Last updated: 12 October 2026
You Witch! is an online party game. This explains what information it uses, why, who else sees it and what you can ask us to do. We keep it to what the game needs. There are no ads and we do not sell data.
You Witch! is run by Clark Lavery in the United Kingdom, who is the controller of your information under UK GDPR. Contact: privacy@youwitch.app.
| Information | Why | Lawful basis |
|---|---|---|
| The name you type to play | Shown to the other players in your game. It stays on your device (and theirs) and is not saved on our server. | Contract (running the game) |
| An optional photo | Shrunk on your device, shown to your game, and sent through our server to an AI model to paint your portrait. It is never stored or logged by us. See “Photos”. | Consent (you tick the photo terms) |
| Witch Pass: a random pass id, credit balance and purchase record | To hold the credits you buy and spend them on portraits. | Contract |
| Email address, and a Google account id if you sign in with Google | To recover your pass on another device, send receipts and pass codes, and answer support. | Contract, and legitimate interests (keeping accounts secure) |
| Payment | Handled by Stripe. We receive the amount, currency and a reference, never your card number. | Contract, and legal obligation (accounts) |
| A scrambled (hashed) form of your IP address | Limits abuse of the email sign-in. Kept for about a day. | Legitimate interests |
| Anonymous game events (for example “a game started”) and error reports | To see whether the game works and fix bugs. See “Analytics and errors”. | Legitimate interests |
| What you write in the bug-report box | To understand and fix the problem, with a replay of your last minute in the app. | Consent (you choose to send it) |
We set no advertising or tracking cookies, so there is no cookie banner. The only cookies are set by our server for signing in, and are strictly necessary: a sign-in session (up to 30 days), a short-lived check during Google sign-in, and a short-lived code for email sign-in. They are HttpOnly and sent only to our own site.
The app also keeps small items in your browser’s storage so it works as you left it: your Witch Pass id, your name, your theme and motion choices, that you agreed to the photo terms or saw the introduction, and (until you close the tab) your seat in the current game. They never leave your device except the pass id, which is how your credits are found. Clearing site data removes them.
A photo is optional. It is cropped and shrunk on your device, which removes camera details such as location. A small copy is shown with your name to everyone in your game. The full copy goes only to the host’s device. At the end the host’s device sends it, with the potions you received, through our server to an image model (FLUX.2 [klein] 4B from Black Forest Labs, run on Cloudflare Workers AI) and gets a portrait back. We do not keep your photo or portrait. Cloudflare’s own privacy policy covers its processing. The finished portrait is shown to everyone in your game, who can save it. You can play with an avatar instead and no photo is sent.
Games run directly between players’ devices (peer to peer). To connect, devices exchange network addresses, so other players’ devices can technically see yours, as with any video call. A public signalling server (PeerJS) helps players find each other and sees connection details, not game content. Where a direct connection is not possible, traffic goes through a Cloudflare relay.
We use PostHog (EU servers) to count anonymous events, such as games started and finished. It stores nothing on your device and we never send names, room codes, photos or votes to it. We use Sentry to record errors, and a short replay of the session only if an error happens or you send a bug report. Media is blocked from replays.
Cloudflare (hosting, database, AI, relay), Stripe (payments), Google (sign-in, if you choose it), Resend (receipts and sign-in emails), PostHog and Sentry (above), and PeerJS (above). Some are outside the UK and the EEA, including in the United States, and rely on approved safeguards such as the UK’s data bridge or standard contractual clauses. We do not sell or share your information for advertising.
Pass, purchase and account records are kept while your pass or account exists, and purchase records for as long as tax law requires. Sign-in codes are deleted after about a day. Analytics and error data follow the providers’ retention settings. Names, photos and portraits are not stored by us.
If you are signed in, the Get credits panel has a “Delete account” button. It erases your email address, your sign-in details, the passes linked to your account and their pass codes. Credits you have left are not thrown away: you are shown a one-time code that puts them back whenever you enter it (in Get credits, “Enter a code”). We show it once and cannot look it up, because nothing links it to you. Refunds for unused credits are by email request, to contact@youwitch.app. Records of payments are kept for as long as tax law requires, but they hold only an amount and a random reference, and nothing links them to you once your account is gone. If you have a pass but no account, email privacy@youwitch.app.
You can ask to see, correct or delete the information we hold about you, to restrict or object to its use, to receive a copy, or to withdraw consent (for example by unticking the photo terms in Options). Email privacy@youwitch.app from the address on your account and we will reply within a month. If you are unhappy, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
You Witch! is not aimed at children under 13 and we do not knowingly collect their information. If you think a child has given us information, tell us and we will delete it.
If this policy changes in substance we will update the date above and, where it affects photos, ask you to agree again.