What we collect, why we collect it, and who else touches it.
Async Games collects what it needs to run your games and tell you when it's your turn โ and nothing else. In particular:
The rest of this page is the detail behind those promises. If anything here is unclear, email privacy@asyncgames.com.
This policy applies to Async Games, the turn-based games service at asyncgames.com and its installed app. Async Games is the controller of the personal data described below. You can reach us at privacy@asyncgames.com.
Accounts are created and held through Clerk, our authentication provider. Depending on how you sign up, that means your email address, a username, optionally a first and last name, and either a password or an identifier from the sign-in provider you chose. We never see or store your password ourselves.
To run a game we store, keyed to your account ID: the games and invitations you are part of, the other players in them, every move you make and the history of moves in the game, the turn timer you chose and when each turn was taken, finished-game results and the statistics derived from them, reactions you leave on other players' turns, and your friend connections and pending friend requests.
If you turn on push notifications, we store a notification token for each device you enable them on, along with a short description of that device worked out from your browser's user-agent string (device type, operating system and browser โ for example โiPhone ยท Safariโ), so you can tell your devices apart in Settings, plus when it was registered and last seen. We also store which notification channels you have switched on. Tokens that stop working are deleted automatically by a nightly job, and you can remove any device yourself from Settings.
Our hosting provider records standard server logs for requests to the site โ IP address, user agent, the URL requested and a timestamp. These are used to run the service, debug faults and protect against abuse, and are kept for a short period before being deleted.
Async Games is a multiplayer service, so some of your data is shown to the people you play with: your username and display name, your avatar, the moves you make and the history and recap of games you share, results and statistics from those games, reactions you leave, whether you are friends, and roughly when you last took a turn. Your email address is never shown to other players.
Because that data is shared, deleting your account also removes those games, results and reactions from the players you shared them with โ see Deleting your account below.
We use a small number of service providers to run Async Games. They process data on our instructions and are not permitted to use it for their own purposes:
We do not use Google Analytics, Firebase Analytics or any other analytics product. The site's font is bundled with the app rather than fetched from a font CDN, so loading a page doesn't tell a third party you visited.
We use only what the service needs to function. Clerk sets essential cookies to keep you signed in. Your browser's local storage remembers small interface preferences, such as a banner you dismissed, and the app's service worker caches files so the installed app can open offline. There are no advertising or tracking cookies, and we do not share cookie data with anyone.
Our providers are based in, or store data in, the United States and other countries. Where data is transferred out of the UK or European Economic Area, that transfer relies on the safeguards those providers put in place โ typically the UK Addendum and the EU Standard Contractual Clauses.
You can delete your account yourself, at any time, from Settings โ Account โ Delete account. We ask you to confirm, and then it happens immediately โ there is no waiting period and no way for us to undo it. Deleting removes:
Because games are shared, the players you were in a game with lose that game and its result too, and the other players in a pending invitation lose the invitation. Nothing of yours is kept behind under a โdeleted playerโ label. What can outlast the deletion is the short-lived server logs described above, and any backup copies our providers hold, which age out on their own schedules.
If you would rather we did it for you, or you can no longer sign in, email privacy@asyncgames.com and we will deal with it within one month.
You can access, correct, export or delete your personal data, object to or restrict how we use it, and withdraw consent for notifications at any time (Settings, or your browser's notification permission). Deleting your account and the data attached to it is something you can do yourself, from Settings โ see Deleting your account above. For anything else, email privacy@asyncgames.com and we will deal with it within one month.
If you are in the UK or the EEA and you think we have handled your data badly, you can complain to your data protection authority โ in the UK, the Information Commissioner's Office (ico.org.uk). We'd appreciate the chance to put it right first.
Async Games isn't intended for children under 13, and we don't knowingly collect their data. If you believe a child has created an account, email us and we'll remove it.
Traffic to the site is encrypted in transit, credentials are handled by our authentication provider rather than stored by us, and access to the database is restricted. No service can promise perfect security, but we keep the amount of data we hold small deliberately.
If we change this policy we'll update the date at the top of the page, and we'll tell you in the app if the change is significant.