Who Was It is a daily game among friends. This page explains, without jargon, which data the game uses (on the website, the web app and the mobile apps), why, who it is shared with and how to exercise your rights.
Who is responsible
Who Was It is published by Edouard Short, an independent developer (private individual), who is the controller of your data. For any question: contact@who-was-it.app.
The data we use
- Your account: email address (or the identifier provided by Google or Apple if you sign in with them), username, masque color and language.
- Your games: your groups, your answers, your votes, your chat messages and reactions, your streak and the stats derived from it, the packs and options unlocked.
- Notifications: your device's notification token (browser or phone), your notification preferences and whether you want email reminders.
- Where your first visit came from (invitation link, referring site or campaign), stored with your profile, and the date of your last activity.
- Advertising, in the Android app only: the device's advertising ID, IP address and technical device information, processed by Google AdMob and its partners according to your consent choice.
Why
- To run the game (draw, investigation, votes, chat, streaks, stats): this is the service you ask for when you create an account.
- To send the notifications and reminders you turned on. You can turn them off at any time in your profile.
- To understand where players come from so we can grow the game, based on our legitimate interest.
- To fund the free game with one ad a day in the Android app. Personalized ads are only shown with your consent; without it, ads remain limited and non-personalized.
We do not sell your data.
Who has access
Members of your groups see your username and masque; your answers, votes and messages are revealed to them according to the rules of the game.
We rely on service providers that process data on our behalf:
- Supabase: database and sign-in (servers in Ireland, European Union).
- Vercel: hosting of the website and the web app.
- Google Firebase Cloud Messaging: notifications on Android.
- Resend: sending emails (sign-in codes, reminders).
- Google AdMob and its advertising partners: ads in the Android app.
- Google and Apple, if you choose to sign in with their account.
Some of these providers are based in the United States. These transfers are covered by the safeguards provided by the GDPR (European Commission standard contractual clauses or the Data Privacy Framework).
How long
Your data is kept as long as your account exists. When you ask for your account to be deleted, it is erased within 30 days, unless the law requires us to keep it longer.
Your rights
You can access your data, correct it, have it erased, get a copy in a readable format, object to or restrict its use, and withdraw your consent at any time. Write to contact@who-was-it.app: we answer within a month.
For ads, the "Ad privacy choices" link in your profile (Android app) lets you change your consent at any time.
If you believe your rights are not respected, you can lodge a complaint with your data protection authority (in France, the CNIL: cnil.fr).
Cookies and storage on your device
The website and the web app use no advertising cookies. The app stores on your device what it needs: your sign-in session, a few display preferences and where your first visit came from.
In the Android app, Google AdMob uses the device's advertising ID according to your consent choice.
Minimum age
Who Was It is meant for people aged 15 and over.
Changes
If this policy changes, the new version is published on this page with its update date. For significant changes, we let you know in the game.