Privacy notice — owner review required

This starter notice must be completed with the operator’s legal name, contact address, retention policy and applicable rights before launch.

You can create and purchase without Google login. A private workspace and session cookie keep your drafts and purchases; a secret access link can restore them. Keep that link private. Optional adult accounts store a name, email address and a hashed password when email registration is used. Password resets send a short-lived link to the account email. Google sign-in uses profile name and verified email. Google and PayPal process their own authentication and payment information. This site stores PayPal transaction identifiers and subscription status, not card details or Google access tokens.

Player rooms use nicknames, answers, points and progress. Do not enter children’s full names or contact details. Shared rooms are available to anyone holding the link; live rooms display player nicknames and scores.

Session cookies support sign-in, CSRF protection and player progress. No advertising or analytics trackers are included in this source package. Hosting access logs may contain IP addresses. The operator must set retention and deletion procedures before public use.