Privacy policy

• You can build and host a board without an account. We never ask who you are.
• Signing in uses Google (or an email link). We learn your email address — there is no password for us to store.
• Payment cards go to Stripe and never touch our servers.
• No ads, no selling data, no advertising trackers.

A board is the content you write: categories, clues, answers, Final Jeopardy, and any media you attach. Boards are unlisted by default — reachable only through their links, never listed publicly or submitted to search engines. A password-protected board stores only a hash of its password. A private board can be opened only by the signed-in account that owns it.

Media you attach to clues is stored with an unguessable URL, but anyone who has that URL can fetch the file — treat clue images and audio as public once a game has been played.

Players never create accounts. Joining a game means choosing a display name; that name, the score attached to it, and the order of buzzes are stored for the session and shown to everyone in the same game — that’s the scoreboard doing its job. Nothing links a display name to a real identity unless the player types one.

An account exists only if you sign in, which is needed only for the dashboard and Pro. Sign-in runs through Google or an emailed link; either way we store your email address, your plan, and — once you’ve been to checkout — Stripe’s identifiers for your customer record and subscription. We never see or store a password.

Checkout and billing are Stripe. Card numbers go directly to them and never touch our servers; what we keep is the subscription’s status and renewal date. Stripe’s own privacy policy is at stripe.com/privacy.

When a Pro account uses “write it with AI”, the board’s title and category names are sent to Google’s Gemini API so it can draft clues. Nothing is sent until you press the button, and nothing else is sent — but don’t put anything secret in a category name you’re about to ask an AI to write about.

One kind: the session cookie that keeps you signed in, set only when you sign in. There are no advertising or cross-site trackers. Our hosting providers keep standard server logs — IP address, request path — briefly, for security and operations.

Supabase stores the database, auth and uploaded media (on AWS, US region). Vercel hosts the site. Stripe handles payments. Google handles sign-in, and Gemini requests when you use AI generation. Each processes data only to provide the service.

Boards stay until you delete them. To delete your account and everything attached to it, email the support email shown on our Google sign-in screen from the address you signed in with, and we’ll confirm when it’s done.

Players join with a display name and nothing else, which is what makes classroom use work: students never hand over personal information. Creating an account is intended for people 13 and over.

If this policy changes materially we’ll update the date above and say so on the site, not just quietly edit history.

Questions about any of this: email the support email shown on our Google sign-in screen.