Your data,
your choices.

What we collect

We collect your email, date of birth, profile details, photos, question, game answers and ratings, choices, messages, ticket activity, and reports you submit. We store sign-in sessions and the time and version of your User Agreement acceptance. Your date of birth is used to check that you are 18 or older; your displayed age is your choice.

Why we use it

We use these details to confirm your email, create your account, form rooms, run and score the game, show matches and conversations, protect users, handle reports, and maintain the service. A sign-in email is sent when requested. A room invitation is sent when your game is assembled. Browser alerts depend on permission and an open tab.

Who sees what

Players see your question, answers, and ratings as the game allows. Main profile photos become visible to finalists in the second round. A mutual finalist pair can see each other's additional photos and private profile. A voluntarily attached photo appears to the other person in the anonymous side chat. Your email and date of birth are not shown to other players. Content you share with someone can be saved by that person outside Banterfly.

Service providers

We use Vercel to host the site and private photo storage, a hosted PostgreSQL database for accounts and game data, Resend to deliver sign-in and room emails, and Cloudflare Turnstile to check registration and place confirmations. These services process data needed for those functions. We do not sell your profile or messages as an advertising list.

Visit statistics and campaign measurement

With your permission, a random visitor cookie links invitation tags (source, channel, campaign and creative) to your signup and account. We keep the first known and last known tagged source; untagged visits do not overwrite them. Visitor cookies last up to 90 days and your preference up to one year. You can play without visit statistics. Changing your preference stops new visitor collection; contact us to request removal of existing linked records.

Our private operator dashboard counts account, queue, confirmation, game and conversation facts. It receives no email address, birth date, sign-in token or message/answer text. Two-sided conversation counts use the presence of messages from both people. Security limits keep short-lived pseudonymous request counters, not raw IP addresses.

Storage and requests

Sign-in links expire after 15 minutes, onboarding sessions after 24 hours, and unclaimed question drafts after 30 days. Other account and game data may remain while the account operates and for operational or safety needs. To ask about access, correction, or deletion, email hello@auth.banterfly.club. We will verify that a request concerns your account before acting. Blocking another player limits access in the service; it cannot undo content already copied.

Updates

We will post changes to this notice here with a new date. Review the User Agreement, Detailed Game Rules, and Community Rules for the associated account, game, and conduct terms.