Privacy Policy

Last updated: August 24, 2026

This policy explains what information whimblet ("we," "us") collects when you use the site, why we collect it, and how it's handled. This is a template written for a small, actively-developed app — please review it (ideally with a lawyer) and fill in the placeholders before relying on it, especially once real guests and real photos are involved.

Information we collect

When you create an account (as a game host) or optionally sign in as a guest, we collect your name, email address, and profile picture via Google sign-in — the only account sign-in method the site offers.

When you create or join a game, we collect the content you and your group submit:

• Game names, prompts, and end times you set as a host.
• Team names and player display names entered by anyone who joins a game.
• Photos submitted for each prompt.

If analytics are enabled on this deployment, we may also collect basic usage data (pages visited, buttons clicked) via PostHog to understand how the app is used.

How we use this information

We use this information solely to operate the service: authenticating you, running your game, displaying prompts and submissions to your group, and generating the shareable join link and presentation.

Who can see your content

Game names, prompts, team names, player names, and submitted photos are accessible to anyone who has the game's join link or join code — that's how the shared-hunt experience works. Treat the join link like an invite: anyone you (or another participant) share it with can view and, until the hunt ends, submit photos as any team.

In the interest of transparency: this app is built for quick, casual use among trusted groups (e.g. friends and family at an event), not for hosting sensitive or private content. Don't upload photos or prompts you wouldn't be comfortable sharing with anyone who might get hold of the link.

Where your data is stored

We rely on the following third-party services to run whimblet:

• Supabase — authentication, database, and photo storage.
• Vercel — website hosting.
• Google — optional sign-in.
• PostHog — optional product analytics.

Children's privacy

whimblet isn't directed at children, and account sign-in is intended for adults. If a game involves photos of minors (e.g. family events), the adult hosting or uploading is responsible for having appropriate consent from a parent or guardian.

Data deletion

Game hosts can delete a game (and everything tied to it — prompts, teams, submissions) at any time from their dashboard. To request deletion of your account or any other data, contact us at the address below.

Changes to this policy

We may update this policy as the app changes. Material changes will be reflected by updating the date at the top of this page.

Contact

Questions about this policy? Reach us at sam.f.chase@gmail.com.