Privacy

Wolf Tribunal stores the information needed to run quiz rooms, accounts, public rankings and purchases.

Game data

Room nicknames, submitted answers and jury explanations are stored and visible to people with the room link when results are revealed. Do not include private or sensitive information in game replies. Ranked nicknames and scores are public after you agree to publish them.

Original games save progress using separate browser cookies for each game, lasting up to one year. Their leaderboards are public. Movie and football checklist submissions also publish your chosen items, and completed team entries publish your XI and captain. Submit only a nickname and picks you are happy to share. Older records on the earlier game websites have not been transferred here.

Question freshness stores a hashed host-browser identifier and the question identifiers already drawn. New Truth rooms store a snapshot of their selected prompts so the game remains stable. Private Packs store a group name and invitation code, hashed membership identifiers, nicknames and completed Game Night scores. Members can see the group table and results. Joining a grouped Game Night joins its Pack, as shown in the lobby. Shareable result images are generated in your browser, contain displayed nicknames and scores, and are only shared when you choose to do so.

Published opinion polls store your chosen option with a hashed voting token. A necessary secure cookie, set when you vote, remembers that browser for up to 30 days. Public results show option totals, not individual voting records. Clearing the cookie can allow another vote, so results are browser-based counts rather than verified unique people.

Sign-in

Google sign-in, when configured, supplies a verified account identifier and email. The email is kept private and is used to identify your account. Existing ChatGPT sign-in may remain available during migration. Secure cookies remember your signed-in session; game cookies identify your room seat.

Admin accounts

Administrators sign in through Google. We store their approved email address, assigned permissions, access status and last-login timestamp. Secure session cookies can last up to 30 days; sign-out and access revocation invalidate sessions. We do not create admin passwords. The owner can add or remove admins, and an activity log records account and content changes.

Owner actions in the AI agents workspace can require an authenticator code in addition to Google sign-in. Authenticator secrets are encrypted, recovery codes and short-lived verification sessions are stored as hashes, and a necessary secure verification cookie lasts up to 15 minutes. Codes and secrets are not included in activity logs.

Payments

Stripe handles card and payment details. Wolf Tribunal stores payment references, amount, status and the room unlocked. It does not store your card number.

Quiz Night Passes use a separate secure browser cookie. We store a hash of that browser identifier, payment status, activation and expiry times, and the rooms started with a pass. Private recovery codes are stored as hashes and can transfer the remaining pass to another browser. Optional tip records contain payment references, amount and status; they grant no game access.

Traffic measurement

We count page loads, broad referral sources and aggregate feature interactions without storing visitor IP addresses, advertising identifiers or a cross-site tracking cookie in these statistics. Optional browser counts honour the choice above, Do Not Track and Global Privacy Control. Repeat actions are counted; these are not unique visitor or individual conversion measurements. Campaign labels in links also let us compare landing-page loads, new group quiz rooms, started and completed games, returning host browsers, checkout attempts and confirmed purchases. The label is stored with the room; it is not an advertising identifier. We do not install Google Ads or Meta tracking pixels. These counts are approximate and may include bots and reloads. Registration totals come from saved accounts; Google search data, when connected, is visible only to authorised dashboard users.

Approved campaign links may carry a first-party referral reference. When you follow that link into checkout, we can associate the campaign with the existing payment order reference to estimate which content contributed to purchases. This adds no tracking cookie, does not establish causality, and does not share private game answers with the campaign.

To limit automated Pack creation and joining, we also store rate-limit keys derived from hashed browser identifiers and, when supplied by the hosting provider, hashed IP addresses. These keys carry expiry times and are not used for advertising. Raw IP addresses are not stored in these records.

Advertising and consent

When advertising is enabled, selected public quiz browsing pages can display ads supplied by Google AdSense. We check your Quiz Night Pass with our server before loading advertising. The check does not start the pass clock. We do not load advertising during games, in private answer views, or on admin, sign-in, payment and support pages.

Our initial advertising setup uses Google’s consent management platform for visitors in the UK, EEA and Switzerland and requests non-personalised ads only after the required consent and permitted purposes are known. If consent is declined, unavailable or outside this initial coverage, no ad unit is requested. Non-personalised ads can still use cookies for functions such as fraud prevention, frequency control and aggregated reporting.

On eligible pages, Google’s scripts can load to show the consent message while ad requests remain paused. Google says this paused mode can read existing Google-domain cookies but sets no new cookies; data associated with existing cookies is not used for ad serving or measurement. Once you allow advertising, Google and permitted advertising partners may process information such as your IP address, browser details, the public page you visit and advertising cookies. We do not send private game answers, room codes, player names or payment details as advertising targeting data. See how Google uses information from partner sites.

Use Ad privacy choices to reopen Google’s consent message when advertising has been configured. This action may load Google’s consent tools even if you have an ad-free pass, but does not request ads. Paid hosts do not otherwise load our advertising scripts while their pass is ready or active. Consent choices are handled by Google’s certified message; our own traffic counters remain separate.

Sponsorship enquiries and commercial links

When you send an advertising enquiry, we store your contact details, business name, requested placement and message to review and respond to that request. Sending an enquiry does not subscribe you to marketing or purchase a placement. The owner can close or delete enquiries. Use the support form to request deletion of your contact information.

Approved commercial links are labelled Advertisement or Affiliate advertisement. We record aggregate daily placement loads and outbound clicks, without associating them with your account or answers. Following an external link takes you to the merchant’s website, whose privacy and cookie choices apply. An outbound click is not a sale or a verified commission.

Public enquiry and measurement endpoints may use a keyed digest of the address supplied by our hosting provider for short-lived abuse controls. The underlying address is not saved in those records, and the keys are deleted after their expiry. They are separate from analytics and advertising.

Editorial and automation records

We store content drafts, source links, review decisions, revisions, approved publication times and operational run logs. Drafts remain private until reviewed and published. Social captions and scripts are drafts; they are not sent to a social platform by saving them. Operational records identify the authorised admin or connected owner who made a change.

The agent workspace stores job events, draft approvals, declared execution costs and references to unsent external drafts. Marketing templates do not automatically enrol players or customers into an email list. A suppression list stores a hash of an email address when it must not be contacted; addresses are omitted from operational logs. No email is automatically sent by the Phase 1 agent system.

Your choices

You can stop playing at any time and clear browser cookies to remove device sessions. Clearing cookies does not delete stored game records or a payment. For an account or data request, use the support form linked from the Terms page.