隐私政策
Last updated: October 11, 2026
本文件仅提供英文版本。
This policy explains what the 20 Questions: Guess the Word website and apps (“AI Charades”, “we”) collect, why, and the choices you have. We collect as little as we can to run the game.
What we collect
- Guest play. When you play without an account we create an anonymous profile, kept in a session cookie, with your games, free-game count, streak, stats and settings (language, time zone, sound).
- Account. If you sign in with Google, Apple or an email link we store your email address and, when the provider shares them, your name and profile picture.
- Game content. The questions and guesses you type, the secret word and the referee’s answers.
- Purchases. Subscriptions are handled by RevenueCat and its payment processor (Stripe on the web, Apple or Google in the apps). We receive your subscription status, never your card details.
- Technical data. IP address (for rate limiting and abuse prevention), browser and device type, and error reports without personal content.
How we use it
- To run the game: pick words, answer your questions, keep score, streaks and limits.
- To sync your progress and Pro subscription across the web and the apps when you sign in.
- To prevent abuse and keep the service secure and working.
- To show ads to players without Pro, and to send the daily-word email only if you turn it on.
AI providers
Your questions, together with the secret word and the conversation so far, are sent to AI providers (such as xAI, Google Gemini and Groq) to produce the referee’s answers, hints and facts. We don’t send your name or email. Please don’t type personal information into questions.
Advertising and cookies
Players without Pro may see ads from Google AdSense. Google and its partners may use cookies to show and measure ads. In the EEA, the UK and Switzerland we ask for your consent through Google’s consent message first; you can change your choice at any time from the privacy link it shows. We also use a strictly necessary session cookie to keep you signed in and remember your guest progress, and local storage for preferences such as your chosen categories. See how Google uses information from sites that use its services.
Service providers
We use hosting and infrastructure providers (Hetzner in Germany for our servers and database, Cloudflare for network delivery and backups), RevenueCat for subscriptions, Resend for sign-in emails, Sentry for error reports, Google AdSense for ads and the AI providers above. They process data only to provide their service to us.
How long we keep it
Account data stays until you delete your account. Guest profiles that are no longer used may be deleted. Error reports and logs are kept for a limited time.
Your choices and rights
- Delete your account and its data at any time from the Account page (“Delete my account”).
- Turn emails on or off in your Account settings.
- Ask for a copy of your data, a correction or deletion, or object to processing by writing to [email protected]. Depending on where you live (for example under the GDPR or CCPA) you may also complain to your data protection authority.
Children
The game is a general-audience word game. It is not directed at children under 13 (or the minimum age in your country), and we don’t knowingly collect their personal data.
Changes
We may update this policy; the date above shows the latest version. Big changes will be announced in the game.