Privacy
Owner/legal review notice: this plain-language notice describes the current code and intended provider setup. The operator's legal identity, address, provider-side retention settings, and legal sufficiency must be confirmed before deliberate public acquisition.
Hangman For Two is built for private, account-free play. The game does not use ads, analytics, payment providers, or third-party tracking scripts.
What the app stores
Active games include the secret word, guesses, private player tokens, mode, and round state. Local development uses process memory. The production design uses Vercel to run the app and Convex to hold shared room state. Player credentials and the host's reusable invite are also kept in that player's browser storage so a retry or reload can recover the room.
Room retention and deletion
In this source version, a room stops being accessible after 60 minutes without a meaningful create, join, guess, or replay action, and no later than 24 hours after creation. Merely reading room state does not extend either limit. Deletion is cleanup-driven and therefore eventual: an expired record may remain in the configured store until cleanup next runs, although the app rejects access immediately after the limit.
Private links
Guest invite tokens are placed in the URL fragment so they are not sent to the server as part of the page request. The fragment is removed after a successful join. Guest links are reusable during the room lifetime, so the host should share them only with the intended guest. Private play pages are marked noindex and excluded from the sitemap.
Operational logs
Vercel, Convex, and network infrastructure may process technical request metadata for delivery, security, and reliability under their own services and the operator's account settings. The app's planned operational signals contain only aggregate status, latency buckets, and error classes—never words, tokens, room URLs, room IDs, IP addresses, user agents, or persistent person IDs. Exact provider-side log retention still requires owner/legal confirmation.
Word safety and family use
Random words come from a small reviewed list. Host-entered words are limited by shape, reserved-word, and denylist checks, but the denylist is not comprehensive and may miss harmful language or block harmless language. The service is general-audience and does not collect age; it is not presented as a child-directed service. Adults should supervise family use where appropriate.
Who is responsible
The site operator is intended to be the data controller for app-level processing. The operator's legal name and contact address are pending owner/legal confirmation. Vercel and Convex act as infrastructure providers for the deployed service.
Contact
For privacy questions, use the contact details on the contact page.