Privacy policy

• We collect what it takes to run the game: your email address and username, what you do in games (phrases, votes and chat) and your scores.
• We don’t sell your data, we don’t show ads, and we don’t track you across other websites.
• Our AI bots run on OpenAI. It sees game content, never your email address or password.
• You can delete your account at any time from Profile → Settings. It happens right away.
• Acronauts is for players aged 13 and over.

• Account details. Your email address, username and password when you sign up. Your password is stored only as a secure hash by our sign-in provider, so we never see it. You can also add profile details such as an avatar.
• Age check. We ask your age when you sign up. We don’t keep your birth date, only a record that you passed the check.
• What you play. The rooms you create or join, the phrases you submit, your votes, and the chat messages you send in the lobby and in game rooms.
• Scores and stats. Points, games played, wins, achievements and leaderboard entries.
• Settings. Preferences such as sound, music and theme. Some are saved with your account, others only in your browser.
• Technical data. When you use the site, our hosting providers automatically record details such as your IP address, browser and device type, the pages you request, and error reports. We use this to keep the service running and secure.
• Messages to us. If you email us, we keep the conversation so we can help you.

We don’t ask for your real name, phone number or payment details.

• To run the game: your account, rooms, rounds, scoring, stats and leaderboards.
• To show your play to other players (see the next section).
• To power the AI bots that play, vote and chat alongside you.
• To send account emails, such as confirming your address and resetting your password. We don’t send marketing emails.
• To keep Acronauts safe and fair: enforcing our terms, filtering banned language, handling reports, and blocking cheaters or abusive accounts.
• To understand how the site performs, using analytics that don’t use cookies.

We don’t sell or rent personal information, and we don’t use it for advertising.

If you’re in the EU or the UK: we use your data to provide the game you signed up for (our contract with you), for our legitimate interests in keeping the game safe and improving it, and where the law requires it.

• Your username and avatar, wherever you play.
• Your phrases. While a round is running, the game doesn’t show who wrote each entry. When the results are shown, everyone in the room can see who wrote each phrase and who voted for it.
• Your chat messages, to everyone in the same room. Lobby chat is visible to everyone in the lobby. A message that names people with “@” is private: only you, the people you name, and our admins and moderators can read it.
• Your rank and scores on the public leaderboards (official ranked rooms only).
• Summaries of finished games, including the phrases and usernames in them, which players can share by link.

We never show your email address to other players. Please don’t put personal information in phrases or chat.

We use a small number of service providers. They process data only to provide their service to us, under their own privacy and security terms.

• Supabase (United States): sign-in, the database and real-time game updates. It stores your account and game data.
• Vercel (United States): hosts the website and keeps short-lived request logs. We also use Vercel Web Analytics and Speed Insights, which measure page views and page speed without cookies.
• OpenAI (United States): writes the AI bots’ phrases, votes and chat. To do that we send it the round’s acronym, category and mood, the phrases entered in the round, and recent chat messages with the usernames shown next to them. We never send your email address, password or other account details.
• IONOS: delivers our account emails (sign-up confirmation and password reset). It handles your email address and the message.

We may also disclose information when the law requires it, to protect players or the public from harm, or as part of a merger or sale of Acronauts, in which case this policy continues to apply.

Supabase, Vercel and OpenAI are based in the United States, and our providers may also process data in other countries. If you play from outside the US, your information is transferred to and processed in the US.

• The only cookies we set are the ones that keep you signed in, plus one that shows a one-time “Signed in as” notice after you sign in from an email link; it holds no personal data and is deleted once shown. The sign-in cookies are essential: without them you’d have to sign in on every page.
• Your browser’s local storage keeps your sound, music and display preferences on your device.
• If you leave the sign-up page before finishing, your browser keeps the username and email you typed (never your password or birth date) in that tab, so you don’t have to start over. It forgets them when you close the tab or create your account, and they’re sent to us only when you press Create Account.
• No advertising cookies and no cross-site tracking. Our analytics don’t use cookies.

• Your account and profile: until you delete your account.
• Lobby chat: we aim to delete it after 30 days (automatic clean-up is being set up).
• Chat in a game room: as long as the game it belongs to.
• Games, phrases, votes and scores: kept as part of game history and the leaderboards. If you delete your account they stay, but they’re no longer linked to you and show as ‘Deleted Player’ (with a short id on the leaderboards). Other players’ messages that @-mentioned you keep your old username, marked as deleted.
• Technical logs: a short period set by our hosting providers, usually days to a few weeks.
• Backups: our database provider keeps routine backups for about a week, so deleted data can remain there until that cycle ends.
• Emails you send us: as long as we need them to help you.

• See and update your profile and stats on your Profile page. To change the email address on your account, contact us.
• Delete your account from Profile → Settings → Delete Account. Step-by-step instructions and what happens to your data: delete your account.
• Get a copy of your data, correct it, or ask any other privacy question by emailing info@acronauts.com. We reply within 30 days.

Depending on where you live (for example the EU, the UK or California), the law may give you rights to access, correct, delete or export your data, and to object to or restrict some uses of it. We honor these requests wherever you live. You can also complain to your local data protection authority.

Acronauts is for players aged 13 and over. We don’t knowingly collect personal information from children under 13. If we learn that an account belongs to a child under 13, we delete it. If you’re a parent or guardian and think your child has signed up, email info@acronauts.com and we’ll take care of it.

If you’re under 18, please make sure a parent or guardian is OK with you playing.

Connections to Acronauts are encrypted (HTTPS), passwords are hashed by our sign-in provider, and we keep tightening who can access stored data. No online service is perfectly secure; if a breach affects your data, we’ll tell you as the law requires.

When we change this policy, we update this page and its date. Before we start using a new service provider or a new kind of data (for example an analytics or error-tracking tool), we add it here first. For significant changes, we also let you know in the game or by email before they take effect.

Questions, requests or concerns about your privacy: info@acronauts.com. See also our terms of service.