Last updated 26 September 2026

Privacy Policy

SplitClue is built so that players don't have to tell us anything. Only people who choose to make a host account give us personal information, and we keep it to the minimum the service needs.

Who we are

SplitClue (splitclue.com) is run by Samuel Barnett ("we", "us"). For anything about your data, email support@splitclue.com. For the purposes of UK and EU data protection law, Samuel Barnett is the data controller.

What we collect

Players. You don't need an account to play. When you join a room, you choose a display name and a cartoon avatar for that game so the other players can tell you apart. It can be a nickname; it doesn't need to be your real name. Everyone in the room can see it. Our server keeps it, along with which role your device has taken, in memory only while the room is open, and forgets it shortly after the room empties. Your browser remembers it in that tab until you close it, so you don't have to re-enter it between games. We never save it, and nothing you do in a game is saved.

Host accounts. If you create an account to host games, we store:

• Your email address, and your name and profile picture if you sign in with Google.
• The display name and avatar (a background color and a cartoon animal) you choose for your profile.
• Which games your account owns.
• Your active sign-ins: when each started, and the IP address and browser it came from.

Technical logs. When any device uses the site, our host Cloudflare processes technical information such as IP address, browser type and the pages or game actions requested. Short-term logs of these requests help us fix problems and block abuse. We also count sign-in attempts per IP address to stop people flooding the sign-in form.

Analytics. We use Cloudflare Web Analytics to count visits and page views in aggregate. It doesn't use cookies, doesn't track you across other websites, and doesn't build profiles of visitors.

Settings on your device. Your browser remembers a few settings on your own device, such as light or dark mode and whether sound is on. They never leave your device.

Google user data

If you choose "Continue with Google" to create a host account, this section explains exactly what SplitClue receives from Google and what we do with it.

• What we receive. Only basic profile information, using Google's standard sign-in permissions (openid, email and profile): your name, email address, profile picture link, and your Google account ID. We don't ask for, and can't see, your Gmail, contacts, calendar, Drive files or anything else in your Google account.
• How we use it. Your Google account ID and email address sign you in and identify your host account. Your name is suggested as your display name, which you can change. We don't show your Google profile picture; SplitClue uses its own cartoon avatars.
• Where it's stored. In our account database, hosted by Cloudflare, protected as described under "How we protect it" below.
• Who we share it with. Nobody, except Cloudflare as the service provider that stores it. We never sell Google user data, use it for advertising, or use it to train AI or machine learning models.
• How long we keep it, and deleting it. Until you delete your account. You can delete it yourself at any time on your account page (splitclue.com, then your account, then "Delete my account"), which permanently removes this data. You can also remove SplitClue's access at myaccount.google.com/permissions, or email support@splitclue.com and we'll delete it for you.

SplitClue's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Why we use it, and our legal basis

• To provide your account (sign you in, let you host games, remember what you own): necessary to perform our agreement with you.
• To keep the service secure and working (sign-in records, rate limits, technical logs): our legitimate interest in protecting SplitClue and its users.
• To reply when you contact us: our legitimate interest in answering your questions.
• To meet legal obligations, for example keeping records if we're required to by law, or if paid games are added later.

We don't sell your data, share it for advertising, or send you marketing email.

Who we share it with

We use a few service providers to run SplitClue. They process data on our behalf and only for these purposes:

• Cloudflare hosts the site and game rooms, stores account data, and forwards email sent to splitclue.com.
• Google handles sign-in if you choose "Continue with Google". It also serves the site's fonts, so your browser contacts Google's servers when pages load.
• Resend sends sign-in link emails.

If paid games are added, a payment provider will process payments, and we'll update this policy before that happens. We may also disclose information if the law requires it, or to protect SplitClue or its users from harm.

International transfers. These providers may process data outside the UK and European Economic Area, including in the United States. Where they do, they rely on recognized safeguards such as the European Commission's Standard Contractual Clauses, the UK's International Data Transfer Addendum, or the EU-US Data Privacy Framework.

