Privacy

Stomper World Waffle is a small board a group of friends uses to pick numbers for a roulette-wheel prize draw. This page says what it stores about you, who can see it, and how to have it removed. Plain words, no small print.

What the board stores

• Your phone's identity. When you open the board it is given an anonymous ID so your numbers stay yours. No account is needed. This ID lives in your browser; clearing site data gives you a new one.
• What you type in. The name you pick (it is locked to your phone after the first pick, and kept on the board's list of names in use, so nobody else can take it), the numbers you hold, your messages in the lobby and the questions tab, any photo you attach to a question, and your reactions.
• If you choose to sign in. Signing in is optional — unless the host asks everyone to sign in to play; then, until you do, you can watch the board and read the chat, but not take a number, post or save an address. With your phone number, we text you a one-time code to confirm the number is yours. The number is kept by Firebase Authentication and in a private record only you and the host can read: other players never see it, the host sees it so they know who is who, and it is never shared with anyone else. With an email address, we email you a one-time code from the board's own address, codes@stomperworldwaffle.com, to confirm the address is yours (Resend, the service that delivers it, receives your address and that email to send it); the address is kept by Firebase Authentication and in that same private record (the board keeps only a scrambled form of it, of the code, and for a day of the internet connection it was asked from, to stop anyone flooding your inbox or guessing). With Facebook or Google we receive your name, email address and profile picture — nothing else: never your friends, posts or anything on your account. The host sees the name on your Facebook or Google account beside the name you chose for the board, so they know who is who; other players only ever see the name you chose. All of this is used only to keep the same identity across your devices and browsers. Standard text message rates may apply.
• A shipping address, if you give one. Optional, and only the host can see it — never other players, never on the board. It is used to post a prize to a winner. You can change or remove it any time from your account card.
• Your standing. Games played, numbers taken, wins, streaks and the badges those earn. Your name and these totals appear on the Leaders tab, which every player can see.
• That you are here. While the board is open, your name shows in the lobby's "who's here" list. The host can also see which browser you are using and which version of the board you have, to check an update has reached everyone — other players cannot.
• What you do on the board. The host's page keeps a log of the night — who opened the board and in which browser, who held or released which number, and when — so the host can run the game and sort out disputes. Players do not see this log.
• If something goes wrong on your phone. A short error report — what failed, which screen you were on, which browser, and which version of the board you had — is stored so the host can fix it. It carries no name, chat message or address.

Where it lives and who else is involved

Everything is stored with Google Firebase (Firestore and Firebase Authentication), on Google's servers. There are no adverts, no analytics and no tracking scripts, and nothing is sold or shared with anyone outside the game, apart from Resend delivering an email code you ask for. The board is run by the host — the person who gave you the link — not by a company.

How long it is kept

Past games are kept as the history of the standings. If you want your name, address, messages or standing removed, ask the host and they will do it; removing your address yourself takes one tap on your account card.

Deleting your data

To have everything about you removed — your player record, how you signed in (your Facebook or Google name and email, or your phone number), your address and your standing — ask the host, in the lobby chat or however they sent you the link (on Facebook, a message to them). They remove you from the board and delete those records — the sign-in itself too, from Firebase Authentication — usually within a few days, and confirm when it is done. You can also sign out of the board under Me at any time, and remove the app from your Facebook account under Facebook → Settings → Apps and websites.

Questions

Ask the host — in the lobby chat, or however they sent you the link. They are the only person with access to anything that is not already on the board for everyone.