Privacy Policy

Effective Date and Last Updated: August 26, 2026

Introduction

Impostor Madness! is a multiplayer party game designed to be played with friends and family in three ways: locally on the same Wi-Fi network (LAN), online over the internet, or on a single device that everyone passes around (Single Device, also called pass and play), which needs no network or access to the internet at all.

This privacy policy explains what data the app collects, how it is used, and your rights regarding that data.

This policy accurately reflects the app's actual data practices as of the date above.

Your Consent & Control

We believe in giving you complete control over your data. When you first launch the app, you will be asked whether you want to share anonymous analytics and crash reports.

Before You Consent:

• All analytics and crash reporting are completely DISABLED
• No analytics or crash data is sent to any external servers
• The app functions fully without any online data collection

If You Accept:

• Anonymous crash reports and usage statistics are enabled
• This helps us improve the app and fix bugs faster
• You can revoke consent at any time in Settings

If You Decline:

Nothing changes. No data is collected, all features remain available, and you can change your mind later in Settings.

This consent mechanism is designed to comply with GDPR, CCPA, and other privacy regulations worldwide.

Data Stored Locally on Your Device

The following data is stored ONLY on your device (not on any server). Note that some of it (your display name and avatar) is also shared with the other players while you are in a game; see "Network Communication" for how.

• Display Name: The username you choose for gameplay. Stored in SharedPreferences on your device.
• Avatar Image (Optional): If you take a photo for your avatar, a small compressed copy of it is stored locally as base64-encoded data in SharedPreferences, and a larger copy is saved as an image file in the app's own private storage (used for the big avatars in Single Device games). Neither copy is stored on any server, and neither is added to your device's photo library. While you are in a Local or Online game the small copy is shared with the other players: in Local games over your network, and in Online games relayed through our cloud relay (see "Network Communication").
• Avatar Emoji (Optional): If you select an emoji as your avatar, it is stored locally.
• Custom Categories (Optional): If you create your own categories, the category name, its optional emoji icon, and the list of prompts you wrote are stored locally in SharedPreferences. They stay on your device. If you pick one of your custom categories for a game, or add some of them to a Random pool, those selected categories are sent to the other players so their app can display and play them, including a pooled category that never actually comes up (see "Data Shared During Gameplay"). In an Online game those selected categories pass through our relay on their way to the other players, and the relay does not keep them; we never store your categories, and their names and prompts are never included in analytics or crash reports.
• Single Device Players (Optional): In a Single Device (pass and play) game, everyone plays on one device, so that device holds the list of players: a name for each seat (only if you type one), and optionally an emoji or a photo for that seat. Photos are saved as image files in the app's own private storage, with a small copy in SharedPreferences for the smaller pictures in the game. This list is kept so your next game night starts pre-filled. It stays on that one device, is never sent to us or to any server, and is never added to your device's photo library. You can remove a seat, replace or clear its photo, or wipe the whole list with "Reset Players" in the app at any time. Because this list can include other people's names and photos, please only add someone with their agreement, and remove them when they no longer play with you.
• App Preferences: Theme setting (light/dark/system), sound effects toggle, haptics toggle, shake to reveal toggle, auto-dim screen toggle, animated background toggle, language preference, your last used game settings (kept separately for multiplayer games and Single Device games), whether you've seen the tutorial and other one-time tips and setup screens, and which in-app announcements you've dismissed. All stored locally via SharedPreferences.
• Premium Purchase Status and Receipt Data: If you purchase Premium Hosting, the purchase status and purchase receipt data (platform, receipt token, and product identifier) are stored locally using platform-secure storage for added security. The receipt data is retained to allow periodic re-verification of your purchase.
• Device Game Identifier: A random identifier created on your device the first time you open the app and stored in platform-secure storage. It is not derived from any device, hardware, or advertising identifier, and it does not identify you personally. It lets a game host recognize you when you rejoin a game and lets a host enforce removing ("kicking") a player from their game. While you play, it is shared only with the game host; the other players receive only a non-reversible hashed form of it, so a removal still applies if the host role passes to another player. It is never used for analytics and is not stored on any server (see "Network Communication" for how it travels during Online games).
• Online Games Counter: A count of how many Online games you have started, stored in platform-secure storage. It is used to apply the free-Online-games limit for players who have not purchased Premium Hosting. This count stays on your device and is never transmitted.
• Analytics Consent Record: Your consent choice for analytics and crash reporting (accepted or declined), the version of the consent prompt you responded to, and the timestamp of your response. Stored locally via SharedPreferences so we can honor your choice across app launches and prompt you again only if the policy materially changes.
• Active Room State: If you disconnect from a game, the app temporarily stores your room code and player information for up to 30 minutes to allow rejoining. After 30 minutes it can no longer be used to rejoin, and the app deletes it the next time it looks at it.
• Online Host Recovery Snapshot: If you are the host of an Online game, the app keeps a temporary copy of the current game's full state on your device (which includes the other players' display names and avatars, any custom category being played, and the round's hidden information) so the game can be recovered if the host's app is interrupted. This copy stays on your device only and is never sent to a server. It is used only to recover an interrupted game within a short window (about 45 seconds), after which it is no longer used, and is removed when the game ends or you leave.

