Privacy Policy
Last updated: November 2026
This policy explains what data Just Guess This collects, why, and your choices. We keep it minimal. The data controller is Novologia Ltd, a company registered in Israel, which operates Just Guess This.
1. What we collect
- Your game — the display name and avatar you choose, the answers you type and when you buzzed, the verdicts and points, the riddles played, and your device’s language. Players are identified by a random identifier kept in a cookie on their device, not by name or email.
- Your email — only if you buy a pass (the email you give at checkout, for which an account is created) or sign in; used to sign you in and attach your pass.
- Your purchases — which pass, when, the price paid, and a transaction identifier. Card details go to our payment provider (section 6) and never reach our servers.
- Usage data — how the game is played (for example, which clue a player buzzed on and whether the answer was right), with the country your connection comes from and the kind of device and browser. Some of it is also collected through Google Analytics, together with your IP address and a cookie identifier (section 7).
- Device information for the free games — for free party games only: a keyed, one-way hash of your network address (never the address itself), the city your connection comes from, and plain facts about your device (operating system and version, model when your browser reports it, screen size, time zone and language).
2. How we use it
To run the game (show each answer to the players of that game and judge it), to run your account and pass, to keep the free games fair and the Service secure, and to improve the game, its riddles and its judging. We do not use your data for advertising, and we load no advertising on the site. To see how the game is used we also use Google Analytics, described in section 7 — in the EU/EEA, the UK and Switzerland only if you accept it.
3. Answers and the AI judging
An answer is first compared with the riddle’s accepted answers. When that isn’t clear, we send the answer and the riddle’s expected answer to our AI providers — OpenAI and, as a second opinion, Anthropic (Claude). We don’t send your name, email or any identifier with it. These providers process the answer only to return a verdict to us, under their API terms for business customers.
The answer bank. Every distinct answer typed for a riddle is kept with its verdict — the riddle, the language and country version of the game, the answer as typed, and how often it was given — so the same answer is judged the same way next time and the accepted answers grow. It holds no name, identifier or link to a game or a player. Please don’t type personal information as an answer.
To prevent abuse of free games, in cases that look suspicious we may also send OpenAI the device information and in-game information we already collect (section 1) — such as player names in the rooms concerned — so that it can tell whether two browsers belong to the same person. Nothing else is decided this way, and a refusal can always be questioned by writing to us.
How long we keep games: games — including their names, avatars, answers and points — are deleted automatically 30 days after they were last played.
How long we keep usage data: the usage records we use to improve the game are kept for up to 24 months; after 30 days they no longer point to a device or a game, and the device information above is deleted.
4. Pictures
Riddle photos come from Wikimedia Commons, credited with their authors and licences, or are generated with AI. Pictures are served from our own website; viewing them sends nothing to Wikimedia.
5. Where your data lives
We use trusted providers to run the Service: our database and authentication are hosted by Supabase in the European Union (Ireland), our website by Vercel in its Dublin region, sign-in emails are sent through our authentication and email providers (Supabase and Amazon Web Services), answers are judged by the AI providers in section 3, and usage statistics are collected by Google Analytics (section 7). Your data may be processed by these providers solely to deliver the Service. Novologia Ltd is based in Israel — a jurisdiction the European Commission recognises as providing an adequate level of data protection.
6. Payments
Purchases are processed by Paddle (Paddle.com Market Ltd), our merchant of record. Your payment details — such as card numbers — are collected and processed by Paddle and never touch our servers. We receive a record of the purchase (product, price, currency, transaction identifier and your email) so we can unlock it on your account and handle refunds. Paddle’s own privacy policy applies to the data it collects at checkout.
7. Analytics and sharing
To understand how the game is played, so we can improve it, we use Google Analytics (Google): it receives the pages you visit and in-game events (for example, which kind of game was picked, an invite shared, the checkout opened, and the price of a purchase), together with your IP address, device and browser information, and a cookie identifier. Google processes this data to produce statistics for us.
If you are in the EU/EEA, the UK or Switzerland, none of this happens unless you accept: Google Analytics is not loaded and nothing is sent to Google until you press Accept on the cookie question, which we ask on your way into a game. Playing doesn’t depend on your answer, and you can change your mind at any time with “Cookie settings” at the bottom of our pages — see section 9.
We do not sell your data, and we do not share it with anyone beyond the providers named in this policy.
8. Your rights
You can access, correct or delete your data at any time. To delete your account and associated records, email support@justguessthis.com and we’ll remove them.
9. Local storage & cookies
We use cookies and your browser’s local storage to recognise your device in a game, remember your name, avatar, language and sound setting, keep you signed in, and remember which of its free games this device has used. They are needed for the Service to work and are not optional. We also use the Google Analytics cookies described in section 7, and a cookie that remembers your answer to the cookie question. If you are in the EU/EEA, the UK or Switzerland, we ask before any analytics cookie is set; anywhere, “Cookie settings” at the bottom of our pages lets you turn them off or on again. We use no advertising cookies.
10. Children
Just Guess This is a party game that families play together. Players don’t need an account and are identified only by a nickname of their choice; we ask that children under 13 play with a parent or guardian. Accounts and purchases are for adults. We don’t knowingly collect personal information such as an email address from children under 13.
11. Changes & contact
We may update this policy; material changes will be posted here. Questions? Email support@justguessthis.com.
