Privacy policy

The short version

• You can play pass-and-play with no account and no personal data.
• Online play needs a lightweight account or guest session so we can keep your seat and sync the game. Guests don't need an email.
• We use cookies for sign-in. Third-party partners — including Google — use cookies to show ads on the informational pages.
• Payments are handled by Stripe. We never see your card number.
• You can ask for a copy of your data or its deletion at any time: almostfelixwu@gmail.com.

Who we are

Imposter is an independent game operated by a single developer. For any privacy question or request, contact almostfelixwu@gmail.com. This is the data controller for the purposes of the UK GDPR and EU GDPR.

What we collect

If you only play pass-and-play

Nothing that identifies you. The player names you type stay on your device for the length of the session. We may store a small preference in your browser (for example, that you've seen the intro animation and your chosen display name).

If you create an account or play online as a guest

• Account details — an email address and password if you register a full account; for guest sessions, just an anonymous identifier. Authentication is handled by Supabase.
• Profile — your display name and avatar colour.
• Gameplay data — the rooms you join, clues and votes during a round, and your lifetime stats (games played, wins as crew, wins as impostor). These power the leaderboard and your match history.
• Technical data — standard server logs (IP address, browser type, timestamps) kept briefly for security and debugging.

If you subscribe to Imposter+

Payment is processed by Stripe. Stripe collects your card details directly; we receive only a customer reference, your subscription status, and the country and card brand for tax and support. We never store full card numbers. Stripe's handling of your data is covered by Stripe's privacy policy.

Cookies and local storage

We use browser storage for three things:

• Essential — a session cookie that keeps you signed in during online play. The game does not work without it.
• Preferences— small values like your saved display name and whether you've seen the intro, stored locally in your browser.
• Advertising — set by Google and its partners on the informational pages (see below).

We do not currently use a separate analytics or tracking product.

Advertising

The informational pages of this site (guides, topic packs, this policy) may display ads served through Google AdSense. Ads are not shown on the live game screens.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You can opt out of personalised advertising by visiting Google Ads Settings. You can also opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info.
• For more on how Google uses data from sites that use its services, see Google's partner-sites policy.

Where required by law, ads will only be personalised after you consent through the cookie notice shown on your first visit from an applicable region.

How we use your data

• To run the game — assign roles, sync rooms, record results.
• To show your stats and the leaderboard.
• To process and support Imposter+ subscriptions.
• To keep the service secure and diagnose problems.
• To fund the free game through advertising on informational pages.

The legal bases we rely on are performance of a contract (running an account you asked for), legitimate interests (security, keeping the free game viable) and consent (advertising cookies where required).

Sharing

We don't sell your data. We share it only with the service providers that make the game work:

• Supabase — database, authentication and realtime sync.
• Vercel — hosting and content delivery.
• Stripe — subscription payments.
• Google — advertising on informational pages.

Retention

Account and profile data is kept while your account exists. Finished game rooms and their round data are cleared automatically not long after the game ends; your aggregate stats persist on your profile. Server logs are rotated within a short period. If you delete your account, we remove your profile and personal data, keeping only what we must for legal or accounting reasons (for example, a record that a payment occurred).

Your rights

Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, or restrict how we use it, and you can withdraw consent for advertising cookies at any time. Email almostfelixwu@gmail.comfrom the address on your account and we'll action it. You also have the right to complain to your local data-protection authority.

Children

The game is family-friendly, but accounts are not intended for children under 13 (or the minimum age in your country). We don't knowingly collect data from children under that age. If you believe a child has created an account, contact us and we'll remove it.

Changes

If this policy changes materially, we'll update the date at the top and, for significant changes, note it in the app. Continuing to use Imposter after a change means you accept the updated policy.