Network Communication (Gameplay)

Impostor Madness! offers three ways to play together: Local games on the same Wi-Fi network, Online games over the internet, and Single Device games where everyone shares one device. In Local and Online games the information shared with the other players is the same either way (see "Data Shared During Gameplay" below); the difference is how it travels. Single Device games need no network or internet connection, so nothing is transmitted at all.

Single Device (Pass & Play) Games

In a Single Device game, everyone plays on one device that is passed around the table. There is no second device to talk to, so:

• The game itself makes no connection of any kind: no local network, no relay, no server. It works fully offline, in airplane mode, with no Wi-Fi and no mobile data. (The app's other online pieces are unaffected and unchanged, and none of them are part of a Single Device game: analytics and crash reporting only if you consented, the periodic purchase receipt check if you own Premium Hosting, and the App Store or Google Play, which the app asks at every launch whether the Premium Hosting product is available and which handles any purchase you make.)
• No names, photos, or prompts are transmitted anywhere. Apart from the anonymous analytics and crash reports noted above, if you consented to them, nothing about the game leaves the device.
• The list of players you set up (names, and optionally emoji or photos) is saved on that device so the next game night starts pre-filled. See "Single Device Players" under "Data Stored Locally" for what is kept and how to delete it.
• Because everyone at the table uses the same device, its camera can be pointed at the other players to give each seat a photo. Those photos are stored only in the app's private storage on that device and are never uploaded, shared, or added to your photo library. Please take them only with the agreement of the people in them.
• If you have consented to analytics, the same kind of anonymous gameplay statistics described below are recorded for these games too (for example how many players and rounds). No names, photos, or prompts are ever included.

Local (LAN) Games

Local games use a 4-character room code and operate entirely on your local network (LAN). No internet connection is required to play.

• Game communication uses WebSocket connections within your local network only
• The app uses Bonjour/mDNS for local device discovery on your Wi-Fi network or Personal Hotspot
• Game data is transmitted only to other players on your local network
• No gameplay data is sent to external servers, cloud services, or the internet

Online Games (Optional)

You can also create or join Online games that work over the internet, identified by a 6-character room code. When you play Online:

• Game data is relayed in real time through our cloud relay server (hosted on Cloudflare's global network) to the other players in your game, over an encrypted (TLS / wss://) connection.
• The relay only passes messages between the players. It does not store your data: information is held in memory only for the duration of the connection and is discarded when the game ends, or the room becomes idle or is abandoned. No game data is written to a database.
• As with any internet service, our relay (via Cloudflare) transiently sees your device's IP address and uses it solely to rate-limit connections and prevent abuse. It is held in memory only, briefly, and is never written to a database or otherwise stored.
• Because Cloudflare operates globally, this data may be routed through servers outside your country (see "International Data Transfers").
• Online play is entirely optional; Local games remain fully offline.

Note: Analytics and crash reporting use the internet only if you consent. Purchase receipt verification uses the internet separately from gameplay. See their respective sections below.

Data Shared During Gameplay

When playing a game with other devices (Local or Online), the following data is shared with the other players:

• Your chosen display name
• Your avatar (photo or emoji, if set)
• Your device platform (iOS or Android)
• Game actions (votes, guesses, game state)
• If the host selected any of their own custom categories, either as the category for the game or as entries in a Random pool, each of those categories' name, emoji icon, and prompts, so every player's app can display and play them. Only the categories the host selected for that game are sent, and a pooled one is sent even if it is never drawn; the rest of the host's library never leaves their device. If you are the host, this means the wording you wrote is shown to everyone in your game.

