API
Used by Music Quiz to search for music and play 30-second preview clips. Audio previews are streamed directly from Deezer's servers.
OAuth Providers (Google, GitHub, Twitch)
If you choose to sign in with Google, GitHub, or Twitch, we redirect you to that provider so you can authorise our application. The provider then returns a basic profile (typically: unique user ID, name, email, and avatar URL). We do not see your password. Each provider's handling of your data is governed by its own privacy policy: Google, GitHub, Twitch. You can revoke our access at any time from the security or connected-apps settings of the provider.
Cloudflare
Our websites and services are hosted on Cloudflare's infrastructure, and our user, session, and account data is stored in Cloudflare D1 (a managed SQLite database). Cloudflare may collect technical data as described in their privacy policy.
Data Retention
- User-generated content: Stored indefinitely unless deleted by the user or removed for policy violations
- Game session data: Retained temporarily and may be cleaned up periodically
- Account data: Retained for as long as your account exists. When you request deletion, we remove your profile, linked OAuth identities, and active sessions.
- Authentication sessions: Expire after a fixed period (typically 7 days) of inactivity and on sign-out.
- Cookies: Expire after 30 days
- Analytics: Aggregate, non-personal data only
Your Rights
You can:
- Clear cookies and local storage from your browser at any time
- Use most of our games without providing any personal information — sign-in is only required for features that need it
- Sign out at any time from auth.gamefriday.party to invalidate your current session
- Revoke our access to your Google, GitHub, or Twitch account directly from that provider's security settings
- Contact us to request access to, correction of, or deletion of your account and any content you have created. Under UK GDPR you have the right to access, rectification, erasure, restriction of processing, data portability, and to object to processing.
Children's Privacy
Our services are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
Contact Us
If you have any questions about this Privacy Policy, please contact us through the website.