Privacy Policy

1. Information we handle

The information involved depends on the features you use:

Account and profile information: account identifier, email, display name, first and last name, player handle, profile photo, sign-in provider and account preferences. Firebase Authentication processes sign-in credentials and related technical information.
Game information: saved games, room names and codes, participants, roles, presence, join times, moves, game state, outcomes and completed-game reviews.
Payment information: payment-provider customer and transaction identifiers, contribution amounts and status, and any earlier Member Access purchase entitlement. Stripe collects payment details through its hosted checkout; the app does not collect or store your full card number.
Support and feedback: messages, submitted ideas or issue reports, account identifier, replies, technical diagnostics and an optional screenshot. Support emails contain the information you choose to send.
Technical and usage information: browser and device details, page and feature activity, connection information, identifiers used by analytics, and service/security logs. Hosting, authentication and analytics providers may process IP addresses and similar request information.

2. Why we use information

We use information to provide sign-in and profiles, run and synchronize games, save progress, manage access, contributions and earlier purchases, respond to requests, diagnose errors, protect the service and understand how it is used. We also use records where needed for accounting, legal obligations and resolving disputes.

Your account includes an optional preference for Gray Wolf Games updates. It is off by default and can be changed in account settings. The current app does not send marketing updates; if that service is introduced, the preference and applicable consent requirements will apply. Necessary account or support messages are separate from marketing.

3. What other people can see

Room hosts and admitted participants or observers can see player identities, roles, presence and game information needed for their room. Completed-game reviews are available to participants. Reusable invitation codes and approved-role records can remain associated with a table between games.

A report and its replies are available to the reporter and authorized administrators. We do not make account email addresses public as a player directory. However, a name, screenshot, report or other content you choose to share may reveal information about you or someone else. Please avoid including sensitive information unnecessarily.

4. Service providers and disclosures

We use Google Firebase for authentication, databases, storage and app services; Stripe for payments; Google Analytics for usage measurement; and hosting and delivery providers to serve and protect the site. These providers receive information needed for their functions and may also process information under their own policies. If you choose third-party sign-in, that provider handles the sign-in process.

We may disclose information when required by law, to respond to valid legal process, protect users or legal rights, investigate fraud or security incidents, or carry out a business transfer with appropriate safeguards and any required notice. This policy does not authorize unrelated use of your data.

5. Browser storage and analytics

Wu Wei uses browser storage for signed-in local games, tutorial progress, display and bot preferences, recent-room information, report drafts and navigation after sign-in. Guest games remain in memory in the current tab and are not saved. Authentication also uses browser storage or cookies to maintain a session. Clearing site data may sign you out and remove local progress or preferences; it does not by itself erase cloud records.

The app initializes Google Analytics in supported browsers. Analytics may use cookies and identifiers to measure page visits, sessions, approximate location and device/browser information. The app does not currently provide an in-app analytics opt-out or a setting that responds to browser Do Not Track signals. Browser privacy settings and Google's available controls can limit collection, but blocking storage may affect app features.

You can manage cookies and site storage in your browser. Google's Analytics opt-out browser add-on is another available control for supported browsers.

6. Videos and external links

Video previews request thumbnail images from YouTube before you select Play. Selecting Play loads a YouTube player using its privacy-enhanced embed domain. This can send device, network and viewing information to Google/YouTube; privacy-enhanced mode does not mean that no information is collected. Profile images supplied by sign-in providers may also load from external servers.

Social links, the physical-game shop and other external links take you to services with their own policies. Their collection and retention practices are outside this app's direct control.

7. Reports and screenshots

Opening Reports & ideas prepares a screenshot of the app for your review. You can remove it before sending. The screenshot is uploaded when you submit it with the report. The capture omits marked private areas and clears text-entry fields, but you should still review the preview for information you do not want to share.

Submitted diagnostics can include the page path, app version, viewport, connection status and relevant game or room context. Reports are linked to your account; they are not anonymous. Do not include passwords, full payment details or other unnecessary sensitive information.

8. How long information stays

Retention depends on the record and its purpose. Current app cleanup settings include:

Issue reports: 90 days; report screenshots: 30 days.
Completed-game reviews: up to 90 days, with a limit of the latest 12 per host. Final room-board snapshots: 24 hours. Persistent table identifiers and approved-member records are separate from these temporary records.
Saved games and profile information: kept while needed to provide the account and its features, subject to your deletion requests and applicable obligations. Hosts can close their rooms, which removes the saved games associated with those rooms.
Local device data: retained by your browser until replaced, cleared or removed by you or the browser. Some app records have their own age limits.

9. Your choices and privacy requests

You can edit profile details and marketing preferences in account settings, close rooms you host, and manage local data through your browser. To request access, correction, account closure or deletion of personal information, contact support. There is currently no automatic account-deletion control in the app.

Depending on where you live, you may have additional rights to obtain a copy of your information, restrict or object to processing, withdraw consent where processing relies on it, or complain to a privacy regulator. We may need to verify your identity and clarify the request. Requests are handled under applicable law; certain information may need to be retained for security, transactions, legal obligations or the rights of other participants.

The cleanup periods above describe app settings, not a guarantee of immediate removal from every backup, log or provider system. Support correspondence, payment records and provider-managed data may have different retention requirements.

10. Security and processing locations

We use authentication, access controls and other technical measures to protect information. No service or transmission can be guaranteed completely secure. Keep credentials private and contact us if you suspect a security problem.

Our providers may process information in the United States and other countries where they operate. Data-protection rules can differ between countries. Provider privacy information explains more about their processing and safeguards; contact us with questions about your information.

11. Children and minors

Account use must meet the age and consent requirements that apply where you live. The app does not currently provide age verification or a verified parental-consent process. Do not submit a child's personal information where the required legal consent has not been obtained.

If you believe a child has supplied personal information without the consent required by law, contact us so we can investigate and take appropriate action, including deletion where required.

12. Changes and contact

We will update this policy when our practices change and revise the date above. Where required, we will give additional notice or obtain consent before a material change applies.

For privacy questions or requests, contact Gray Wolf Games, LLC by email. Please do not include passwords or full payment-card details.