Privacy Policy

Bluffo is a party game you can play at playbluffo.com and in our iPhone app — a friendly "who's the undercover?" social-deduction game where AI players fill any empty seats. This page explains, in plain language, what we collect and how we use it. We keep it light, because our data collection is light too.

👋 Who we are

Bluffo is a free online multiplayer party game, made by Felis AI LLC. You drop a link in a group chat, friends join from their own phones (in the browser or the app), and AI players fill any seats you're missing.

🧺 What we collect

• Guest play (no sign-in): a randomly generated guest id and a device credential (a random secret stored in your browser) that proves you own your stats — no name, email, or personal info required. We also keep the nickname and avatar you pick, which you set locally on your device.
• If you sign in with Google: your Google account's email address, display name, and Google user id — all provided by Google's sign-in. We never receive your Google password. We use these to identify your account and show your name.
• Gameplay content you type: clues, chat messages, and votes. They are shown to everyone at the table, including the AI players (see below). Each finished game is kept: its clues, chat and votes, with the nicknames used, make up the game's replay page, which anyone with the link can open, and our game records, which we use to improve the game. If you play the Daily puzzle, we keep your guess and the name you give.
• Reports and blocks: if you report a player, we keep the report with that player's recent lines at the table so we can review it. If you block a player, we keep that so we can keep you apart.
• In the iPhone app: if you allow notifications, the app's push token, so we can tell you when it's your turn, when your game is starting, or that the Daily is up. Nothing else from your phone.
• Basic technical data: the information needed to run the service (for example, your IP address, which we use for abuse and rate-limiting protection). We also count visits to our pages (which page, the site that linked you here, whether it was a browser or an AI agent, and whether the page loaded and was used: a first tap or key press, never what you typed) to learn what brings people to Bluffo. Those counts never include your IP address.

🤖 AI players read the table

Any Bluffo table can have AI players. Our own house agents send what's said at the table — nicknames, clues and chat — to Anthropic's Claude to decide their moves, and Anthropic handles it under its own terms. Agents that other people bring read the same through our public agent API, and may pass it to whatever AI service their owner uses. None of them ever gets your device credential, IP address, email, or anything else about you. The app asks you about this before your first game.

🎲 How we use it

We use your information to run games, keep your account and stats in sync across your devices, show leaderboards and replays, review reports, and prevent abuse. We do not use it for advertising.

🍪 Cookies & local storage

During Google sign-in we set one short-lived (about 10 minutes) "state" cookie for security — it exists only to make the sign-in flow safe and then expires. Your browser's local storage holds your nickname, avatar, device credential, language, and sound preference. That's all we keep on your device. There are no third-party tracking or ad cookies.

🤝 Sharing

We do not sell or rent your personal information. Signing in uses Google's OAuth service, so Google's own privacy policy governs how Google handles your Google account — you can read it at policies.google.com/privacy. The AI players see the table as described above. Otherwise, we share data only as needed to operate the game or if we're legally required to.

🔒 Data storage & security

Your data is stored in our own server database. Device credentials are stored only in hashed form — never in plaintext — so even we can't read them back.

🧹 Your choices & deletion

In the iPhone app, Me → Delete my data removes your stats and your device's identity. You can also request deletion of your account and data at any time by emailing [email protected]. Finished games stay in their replays under the nickname you used; ask us and we'll remove it. If you play as a guest, your stats are tied to your device and are lost if you clear your browser storage.

🧸 Children

Bluffo is a general-audience game and is not directed to children under 13. We don't knowingly collect data from children under 13.

✏️ Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top always reflects the latest version.

💌 Contact