In Local games this data only reaches devices on your local Wi-Fi network or Personal Hotspot. In Online games it travels through the relay to the other players. In both cases it is exchanged only during active gameplay and is not stored persistently by the relay. The one thing kept on another player's device is the Online host's temporary recovery copy described under "Online Host Recovery Snapshot" above, which lives only on the host's device and only while the game is running.

Single Device (pass and play) games share nothing, because there is only one device and no connection at all.

In addition, a device game identifier (described under "Data Stored Locally on Your Device") is shared during gameplay so a host can recognize you when you rejoin and can enforce removing (kicking) a player. The game host receives this identifier; the other players receive only a non-reversible hashed form of it. In Online games it travels through the relay along with the rest of the game data, and the relay does not store it.

Deep Linking & Sharing

The app supports deep links (impostormadness://join?code=XXXX and https://impostorparty.com/join?code=XXXX) to let players join games easily. These links carry only a room code (4 characters for Local games, 6 for Online), and the web link also carries the language the game is set to, so the join page opens in that language. When sharing a game invitation, the app uses your device's built-in share sheet. No personal data is collected, transmitted, or tracked.

Photos in Single Device Games

Single Device (pass and play) games are played by everyone on one device, so that device can hold a photo for each player at the table. Because those photos can show people other than the device's owner, this section sets out exactly what happens to them.

• What the camera is used for: giving a seat a picture. As when taking your own avatar photo, you can switch between the front and back camera, so the device's owner can photograph the other players instead of handing it around for a selfie each time. A photo is entirely optional: a seat can use an emoji, or just a name, instead.
• Where the photo is stored: as an image file inside the app's own private storage on that device, with a smaller copy kept alongside the player list. Other apps cannot read it.
• Where it is not stored: the app never uploads it, never sends it to us, never sends it to any other device or player, and never adds it to your device's photo library. Single Device games use no network at all. The app also never requests access to your photo library, so it cannot see any photo you did not take inside the app yourself.
• How long it is kept: until you delete it. The player list is deliberately kept between sessions so your next game night starts pre-filled.
• How to delete it: remove that player, or replace or clear their photo, on the Single Device players screen; use "Reset Players" to wipe the whole list at once; or clear the app's data or uninstall the app to remove everything from your device. Removing a player or replacing a photo also deletes the stored image file that is no longer needed.
• Your responsibility: please photograph people only if they agree, and for children only with the agreement of a parent or guardian. Delete a photo once that person no longer plays with you. Because we never receive these photos, we cannot see them, and we cannot delete them for you.

Your own avatar photo works the same way, with one difference: in Local and Online games it is also shared with the other players in your game, as described in "Network Communication" above.

Data Sent Online (With Your Consent)

The following data is ONLY collected and sent to external servers if you explicitly consent when first launching the app. You can change your choice at any time in the app's Settings.

Crash Reports (Firebase Crashlytics)

When enabled, a report is sent when the app crashes, and also when it runs into an error it handles internally without crashing. Either way the report contains:

• Device model and operating system version
• App version and build number
• Crash stack trace (technical error information)
• Game context for debugging:
  • Room code (4- or 6-character game code; for Single Device games this is simply the word "single_device")
  • Game phase (e.g., "lobby", "voting")
  • Player count
  • Whether you are the host
  • Your player ID for that game session (assigned by the host or the relay when you connect, not personally identifiable)
  • Connection mode (whether you are hosting or joining, and whether the game is over your local network, online, or on a single device)
  • Premium status
  • App language/locale setting

No personal information, such as your name, avatar, location, or advertising identifiers, is ever included in crash reports.

Crash reports help us identify and fix bugs to improve the app for everyone. This data is processed by Google Firebase and is subject to Google's Privacy Policy.

Anonymous Usage Statistics (Firebase Analytics)

When enabled, the app collects completely anonymous, aggregated usage statistics. These help us understand how the app is used so we can improve it.

