Privacy Policy

1. Overview

ImpostorKit ("we," "us," or "our") operates the website impostorkit.com (the "Service"). This Privacy Policy explains how we collect, use, and protect information when you use our online imposter word game. We are committed to keeping your experience private and data-minimal.

2. Information We Collect

2.1 Game Session Data

When you create or join a game room, we temporarily store:

• Player Name — the display name you choose when entering a room. This can be any name or alias; we do not require or store real names.
• Room Code — a short code that identifies your game session.
• Game State — role assignments (civilian or imposter) and word pairs used during the round.

All game session data is automatically deleted within 24 hours. We do not retain player names, room data, or game history beyond this cleanup window.

2.2 Analytics Data

We use Vercel Analytics to collect anonymous, aggregated usage statistics such as page views and general traffic patterns. Vercel Analytics is privacy-focused and does not use cookies or collect personally identifiable information. For more details, see Vercel's Analytics Privacy Policy.

2.3 What We Do NOT Collect

• We do not require account registration or login.
• We do not collect email addresses, phone numbers, or real names.
• We do not use tracking cookies or third-party advertising trackers.
• We do not collect payment or financial information — the Service is free to use.

3. How We Use Your Information

The limited data we collect is used solely for the following purposes:

• Running game sessions — matching players to rooms, assigning roles, and distributing word pairs.
• Preventing word repetition — tracking which word pairs have been used within a session so you get fresh pairs each round.
• Improving the Service — understanding aggregate usage patterns (e.g., popular topics) to improve our word library and features.

4. Data Storage & Security

Game session data is stored on Supabase, a secure cloud database platform. All data in transit is encrypted via HTTPS. Game rooms and their associated player data are automatically purged every 24 hours through a scheduled cleanup process.

While we take reasonable measures to protect game data, please note that no method of internet transmission or electronic storage is 100% secure. We encourage you to use a non-identifying display name when playing.

5. Third-Party Services

Our Service relies on the following third-party providers:

• Vercel — hosting and privacy-friendly analytics.
• Supabase — real-time database for game sessions.

Each of these providers operates under their own privacy policies. We encourage you to review their respective policies for details on how they handle data.

6. Children's Privacy

ImpostorKit is a family-friendly party game. We do not knowingly collect personal information from children under the age of 13. Since no account creation, email, or real name is required to play, children can enjoy the game without providing personal data. If you believe a child has somehow provided personal information through our Service, please contact us and we will promptly remove it.

7. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the updated policy on this page with a revised "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

8. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: [email protected]