Privacy Policy

Bluffo is a browser party game you can play at playbluffo.com — a friendly "who's the undercover?" social-deduction game where AI fills any empty seats. This page explains, in plain language, what we collect and how we use it. We keep it light, because our data collection is light too.

👋 Who we are

Bluffo is a free online multiplayer party game that runs in your web browser. You drop a link in a group chat, friends join from their own phones, and AI characters fill any seats you're missing. That's it — no app store, no downloads.

🧺 What we collect

• Guest play (no sign-in): a randomly generated guest id and a device credential (a random secret stored in your browser) that proves you own your stats — no name, email, or personal info required. We also keep the nickname and avatar you pick, which you set locally on your device.
• If you sign in with Google: your Google account's email address, display name, and Google user id — all provided by Google's sign-in. We never receive your Google password. We use these to identify your account and show your name.
• Gameplay content you type: clues, chat messages, and votes. These are shown to the other players in your room and stored only transiently while the game runs.
• Basic technical data: the information needed to run the service (for example, your IP address, which we use for abuse and rate-limiting protection).

🎲 How we use it

We use your information to run games, keep your account and stats in sync across your devices, show leaderboards, let you recover your account, and prevent abuse. We do not use it for advertising.

🍪 Cookies & local storage

During Google sign-in we set one short-lived (about 10 minutes) "state" cookie for security — it exists only to make the sign-in flow safe and then expires. Your browser's local storage holds your nickname, avatar, device credential, language, and sound preference. That's all we keep on your device. There are no third-party tracking or ad cookies.

🤝 Sharing

We do not sell or rent your personal information. Signing in uses Google's OAuth service, so Google's own privacy policy governs how Google handles your Google account — you can read it at policies.google.com/privacy. Otherwise, we share data only as needed to operate the game or if we're legally required to.

🔒 Data storage & security

Your data is stored in our own server database. Account secrets and recovery codes are stored only in hashed or encrypted form — never in plaintext — so even we can't read them back.

🧹 Your choices & deletion

You can request deletion of your account and data at any time by emailing [email protected]. Inside the app you can also use "sign out other devices" to rotate your credentials. If you play as a guest, your stats live with your device and disappear if you clear your browser storage.

🧸 Children

Bluffo is a general-audience game and is not directed to children under 13. We don't knowingly collect data from children under 13.

✏️ Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top always reflects the latest version.

💌 Contact