Automatic data collected by Firebase:

• Daily and monthly active user counts (aggregate numbers only)
• Session counts (how many times the app is opened)
• General device type and operating system (e.g., "iPhone", "Android 14")
• App version distribution
• Country-level geographic distribution (derived from IP, not precise location)

Custom events logged by the app:

• App opens and app settings preferences
• Game configuration choices (e.g., game mode, category, number of rounds)
• Gameplay patterns (e.g., rounds played, voting participation, game outcomes)
• Connection health (e.g., disconnections, host migrations)
• Premium feature interactions (e.g., upgrade screen views, purchase outcomes)
• Purchase events (currency code, price, and product identifier when you buy Premium Hosting)
• How players join games (e.g., via deep link or LAN)
• Whether a game was played over your local network, online, or on a single device, and the same kind of gameplay statistics for Single Device games (e.g., number of players, rounds played, how a round ended)
• Whether a game used one of your own custom categories, recorded only as the word "custom"
• Whether the in-game tutorial was played before a game started
• Progress through the first-open tutorial: which slide you reached, whether you opened one of the mode pages and which one, whether you opened the example card, which side of it you viewed and whether you revealed it, whether you cast the practice vote or let it time out and what the practice reveal showed, whether you finished it, skipped it, or left it unfinished, and whether you opened it on first launch or later from Settings

These events contain only general game data. No player names, identities, photos, custom category names, prompt text, or other personally identifiable information are ever included.

This data is:

• Completely anonymous - not linked to any individual user
• Aggregated - we see "142 users today", not individual identities
• Never used for advertising or sold to third parties
• Never used for personalization or user profiling

This anonymous data is processed by Google Firebase and is subject to Google's Privacy Policy.

Third-Party Services

The following third-party services may receive data from the app or website:

• Firebase Crashlytics (Google): Crash reporting, only if you consent. See "Crash Reports" above.
• Firebase Analytics (Google): Anonymous aggregate statistics, only if you consent. See "Anonymous Usage Statistics" above.
• Apple App Store / Google Play Store: Payment processing for the optional Premium Hosting purchase. See "In-App Purchases" below.
• impostorparty.com (our server): Purchase receipt verification when you buy or restore Premium Hosting, and periodic re-verification to confirm ongoing purchase validity. See "In-App Purchases" below.
• Google reCAPTCHA (Google): Spam protection on the website contact form. See "Contact Form" below for details on what data is collected.
• Cloudflare Turnstile (Cloudflare): Bot and abuse prevention on the website promo codes page. See "Promo Codes Page" below for details on what data is collected.
• Google Fonts (Google): Every page of the website loads an icon font stylesheet from Google's font service, so Google receives your IP address, user agent and the page address. It sets no cookies. The app itself does not do this: its fonts are bundled into the app.
• Formspree: Form submission processing for the website contact form. See "Contact Form" below.
• Cloudflare (Online game relay): When you play an Online game, our relay server (hosted on Cloudflare's global network) passes game data (display name, avatar, platform, game actions, and a device game identifier) between the players in real time. It does not store this data after the game ends. It transiently sees your IP address (as any internet service does) solely to rate-limit connections and prevent abuse, and does not store it. See "Network Communication" above.

On-Device Features

The app uses standard device capabilities, including local network discovery, sharing, camera (for QR codes and player photos), motion sensors (shake gesture), screen wake lock, and network status detection. These capabilities operate on your device and do not, in themselves, collect, store, or transmit any data to external servers. The one exception is an avatar photo you choose to set: in an Online game it is relayed to the other players through our cloud relay (and is never stored on a server), as described in "Network Communication" above.

Importing and exporting custom categories: You can back up or share your own categories as a file. Exporting writes a JSON file containing the categories you selected into the app's temporary storage and hands it to your device's standard share sheet, so you decide where it goes (for example a messaging app, email, or your files). Importing opens your device's standard document picker and reads only the single file you choose; the app never browses or reads any other file, and no storage permission is requested. Nothing about an import or export is sent to us.

Font assets are bundled with the app at build time; no network requests are made for fonts.

In-App Purchases

The app offers an optional one-time "Premium Hosting" in-app purchase that unlocks additional game modes, categories, and features. Payment is processed entirely through Apple's App Store or Google Play Store. We do not have access to your payment information.

