Privacy

Last updated 30 September 2026

Who runs this

Party is run by one person, Huan Chen, as a personal project. For anything on this page — including a request to delete data about you — write to huanchen11021@gmail.com.

What gets stored

If you join a party as a guest

You do not create an account and you never give a password. What is stored is:

• The name you type when joining. Whatever you type is what the room sees — it does not have to be your real name.
• Your answers — the options you pick, the text you write, numbers you guess, ratings you give, questions you submit, and which tasks you marked done.
• A random token stored in your browser, which is how your phone is recognised if you close the tab and come back. It identifies a seat at one party, nothing more, and it is not linked to you anywhere else.
• When you joined, and which team you were put on if the party uses teams.
• A photo, and social handles, only if you add them. Both are optional, both are off until you choose them, and they are only shown to people at that party.
• Reactions — emoji, or a photo if you send one. These are deleted automatically about 60 seconds after they are sent.

If you host a party

• Your email address, from Google when you sign in. Party asks Google only for your name, email address and profile picture — nothing else, and never access to your Gmail, Drive, contacts or calendar.
• A session token so you stay signed in, stored as a cookie in your browser and kept here only as a hash — the raw value is never saved.
• The parties you create and everything in them.

Technical records

Two things are worth stating plainly because they are easy to leave out of a privacy policy:

• IP addresses are recorded in two narrow places. Failed attempts to use a host link, and sign-in attempts, are counted against the IP address they came from, so that someone cannot guess at links or hammer the sign-in endpoint. These counters are deleted automatically — within an hour for host-link attempts, within a day for sign-in counters.
• Server request logs exist. Party runs on Cloudflare, which keeps short-term logs of requests to the service, including IP addresses. These are operational records held by Cloudflare under their own retention policy, used for debugging and abuse investigation, not for building any profile of you.

What does not happen

• No analytics and no trackers. There is no Google Analytics, no Meta pixel, no advertising SDK, and no third-party script of any kind on the pages guests use. Party does not follow you around the web and cannot see anything you do outside it.
• Nothing is sold, rented, or shared for advertising. Ever.
• No profile across parties. Guest identity is per-party. Joining two different parties does not link them.

Who else can see it

• People at your party. That is the point of the product. Your name and your answers are shown in the room, subject to whatever the host set — some questions are anonymous, some results only appear after everyone has answered.
• The host. The host of a party can see its answers and can export them as a file. Treat what you type as visible to them.
• Cloudflare, which hosts the service and stores its database and uploaded images. They process this data on our behalf as our infrastructure provider.
• Google, for host sign-in only. Guests never touch Google.
• YouTube, but only if a host puts a YouTube video in their playlist, and only on the screen showing it. Those embeds use youtube-nocookie.com.

Beyond that, data is disclosed only if the law requires it.

How long it is kept, and how to get rid of it

• Reactions disappear on their own after about 60 seconds, photos included.
• Archiving a party permanently deletes every guest's photo and social handles, including the image files themselves.
• Deleting a party erases all of it — names, answers, questions, teams, uploads.
• Names and answers are kept until the party is deleted. This is the honest and least convenient part: the recap page is the reason, and only the host can delete a party. If you want your data out of a party you attended, ask the host, or write to the address above and it will be removed.
• Host accounts that never created a party and have not signed in for 90 days are deleted automatically.

Cookies and browser storage

No advertising or tracking cookies are used, so there is no consent banner to click through. What is stored in your browser is:

• the per-party token described above, so you can rejoin;
• your light/dark preference, and whether you muted sounds;
• for hosts, a sign-in session cookie.

Children

Party is not directed to children under 13, and a child under 13 should not create a host account.

Children do sometimes attend parties run with it — it is used at birthday parties. If you are hosting a party where children will take part, you are responsible for having a parent or guardian's permission for them to join, and you should leave photo and social-handle sharing switched off. If you believe a child's information has been stored and you want it removed, write to the address above and it will be deleted.

Your rights

You can ask what is stored about you, ask for it to be corrected, or ask for it to be deleted, by writing to huanchen11021@gmail.com. Depending on where you live you may also have a right to object to processing or to complain to a data protection authority. There is no automated decision-making here and nothing is transferred for marketing purposes.

Changes

If this policy changes in a way that affects what is stored or who sees it, the date at the top changes and the change will be described here rather than quietly replaced.