Last updated: October 3, 2026 (analytics with consent and AdSense). In short: we keep as little as possible and don't ask you to sign up.
What stays in your browser
Nickname, color, your Goob's look and sound on/off: saved in your own browser (localStorage) so you don't have to pick them again.
Your analytics choice (accept or decline) is also saved in your browser.
A random tab ID and a secret key (sessionStorage): they let you get back into the same room if your internet drops, and stop anyone from pretending to be you. The server keeps only a cryptographic digest (hash) of the key, never the key itself.
What goes through the server
While a room exists, the server keeps the nickname, color, room settings and game state. The room is deleted a few minutes after everyone leaves.
A private room's password is stored only as a cryptographic digest (hash), never as plain text.
The Infiltrator's chat messages only exist during the game and are not saved.
The server runs on Cloudflare, which may log technical access data (such as IP address) for security and operation.
The site's fonts come from Google Fonts. To deliver them, Google receives the visitor's IP address and technical browser data, which may be processed outside Brazil, under Google's privacy policy.
Analytics (PostHog), only if you accept
If you click Accept on the cookie notice, we use PostHog (servers in the United States) to understand how the site is used: page views, clicks, games opened, rooms created, games started and finished, and anonymous session recordings to find usability problems. In recordings, all text fields are masked (typed nicknames, clues, passwords and chat), the invite key is removed from addresses before sending, and the browser console is not recorded. We don't build a profile with your name and don't use this for ads. If you decline, nothing is loaded or sent. Legal basis: consent (LGPD, art. 7, I).
Ads
The site is under review by Google AdSense. Until there are real ads, the ad slots only show our own games ("From Goobie"). When ads are turned on, this page will be updated with Google's consent options.
Children
The games are for all ages, but chat and public rooms are open: we recommend that minors play in private rooms with people they know.
Contact
Questions or requests about your data: open an issue in the project's repository or contact whoever maintains the site.