How long we keep it

• Account information: until you delete your account.
• Sign-in records: each expires 30 days after it was last used. Sign-in links expire after 10 minutes.
• Room and player data (including players' display names and avatars): kept in memory only, and gone within minutes of a room emptying.
• Technical logs: kept by Cloudflare for a few days, then deleted.
• Emails you send us: kept for as long as needed to help you, then deleted.

How we protect it

• The whole site is served over encrypted HTTPS connections.
• There are no passwords to leak. You sign in with Google or with a one-time email link that works once and expires after 10 minutes.
• The cookie that keeps you signed in can't be read by scripts on the page, and is only sent over HTTPS.
• Sign-in attempts are rate-limited, and only Samuel Barnett can access account data.

No system is perfectly secure. If a breach ever affects your personal data, we'll tell you and the relevant authorities as the law requires.

Cookies

Signed-in hosts get one cookie that keeps them signed in. It's strictly necessary for the account to work, so it doesn't need your consent. We don't use advertising, analytics or tracking cookies.

Your rights

You can delete your account at any time from your account page, which permanently removes your account information. Depending on where you live, and in particular under UK and EU law (the UK GDPR and the GDPR), you also have the right to:

• access the personal data we hold about you, and get a copy in a portable format
• have inaccurate data corrected
• have your data erased
• restrict or object to how we use it, including processing based on legitimate interests

To use any of these rights, email support@splitclue.com. We'll reply within one month. You can also complain to a data protection authority: in the UK, the Information Commissioner's Office (ico.org.uk); in the EU, the authority in your country. We'd appreciate the chance to sort it out with you first.

US residents

Several US states, including California (under the CCPA, as amended by the CPRA), Virginia, Colorado, Connecticut, Utah, Texas and Oregon, give residents rights over their personal information. Some of these laws only apply to businesses above a certain size, but we offer the same rights to everyone in the US.

What we collect, by category (in the last 12 months):

• Identifiers: email address, name, profile picture, and your chosen display name and avatar (host accounts only); the display name and avatar players choose for a game session (kept only while the room is open); and IP address (anyone using the site).
• Internet or other electronic network activity: browser type, sign-in records, and short-term technical logs of requests.
• Commercial information: which games an account owns.

We collect this directly from you, from your device when you use the site, and from Google if you choose to sign in with Google. We use it only for the purposes described in "Why we use it" above, and share it only with the service providers listed in "Who we share it with".

No selling, no sharing for ads. We don't sell personal information, and we don't "share" it for cross-context behavioral advertising, as those terms are defined in California law. We haven't done either in the last 12 months. We don't use or disclose sensitive personal information, and we don't use personal information for profiling or automated decisions that have legal or similarly significant effects.

Your rights. Depending on your state, you can ask us to:

• tell you what personal information we've collected about you, where it came from, why we use it and who we've disclosed it to, and give you a copy
• delete it
• correct it if it's inaccurate
• not sell or share it, or use it for targeted advertising. We don't do any of these, so there's nothing to opt out of, but you can still ask us to confirm that.

To make a request, email support@splitclue.com, or delete your account yourself from your account page. We'll confirm the request comes from you by checking it against the email address on your account. You can use an authorized agent, but we may ask for proof that they're acting for you. We'll respond within 45 days. If we turn down a request, you can appeal by replying to our decision, and if you're still unhappy you can contact your state's attorney general.

No discrimination. We won't treat you differently, or charge you a different price, for using any of these rights.

Global Privacy Control and Do Not Track. We don't sell, share or track, so these browser signals don't change anything on SplitClue. You're already opted out.

California "Shine the Light". We don't disclose personal information to third parties for their own direct marketing.

Children

You must be at least 13 to create a host account, or older if your country sets a higher age. Players of any age can join a game without an account. Players only pick a display name and cartoon avatar for the session, which we never save. We suggest younger players use a nickname rather than their real name. SplitClue isn't directed at children under 13, and we don't knowingly collect personal information from them, in line with the US Children's Online Privacy Protection Act (COPPA). If you think a child under 13 has made an account, email us and we'll delete it.

Changes

If we change this policy, we'll update the date at the top. If a change affects how we use your personal data, we'll tell account holders by email before it takes effect.

Contact

Samuel Barnett, SplitClue: support@splitclue.com