Privacy Policy

Find The Imposter operates the games and website at findtheimposter.com. This policy explains how information is handled when you browse, play locally, join online games, sign in or contact the team. You can play locally without creating a Google or email account. Online features use server-side services, including guest authentication.

If you choose Sign in with Google, Google shares your account identifier, email address and basic profile information, such as your name and profile picture, with Firebase Authentication. We use this information to authenticate you and maintain your game account. We do not receive your Google password or request access to Gmail, Google Drive, contacts or calendars.

You choose an in-game username. Your Google profile picture can be copied to your game profile. Firebase stores your account identifier, username, avatar, friend relationships, friend requests and room invitations. Email-link sign-in uses the email you provide to send a sign-in link. Guest online play uses an anonymous Firebase identifier; anonymous does not mean that no data is stored.

Online play sends player identifiers, names, room settings, actions, votes, game state and chat messages to Firebase so players can share the same game. Online status and activity timestamps support presence and room management. Other players can see your username, avatar and information shared through gameplay, chat and social features. Do not post sensitive information in chat.

Your browser stores preferences, local game progress and sign-in state using local storage or other browser storage. Clearing this storage does not delete your server-side account. When you send feedback, Formspree processes your message, feedback category, game mode and any email you provide. Email support also receives the information you send.

Cloudflare Web Analytics measures visits and page performance using browser and device information. We do not use Google Analytics. Hosting and security services may process IP addresses and request information to deliver and protect the service.

The website displays Google AdSense ads. Google and its partners may use cookies or similar technologies and process IP addresses, device information, page visits and ad interactions, including for personalized advertising where enabled. Native app advertising may use Google AdMob. Available consent and ad privacy controls depend on your region and platform. Google account information obtained through sign-in is not used by our app to personalize ads.

We use information to sign you in, provide profiles and friends, synchronize multiplayer games, respond to support requests, diagnose errors and understand usage. Google/Firebase provides authentication and game storage, Netlify hosts the website, Cloudflare provides web analytics and delivery/security services, Google provides advertising, Formspree handles submitted feedback. These providers process information for their respective services and may process it outside your country.

We do not sell Google sign-in data or provide it to advertising services. Google user data is used for account and player-facing features described here. We may disclose information when required by law or necessary to address fraud, abuse or security incidents. Links to provider policies appear below.

Account and profile information is stored in Firebase Authentication and Firestore; multiplayer and presence features use Firestore and Firebase Realtime Database. We use HTTPS and database access rules to protect data. No service can guarantee complete security.

Account and profile records persist between visits; signing out or closing the browser does not delete them. Inactive room data is subject to automated cleanup, but this is not account deletion and is not an immediate deletion guarantee. Local storage remains until cleared. Diagnostics, analytics, support records and provider backups have separate retention settings; contact us for details or to request deletion.

To request access, correction or deletion of your account and associated data, email [email protected] with your game username and account email, if you have one. We may need to verify that the account is yours. Do not send passwords or sign-in codes. Some records may need to be retained for security or legal obligations.

You can remove this app’s connection from your Google Account, clear browser storage, adjust browser cookie settings and use available ad privacy controls. Removing the Google connection prevents future authorized access but does not itself delete information already stored by the game.

Local party play and online features handle data differently. Parents or guardians should supervise children using online rooms, chat or account features. If you believe a child has provided personal information that should be removed, contact us using the address below.

We update this page when our data practices change and show the revision date above. For privacy questions or data requests, contact the Find The Imposter team.