Purchase Receipt Verification

When you buy or restore Premium Hosting, the app verifies the purchase by sending a request to our server (impostorparty.com) over HTTPS. The app also periodically re-verifies your purchase to confirm it remains valid. Each verification request contains:

• The platform identifier (Apple or Google)
• The purchase receipt token (a cryptographic token issued by Apple or Google to confirm the transaction)
• The product identifier ("premium_hosting")

The receipt token is used solely to confirm the purchase is legitimate and is not stored on our server after verification. The receipt data is stored locally on your device in platform-secure storage to enable periodic re-verification.

Purchase status is stored locally on your device using platform-secure storage, and can be restored via the app stores.

Device Permissions

The app requests the following permissions:

Required Permissions:

• Local Network Access: Required for hosting and joining Local (LAN) games on your Wi-Fi network or Personal Hotspot. It is essential for Local play. Online games and Single Device games do not use it.
• Internet Permission (Android): Required by the platform for network access. Used for LAN gameplay, online gameplay, purchase receipt verification, and sending crash reports/analytics to Firebase if you consent.

Optional Permissions:

• Camera: Used to scan QR codes for joining games, to take your own avatar photo, and, in Single Device (pass and play) games, to take a photo for each seat at the table. Whenever you take a photo in the app you can switch between the front and back camera; in a Single Device game that lets the device's owner photograph the other players rather than passing it around for a selfie each time, so only take those photos with the agreement of the people in them. You can use the app without granting camera access by entering room codes manually and using emoji avatars. Camera images are used only in-game: they are saved in the app's own private storage and are never added to your device's photo library, and the app never reads your photo library. In Local games they stay on your network; in an Online game your avatar photo is relayed to the other players through our cloud relay (it is not stored on a server); in Single Device games they never leave the device. See "Network Communication".
• Vibration: For haptic feedback during gameplay. Can be disabled in Settings.
• Motion Sensors (Accelerometer): Used for the shake-to-reveal gesture during gameplay rounds. This feature can be disabled in Settings. Sensor data is processed in real time on your device only and is never stored, recorded, or transmitted. No motion or movement data leaves your device.

Data Retention

• Preferences and avatar: Stored on your device indefinitely until you clear app data or uninstall.
• Custom categories: Stored on your device indefinitely until you delete them in the app, clear app data, or uninstall.
• Single Device player list and its photos: Stored on your device indefinitely until you remove those seats, clear their photos, use "Reset Players", clear app data, or uninstall. Removing a seat or replacing its photo deletes the stored image file it no longer needs.
• Secure-storage items (premium purchase data, device game identifier, Online games counter): Kept in platform-secure storage. On Android they are removed when you uninstall the app. On iOS they are kept in the system Keychain, which is not cleared by uninstalling, so the device game identifier and the Online games counter can survive a reinstall; they are removed when you erase the device. The premium purchase data is different: the app deletes it from the Keychain the first time it runs after a reinstall, and a previous purchase is brought back by restoring it through the App Store rather than from anything left on the device.
• Active room state: Can no longer be used to rejoin after 30 minutes, and the app deletes it the next time it looks at it. Leaving a game on purpose keeps it, so that you can rejoin; it is deleted when the game ends, when a host removes you from a game, when the room no longer exists, or when you dismiss the rejoin card on the home screen. Clearing app data or uninstalling removes it.
• Online host recovery snapshot: Stored only on the host's device while an Online game is in progress, and usable for recovery for a short window (about 45 seconds) if the app is interrupted; removed when the game ends or you leave.
• Exported category files: When you export custom categories, a copy is written to the app's temporary storage, which the operating system clears on its own schedule; the copy you send through the share sheet stays wherever you sent it.
• Game session data: Exists only during active gameplay and is not persisted.
• Analytics/crash data (if you consent): Retained by Google Firebase per their retention policies. Disable in Settings at any time to stop future collection.

Deleting Your Data

Impostor Madness! does not store your data on external servers (the Online game relay holds game data only briefly in memory during a game, then discards it). Almost all of your data is deleted by uninstalling the app or clearing app data in your device settings, which removes all preferences, avatar photos, custom categories, the Single Device player list and its photos, and other locally stored information. You can also delete these individually inside the app at any time: clear your avatar by tapping your player card on the home screen, delete a custom category from the custom categories screen, and remove a seat, clear its photo, or wipe the whole list with "Reset Players" on the Single Device players screen. On iOS, a small amount of data held in the system Keychain (the device game identifier and the Online games counter) can remain after uninstalling; this is removed when you erase the device. Your premium purchase record is different: the app deletes it from the Keychain the first time it runs after a reinstall, and a previous purchase is brought back by restoring it through the App Store rather than from anything left on the device.

