Privacy, in plain language

Account and identity data. If you create an email account, Guess Jam stores your normalized email and a one-way password hash. If you use Google Sign-In, it stores your verified email and Google's stable account identifier so the same Guess Jam profile can be restored later. Guess Jam does not retain the Google authorization code, ID token, access token, or a refresh token.

Profile and gameplay data. The service stores a display name, experience, statistics, scores, results, achievements, streaks, Daily Group membership and activity, and account-to-profile links. Online rooms can contain participant names, room state, scores, actions, and submitted answer text. Weekly leaderboards can show a profile's display name, level, points, wins, and games.

Browser storage and cookies. Local browser storage keeps preferences, player names, guest profile credentials, room details, recent queued results, Daily activity, and game-night state. A signed-in account uses a Secure, HttpOnly session cookie. Short-lived Secure cookies protect Google OAuth state and completion. The service worker caches public static application files but does not cache API responses or administrator pages.

Reliability and security data. The service processes IP addresses and request metadata for delivery, rate limiting, abuse prevention, and ordinary server logs. Coarse same-origin telemetry stores route categories, Web Vitals, normalized error classes, counts, and timestamps—not error messages, stack traces, or account IDs. Narration quota records use one-way keyed hashes of a profile ID or IP address rather than storing those values in the quota table. For signed-in accounts, Guess Jam also keeps bounded account activity records containing dates, request counts, login events, recent IP addresses, and browser locale and time-zone signals. These support engagement and retention reporting, account support, security review, and abuse controls. Locale, time zone, and IP-based location signals are approximate and can be affected by device settings, shared networks, or VPNs.

Guess Jam uses the Google account identifier and verified email only to create or link an account, sign you in, prevent identity collisions, and restore the correct gameplay profile. Google OAuth identity fields are not intentionally sent to OpenAI or Guess Jam analytics, are not used for advertising, and are not sold.

Guess Jam has no ongoing access to your Google account after sign-in and does not request offline access. Removing Guess Jam from your Google Account permissions revokes the current Google grant. You can authorize again later; revoking that grant does not sign you out of Guess Jam or automatically delete your Guess Jam profile. Contact us to request deletion.

Guess Jam's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

Microphone use is optional and requires browser permission. Guess Jam does not store raw microphone audio. Speech recognition is supplied by your browser or operating system and may process audio under that provider's privacy terms. A recognized transcript becomes an answer only when it is submitted.

AI features are currently unavailable unless the service operator enables them. When enabled, Smart Match can send a submitted answer, its question, and candidate board answers to OpenAI with response storage disabled. Studio narration can send narration text plus voice, delivery, and pace settings to OpenAI to generate audio. Generated narration can contain player or game context. Guess Jam does not intentionally include the Google account identifier or verified OAuth email in these OpenAI requests. User-submitted text is processed as entered, so do not include sensitive information in answers, names, or narration.

• Google provides Google Sign-In and Google Analytics. Analytics may process page, browser, device, session, and cookie information under Google's Privacy Policy.
• Hostinger provides the VPS and network infrastructure that deliver and store Guess Jam data.
• OpenAI may process feature-specific answer or narration text only if AI matching or studio narration is enabled. Its current policy is available at OpenAI Privacy.

Guess Jam may also disclose information when required by law, to protect users or the service, or as part of a business transfer with appropriate notice and safeguards.

Account, Google identity, profile, progression, history, and Daily Group records do not expire automatically and remain until they are deleted or the service changes its retention practice. Account sessions expire after 90 days. Google OAuth state and completion records expire after 10 and 5 minutes.

Waiting online rooms are pruned after about 24 hours, active rooms after 7 days, and completed rooms after 45 days. Incomplete sessions are pruned after 7 days and completed sessions after 90 days. Group notifications are pruned after 120 days. Coarse telemetry is retained for 30 days and hashed narration-usage aggregates for 35 days. Generated narration audio can remain in server memory for up to 30 minutes, and a hashed Smart Match request/result index can remain in memory for up to 7 days. Ordinary server logs are rotated daily with up to 14 rotations. Detailed account events and recent account IP records are retained for up to 90 days; per-account daily activity summaries are retained for up to 400 days; and administrator audit records and expired restriction history are retained for up to 730 days. Active account or IP restrictions remain until they expire or are removed. Backups may remain for a limited operational recovery period.

• Play as a guest instead of creating an account.
• Use email and password instead of Google Sign-In.
• Deny microphone permission and type every answer.
• Use browser privacy controls to manage local storage, cookies, and Google Analytics.
• Sign out to revoke the current Guess Jam account session.

Guess Jam does not yet provide an automated account export or deletion control. To request access, correction, or deletion of account and profile data, email anixemllc@gmail.com from the account email when possible. Removing a Daily Group or leaving it uses the controls provided inside the service.

Guess Jam uses HTTPS, one-way hashing for passwords and private tokens, short-lived OAuth safeguards, and restricted server access. No internet service can promise absolute security.

Guess Jam is a general-audience party game. If you are a parent or guardian and believe a child supplied personal data inappropriately, contact us so the request can be reviewed.

This policy may change as the service changes. Material updates will be reflected by the effective date and, when appropriate, an in-product notice.