Privacy Policy

Overview

Bandwagon ("we", "us", "our", or the "Service") is committed to protecting your privacy. This Privacy Policy explains what we collect, why we collect it, and what you can ask us to do about it when you use our game platform at playbandwagon.com.

Information We Collect

Game Data

• Player names: the name you choose, shown to everyone else in your room
• Game answers: the text you submit in each round
• Scores and round history: your points, streaks, and whether you were eliminated
• Device identifier: a random ID stored in your browser so we can recognise you if you rejoin a room

Account Data

• Anonymous account: when you host or join a game, we create an anonymous account for your browser. It has no name, email address, or password. It exists so that our security rules can tell your data apart from another player's, and it lasts until you clear your browser storage.

Contact Data

• Email address: only if you join our waitlist or send us feedback
• Name and message: only if you send us feedback

Analytics Data

• Page views and interaction events (via Vercel Analytics)
• Game start and end events, and player join and leave events
• Device type, browser, and general location (country level only)
• Session replay and heatmaps (via Microsoft Clarity): a recording of how you moved, scrolled, tapped, and navigated through the pages, so we can see where the game confuses people. Clarity masks text you type into form fields by default, so your answers and display name are not captured in the replay.

Error Reporting

• Application errors and crashes (via Sentry)
• Error reports include technical identifiers such as room, round, and player IDs, and may include the question text of the round in which the error happened. They do not include your name or email address.

Technical Data

• IP address: read while handling a request so we can rate limit our answer grouping service. We do not store it.

How We Use Your Information

• To run games and show results to everyone in your room
• To recognise you if you rejoin a room you already joined
• To reply to you if you contact us or join the waitlist
• To fix bugs, monitor uptime, and keep the Service working
• To understand how players use the Service
• To prevent abuse of our systems

Data Storage & Retention

• Game data: rooms, player names, answers, and scores are retained indefinitely.
• Device ID and saved name: stored in your browser. Once you join a room, your device ID is also stored alongside your player record.
• Email addresses: retained until you ask us to remove them.
• Analytics: retained for up to 90 days.
• Session replays and heatmaps: retained by Microsoft Clarity for up to 30 days.
• Error logs: retained for up to 30 days.

Third-Party Services

We share data with the following providers so that the Service can run:

• Supabase: hosts our database and anonymous accounts, and stores game data, waitlist entries, and feedback. Data is encrypted in transit and at rest.
• Vercel: hosts the app and provides analytics. See Vercel's Privacy Policy.
• Sentry: collects application errors. See Sentry's Privacy Policy.
• Microsoft (Clarity): records session replays and builds heatmaps of how the Service is used. Clarity sets its own cookies to recognise a returning browser. See Microsoft's Privacy Statement.
• Anthropic (Claude API): suggests which answers mean the same thing. We send the round question and the answers submitted. We do not send names, email addresses, or account identifiers, though answers are free text and will contain whatever a player typed. See Anthropic's Privacy Policy.
• Resend: sends waitlist confirmations and feedback emails, and receives your email address in order to do so. See Resend's Privacy Policy.

International Transfers

The providers listed above may process your data outside the country you are in, including in the United States. Where the law requires it, those transfers rely on the providers' standard contractual clauses or an equivalent safeguard.

Cookies & Local Storage

We store the following information in your browser:

• Device ID: a random identifier that lets us recognise you across sessions
• Player or host name: your chosen name, saved for convenience. You can change it at any time.
• Anonymous session: the token for the anonymous account described above
• Microsoft Clarity cookies: set by Clarity to tell one browser's session replay from another's

You can remove all of it by clearing your browser's storage for this site. Doing so will not stop you using Bandwagon. You will simply be treated as a new player.

Your Rights

• Access: you can ask for a copy of the data we hold about you.
• Deletion: you can ask us to delete your data.
• Correction: you can ask us to correct data that is wrong.
• Identifying your data: gameplay is anonymous, so we may need details from you to find your records, such as the room code, the date you played, and the display name you used.
• Analytics: we do not currently offer an in app opt out. You can block analytics using your browser's privacy settings or a content blocker.

To exercise any of these, email us using the address at the bottom of this page.

Minors

Bandwagon is designed to be used by groups of adults in social settings. We do not knowingly collect data from children under 13, or under the age of digital consent where you live, which is up to 16 in parts of the European Union. If you believe a child has given us their data, please contact us and we will remove it.

Security

• HTTPS encryption for all data in transit
• Encryption at rest by our database provider
• Row level security policies controlling database access
• No passwords or payment information stored

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date at the top of this page.