If you previously opted in to analytics and crash reporting, that data is anonymous and cannot be linked back to you. You can disable future collection at any time in the app's Settings.

International Data Transfers

If you consent to analytics and crash reporting, the anonymous data described above is transmitted to Google Firebase servers. Google may process and store this data in data centers located outside your country of residence, including in the United States.

These transfers are governed by Google's data processing terms and their compliance with applicable data protection frameworks, including:

• EU-U.S. Data Privacy Framework (for transfers from the European Economic Area)
• Google's Standard Contractual Clauses (SCCs) for international transfers
• Google's Firebase Terms of Service and Data Processing Terms

If you play Online games, your game data (display name, avatar, platform, game actions, and a device game identifier) is relayed through Cloudflare's global network and may be processed on servers outside your country, independently of your analytics choice. The relay does not store this data. These transfers are covered by Cloudflare's data processing terms and Standard Contractual Clauses. If you do not consent to analytics and you play only Local or Single Device games, at most two things still leave your device. The app asks the App Store or Google Play at every launch whether the Premium Hosting product is available, and the store may answer from servers outside your country. If you own Premium Hosting, the purchase receipt check described under "In-App Purchases" also goes to our server on Cloudflare's global network and on to Apple or Google, so it too may be processed outside your country. Apart from those, nothing is transferred internationally; your game data remains on your local network and device.

Your Rights & Data Control

You have full control over your data:

• Right to withdraw consent: You have the right to withdraw your consent at any time by disabling analytics/crash reporting in the app's Settings
• Change your name and avatar at any time through the app
• Change or clear your avatar at any time by tapping your player card on the app's home screen
• Delete any custom category you created, at any time, from the categories screen
• Remove any Single Device player, clear their photo, or wipe the whole player list with "Reset Players"
• Delete all app data by uninstalling the app or clearing app data in your device settings
• Deny optional permissions (camera) without affecting core functionality

Since all personal data is stored locally on your device, there is no account to delete or data access request to make. Uninstalling the app removes your locally stored data, with the small exception noted under "Deleting Your Data" above.

If you previously consented to analytics, you can disable it in Settings to stop future data collection. Any analytics data already sent to Firebase is anonymous and aggregate, meaning it cannot be linked back to you individually and therefore cannot be individually identified or deleted.

Children's Privacy

Impostor Madness! is designed as a party game for friends and family. The app does not:

• Collect personal information from children
• Require account creation or registration
• Contain advertising
• Sell your data or share it with advertisers or data brokers (analytics/crash reports, if enabled, contain no personal information)

Impostor Madness! is intended for a general audience and is not directed to children under 13 (or the minimum age required in your country); younger children should only play with the involvement of a parent or guardian. When used in a supervised party setting, the game is suitable for players of all ages. Parents and guardians should ensure that display names, avatar photos, and any custom categories written by the players are appropriate, particularly for Online games, where they are transmitted over the internet to the other players in the game. In Single Device games, where one device holds a list of everyone playing, parents and guardians should also make sure that photos of other people, especially children, are only taken and kept with the agreement of those people or their guardian, and are removed from the list when they are no longer needed.

Security

• Sensitive data (premium purchase status, the device game identifier, and the Online games counter) is stored using platform-provided secure storage (the iOS Keychain, and on Android encrypted storage whose key is held in the Android Keystore); other preferences use standard on-device storage (SharedPreferences)
• Photos taken in the app are written to the app's own private storage, which other apps cannot read; they are never added to your device's photo library, and the app never requests access to your photo library
• Local games communicate within your local network via WebSocket; Online games use an encrypted (TLS / wss://) WebSocket connection to the relay
• Purchase receipt verification and analytics/crash data (if you consent) is transmitted securely via HTTPS
• The app does not require authentication or store sensitive credentials

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Significant changes to data collection practices (if any) will be communicated through app updates and release notes.

impostorparty.com Website

Our website at impostorparty.com provides information about the app, includes a contact form, and offers a promo codes page where we occasionally distribute free codes for the Premium Hosting in-app purchase.

