Privacy policy

The short version

• You can play without an account. We do not ask for your name, email or phone number.
• We create a random installation ID so the game can keep your seat, results and settings.
• We collect basic, first-party usage events (for example "a game started") to keep the games working and make them better.
• We do not show ads, we do not track you across other apps or websites, and we do not sell or share your data for advertising.
• You can delete your data at any time from the app, or by email.

Who we are

Nightfun (the iPhone app and the browser guest pages at https://party.mobiforge.dev) is run by Asynk Tech LTD, 167–169 Great Portland Street, London W1W 5PF, United Kingdom ("we", "us"). We are the controller of the personal data described here.

Contact for anything about privacy: support@asynk.tech.

What we collect and why

Installation ID

A random ID created on your phone or browser the first time you play. It stays on your device. Our servers keep only a one-way hash of it, linked to a random player ID. Why: to recognise your device, keep your seat in a room and protect the service.

Device and app details

Platform (iOS or web), app build, the date we first and last saw the installation, and how you arrived (for example "opened from an invite link"). Why: to run the right version of the games and fix problems.

Sign-in tokens

Short-lived access tokens (15 minutes) and a refresh token (valid up to 60 days, replaced each time it is used). We store only a hash of the refresh token. Why: to keep your session secure without a password.

Language and country

The language you choose in the app and the two-letter region code from your phone's region setting (for example "LB"). We do not use GPS and we do not look up your location. Why: to show content in your language and the right packs for your region.

Nickname

The nickname you type when you play (up to 24 characters). Other players in the same game see it. Why: to show who is playing and who won.

Gameplay data

Rooms you create or join, the game and pack, your moves (votes, card choices, answers you pick), scores, results and timestamps. Room codes are stored encrypted. Why: the server runs every game, so it needs this to play fairly, reconnect you and show results.

Usage events

First-party events such as app opened, game screen viewed, start tapped and game completed, with the game, mode, pack, app build, platform, country, language and your random player ID. Events never contain your nickname or anything you type. Why: to understand which games people play, find bugs and improve the app.

Experiment group

If we test two versions of a screen, we record which version your player ID got. Why: to compare the versions fairly.

IP address and server logs

Our servers see your IP address when your device connects. We use it for rate limits and abuse protection (kept in memory for minutes to one hour) and our web server writes it to access logs that we keep for a short period, normally up to 14 days. Our application logs do not store IP addresses, tokens, room codes or player text.

Support emails

If you email us, we get your email address, your message and anything you add (for example your installation ID). Why: to answer you.

Camera. The app uses the camera only when you choose to scan a room QR code. The image is read on your phone and is never sent to us or stored.

Purchases. This version of Nightfun has no purchases. If we add optional purchases later, Apple will process the payment and we will receive a transaction record, never your card details. We will update this policy before that happens.

Sign-in. This version has no sign-in. If we add optional sign-in later (for example to keep purchases on a new phone), we will update this policy first.

Legal bases

• To provide the games you ask for (contract): installation ID, tokens, nickname, gameplay data.
• Legitimate interests in keeping the service secure, fixing problems and improving the games with first-party, low-detail statistics: device details, usage events, experiment group, IP address in logs.
• Your consent, where the law requires it. You can withdraw consent by contacting us or by deleting your data.

No ads, no tracking

Nightfun has no advertising and no third-party analytics or advertising SDKs. We do not link data from Nightfun with data from other companies' apps or websites for advertising, and we do not share it with data brokers. In Apple's words, the app does not "track" you. The browser pages use no cookies; they keep your installation ID, seat and language in your browser's local storage.

What other players see

In a room, other players see your nickname, whether you are connected, and what the game reveals (for example votes after a round, scores and winners). Do not put personal information in your nickname. The host can remove a player from the room. There is no chat and no private messaging in Nightfun.

Who processes the data

We do not sell personal data. We use these service providers, under contracts that let them use the data only for us:

Hetzner Online GmbH

Servers in Helsinki, Finland (EU). Our database, game servers and logs run there.

Vercel Inc.

Hosts our internal admin website (staff only). It shows data from our servers to authorised staff and does not store player data itself.

Functional Software Inc. (Sentry)

Server error reports, only when error reporting is turned on. We remove request headers, bodies, cookies and query strings before a report leaves our server, so it contains no tokens, room codes or player text.

Apple

Delivers the app through the App Store under Apple's own privacy policy.

We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or merger of our business (the buyer would have to respect this policy).

Where the data is

We store player data in the European Union (Finland). Some providers listed above are in the United States. When data goes outside the EU, we rely on safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

Usage events

Raw events are deleted automatically after 180 days. We keep daily totals (counts with no player ID) longer to see trends.

Rejected events

Deleted after 30 days.

Rooms

A room closes when the host ends it, or 12 hours after it was created or its last game started. Room passes expire after 24 hours. Closed rooms are kept with the game results.

Refresh tokens

Expire after 60 days without use.

Server access logs

Normally up to 14 days.

Player record, game results and nicknames

Until you delete your data, or until we no longer need them to run the service.

Support emails

As long as needed to help you, then up to 2 years for our records.

Your choices and rights

• Delete your data in the app: open Settings, then Account, then Delete account and data. See Delete your data.
• Delete by email: write to support@asynk.tech with your installation ID (shown in Settings).
• Reset in the browser: clear this site's data in your browser to remove the browser installation ID.
• Depending on where you live, you can also ask for a copy of your data, a correction, a restriction, or object to our processing. You can complain to your local data protection authority.

We answer requests within 30 days. Because we do not ask who you are, we may need your installation ID to find your data.

Children

Nightfun is not directed to children under 13 and we do not knowingly collect personal data from them. If you believe a child under 13 has used Nightfun, contact us at support@asynk.tech and we will delete the data.

Security

All connections use HTTPS. We store hashes instead of raw installation IDs and refresh tokens, encrypt room codes, limit staff access with multi-factor sign-in and keep an audit log of admin actions. No system is perfectly secure, so we also keep the data we collect small.

Changes

If we change this policy, we will update the date on this page. If a change is important (for example a new type of data), we will tell you in the app before it takes effect.