Privacy Policy

Updated 6 November 2026

Imposter Party (listed in some stores as Imposter Game - Codewords) is published by the developer named on its App Store and Google Play pages, who is the data controller. Questions and requests: support@imposterparty.app.

No version asks for an account or phone number. An email address is only ever typed by you, as an optional reply address in Send feedback (version 3).

Version 3 and later

There are no ads and no advertising ID.

The app sends usage events to our servers: screens opened, taps, game settings (such as number of players, category and language), how each round ended with an anonymous code for the word (never the word), the step where a game was left, purchase steps (product and result, never an amount), errors, app version and platform. Events carry a random install ID stored on your device and a random ID for each run of the app. While the app is open it also sends, once a minute, the install ID, app version, platform, country and which part of the app you are in. The server takes your country from your connection and does not store your IP address.

The app never sends player names, custom word lists or your contacts. Lists you share are encoded in the link after the # sign, which is not sent to our servers when the link is opened. Reminder notifications, if you allow them, are scheduled on your device.

Feedback is optional. Send feedback in Settings sends the message you write, a reply address if you add one, the app version, platform and language. Bad word? sends an anonymous code for the word and the word pack version. The Fun? question sends the face you tap and the app version. These are not tied to your install ID, and we do not store your IP address. Messages and reply addresses are deleted after 180 days; counts without text may be kept for up to 13 months. To have a message deleted sooner, write to us with its text and date.

Film reactions is optional. The table is asked first, then each player chooses on their own turn, and nobody is filmed by default. The front camera and microphone record about three seconds of each player who chose it, with a dot showing while the camera is on. Clips stay on your device, cannot be watched until the round is over, and are deleted after. They are never uploaded; a reel leaves your phone only if you share it.

Usage statistics can be switched off in Settings. In the EEA, UK and Switzerland they start off until you turn them on.

Purchases are handled by Apple or Google; we never see your payment details. Language packs are downloaded from our site.

If we switch on Mixpanel (EU), it will receive a copy of the events without IP addresses. We will update this page first.

Events are deleted after 90 days. The install ID record is deleted 13 months after the app last used it. Counts with no ID may be kept longer. The app does not show your install ID, so we cannot look up one device; the data expires on its own as described.

Versions 2.x

These versions were in the stores before version 3. They show ads and keep more data on our servers.

• Ads: Google AdMob may use your advertising ID, IP address, device details and app activity to show and measure ads. Where required (EEA, UK, California) Google’s consent form is shown first.
• Usage and purchase events: app opens, game starts and mode, online rooms joined, paywall steps, OS, app version, language and premium status, with a random ID. A status ping is sent every 10 minutes while the app is open. These are stored with our database provider, Supabase, in Frankfurt, Germany, with no fixed deletion date.
• Online rooms: room code, your device code, the name you type, votes, scores, settings and the chosen word. Other players in the room see them. Rooms and players are deleted automatically when a room closes or goes idle, within hours.
• AI hints and word explanations: the word, category, language, player names and number of imposters are sent to our server and on to OpenRouter, which runs a Google Gemini model. They are not tied to your device.
• Premium: your device code (IMP-XXXX-XXXX in Settings) is checked to unlock premium. To delete what we hold under that code, write to us with it. Usage events use a separate random ID the app does not show, so we cannot match them to a device.
• Game Center and Google Play Games handle sign-in and achievements. Google Play tells the Android app where it was installed from. Shorebird delivers app updates and sees the request IP address and app version.

The website

We count visits with our own counter: page, referring site, campaign tags, the first two letters of the browser language, screen size class, country, clicks, scrolling and time on the page. It sets no cookies. A random visit ID lives in the browser session, and in memory only for visitors in the EEA, UK and Switzerland. We keep raw page events for 90 days and daily totals for up to 13 months.

We also use Google Analytics, which sets cookies. Outside the EEA, UK and Switzerland it is on. In those regions it stays off until you press Allow, and your choice is kept in your browser. Google signals and ad personalization are off.

Why we use data

To run the game, count how many people use it, fix errors, read and answer feedback, prevent abuse and, in versions 2.x, show ads. Our legal basis is our legitimate interest in running the game, and your consent for ads and Google Analytics cookies where the law requires it. You can withdraw consent at any time through the consent choice or your device settings.

Who receives data

• Cloudflare: hosts the site and, in version 3, receives the events above and processes them for us.
• Google: Analytics and Ads tags on the site; AdMob, Play and Play Games in versions 2.x.
• Apple: App Store, purchases, Game Center.
• Supabase, OpenRouter, Shorebird: versions 2.x only.
• Mixpanel: only if we switch it on, as above.

We do not sell your personal information. In versions 2.x, ads served by Google may count as sharing for advertising under California law; you can limit this in Google’s consent form or your device ad settings. In version 3 we do not use data for advertising.

Children

The game is for a general audience. We do not knowingly collect personal information from children under 13. If you think a child has given us any, write to us and we will delete it.

Your rights

Depending on where you live, including the EEA, UK, Switzerland and California, you can ask for access, correction or deletion of your data, object to its use, withdraw consent, and complain to your data protection regulator. Write to support@imposterparty.app. Deletion works as described in each section above.

International transfers

Our servers and our providers operate in several countries, including the United States. Where data leaves the EEA, UK or Switzerland, we rely on the safeguards our providers offer, such as standard contractual clauses.

Changes

We post changes here with a new date.