Contact Form

The website contact form collects:

• Your name
• Your email address
• Your message

This data is processed by Formspree (formspree.io), a third-party form service, to deliver your message to us. We use this information only to respond to your inquiry. Formspree's privacy policy applies to data submitted through the contact form.

Spam Protection (Google reCAPTCHA)

The contact form uses Google reCAPTCHA v2 to protect against spam and automated abuse. It loads only when you submit the form, not when you simply visit the page. At that point reCAPTCHA may collect:

• Your IP address
• Cookies set by Google (including _GRECAPTCHA and other Google cookies)
• Browser and device information (user agent, screen resolution, browser plugins)
• Mouse movements and interaction patterns on the page

This data is sent to Google to determine whether you are a human visitor. It is processed under Google's Privacy Policy and Terms of Service.

reCAPTCHA is loaded only on the contact page, and only when you submit the form. It is not present on any other page of the website.

Cookies & Local Storage

The website does not use analytics or tracking scripts of its own. Two pages load third-party verification widgets that may set cookies:

• The contact page loads Google reCAPTCHA when you submit the form, which may set Google cookies (see "Spam Protection" above).
• The promo codes page loads Cloudflare Turnstile, which may set Cloudflare cookies, and our server sets a first-party cookie imp_promo_id (see "Promo Codes Page" below).

These cookies are used solely for spam and abuse prevention.

The only data we store locally on every page is your language preference (English or Greek) in your browser's local storage, to remember your choice across visits. This is not personal data and is never transmitted.

No cookies or tracking scripts are loaded on any other page of the website. Every page does load a small icon font stylesheet from Google Fonts (fonts.googleapis.com, with the font files themselves from fonts.gstatic.com), which means Google receives your IP address, browser user agent and the page you are viewing, as it does for any site that uses its font service. Google Fonts sets no cookies and we send it nothing else about you.

Promo Codes Page

The promo codes page at impostorparty.com/promo-codes distributes a limited number of free promo codes for the Premium Hosting in-app purchase. To prevent automated abuse, the page uses Cloudflare Turnstile in invisible mode.

When you visit the promo codes page, Cloudflare Turnstile may collect:

• Your IP address
• Browser and device information (user agent, language, screen attributes)
• Limited interaction signals such as timing and pointer movement patterns

This data is processed by Cloudflare to determine whether you are a human visitor. It is handled under Cloudflare's Privacy Policy and the Cloudflare Turnstile Privacy Addendum.

To enforce our code-distribution rules, our server also stores:

• A first-party cookie named imp_promo_id containing a random opaque identifier (no personal data). The cookie hash is used to ensure a single browser can only claim one code per promotional campaign (each new campaign is a fresh slate).
• A salted SHA-256 hash of your IP address (for IPv6, collapsed to the /64 subnet before hashing). The IP hash is used to cap how many codes can be redeemed from the same network within a single promotional campaign (so a household or small group of friends can each claim while still preventing automated abuse). Your raw IP address is never stored.

Additionally, when you successfully claim a code, your browser stores a copy of that code in its local storage (imp_promo_claim). This is a convenience so we can re-display the code if you return to the page later, even if you cleared cookies. The local storage entry lives entirely in your browser and is never transmitted to us.

This data is used solely for the above fraud-prevention purposes and is not shared with any third party. The salted hashes associated with a claimed code are kept with that campaign's records so we can continue to enforce the one-code-per-person and per-network limits; they are not personal data and cannot be reversed to recover your IP address or identity. Our internal log of redemption attempts is kept while any promo codes remain available; once all distributed codes have been claimed and at least 7 days have passed since the most recent claim, it becomes eligible for deletion and is cleared automatically on a best-effort basis thereafter. Turnstile is loaded only on the promo codes page.

Contact

If you have questions about this privacy policy, our terms of use, the app's data practices, wish to exercise your data rights, or would like to report a bug, please reach out:

• Contact Form: impostorparty.com/contact
• General Inquiries: [email protected]
• Privacy Inquiries: [email protected]
  • For GDPR, CCPA, or other privacy-related requests. We will respond within 30 days.

Impostor Madness! is developed and operated by Andreas Neofytou.

Summary

Your privacy is important to us.
Enjoy the game!

Back to Top