Privacy

Poison the Data — effective September 2026

Poison the Data is a party game. It is built to collect as little about you as possible while still letting a table of people play together.

No accounts

There is no sign-up, no login, no email, no password. You type a name for the round and pick a cartoon avatar. That's it.

What we collect while you play

• Your display name, avatar, answers, and votes. These are shared with everyone in your room — that's the game. Answers are also sent to Anthropic's Claude API so the AI bots can react to them. We don't attach your name or any identifier to those requests.
• Feedback and bug reports you choose to send from the ☰ menu, along with the room code and your display name.
• Connection details. Our server sees your IP address and the network region you connected from. We use them to keep the service running, to spot abuse, and to see roughly where games are being played. They are visible only to the game's operator and never to other players.
• Anonymous game statistics — how many rooms were created, how many questions were played, which bots came up. Nothing in these counts identifies a person.

What stays on your device

Your name, avatar, sound and timer preferences, and a random device ID (so you can reconnect if your phone sleeps mid-game) are saved in your browser or the app's local storage. Clearing site data or uninstalling the app removes them.

How long we keep things

Rooms and everything said in them are deleted a few hours after the game ends. Feedback and bug reports are kept until they've been read and acted on. Server logs, which can include IP addresses, are kept for up to 30 days.

What we don't do

• No advertising and no ad networks. (The "ads" in the game are jokes we drew ourselves.)
• No third-party analytics or tracking SDKs.
• We never sell or share your information with anyone for marketing.

Third parties

• Anthropic processes the answers players write so the bots can respond. See Anthropic's privacy policy.
• Fly.io hosts the game server.
• Google Fonts serves the typefaces, which means Google receives your IP address when the page loads fonts.
• Google Play (Android) handles the app purchase. We never see your payment details.

Kids

Poison the Data is meant for teens and adults. It is not directed at children under 13 and we don't knowingly collect information from them.

Changes and contact

If this policy changes, the new version will be posted here with a new date. Questions: mike@mikenewbry.com.