Whodle privacy

Data we store

Your sign-in identity, display name, profile photo, group memberships, group ownership, prompt responses, guesses, game results, and administrator-only testing controls when an administrator uses them.

Whodle Live does not require an account. Joining a live room stores a guest display name and a per-room guest ID and token in your browser, and the room's prompts, guesses, and scores in our server cache for up to 4 hours. When a live game finishes, a recap of the room (player names, per-round questions and scores) is kept, but guest tokens are discarded and are not stored in the recap.

How it is used

Data is used to authenticate you, show your groups, collect the next prompt response, run the current group game, score completed games, and show group leaderboards. Live room data is used only to run that live game and show its results while it is active or recently finished.

What other players see

Group members can see your display name, profile photo, group membership, game availability, completed leaderboard result, and revealed prompt choice only after the relevant game is complete. In a Whodle Live room, everyone in the room can see the guest display names, submission and connection status, and the round results and leaderboard once the room owner reveals them.

Service providers

Netlify hosts the static web app. Our own backend server runs Postgres for account and game data and Valkey (Redis) as a temporary cache for live rooms. Google provides the production sign-in provider when Google login is enabled.

Your controls

Signed-in users can update their display name, download their account data, and delete their Whodle account from Settings. Deleting an account removes personal play rows, closes groups owned by that account, and anonymizes the profile used by shared historical records.