Last updated: May 2026
Ember & Ace ("we", "us", "the platform") is committed to handling your information with care. This Privacy Policy explains what data we collect, how we use it, and your rights.
1. What We Collect
On your device (localStorage): We store a flag confirming you have passed the age gate, a storage consent record, your sound preference, and small flags tracking which game help panels you have seen. This data never leaves your device and we have no access to it.
In your browser session (sessionStorage): If you choose to add player names for turn tracking in games like Hot Seat or Truth or Dare, those names are stored in your browser's session storage. They are never sent to our servers and are automatically cleared when you close the tab.
On our servers (Supabase): Games that support multiplayer rooms temporarily store the room code, the game ID, player display names entered in the lobby, and transient gameplay state needed to sync devices. Pass-and-play games do not create any server records.
We do not collect real names, email addresses, phone numbers, or any account information. Display names are whatever you type into the game lobby. We do not use cookies, tracking pixels, third-party analytics, or advertising networks.
2. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area, United Kingdom, or Switzerland, we process your data under the following legal bases:
- Consent for localStorage usage recorded via our storage consent banner.
- Legitimate interest for multiplayer room management, age verification, and platform security.
3. How We Use It
Multiplayer room data is used solely to allow players to join each other's game sessions. It is not sold, shared for marketing, or used to build behavioral profiles.
4. Data Retention
Multiplayer room records are automatically deleted within 48 hours of last activity. SessionStorage player rosters are cleared when you close the browser tab. Your on-device localStorage data persists until you clear your browser data.
5. International Transfers
Our servers are hosted in the United States via Supabase and Vercel. If you are located outside the US, your multiplayer room data may be transferred to and processed in the US. These transfers are covered by Standard Contractual Clauses as part of our Data Processing Agreements with our subprocessors.
6. Children's Privacy
This platform is strictly for adults 18 and older. We do not knowingly collect any information from anyone under 18. If you believe a minor has accessed this platform, contact hello@ember-ace.com.
7. Your Rights
Depending on your location, you may have the following rights regarding your data:
- Access: On-device data is accessible through your browser's developer tools. No server-side personal data is tied to your identity.
- Erasure: Clear your browser's localStorage or use Clear Site Data. Multiplayer room data is automatically purged within 48 hours. To request early deletion, contact us with your room code.
- Portability: Not applicable because no server-side personal profile is stored beyond transient room state.
- Restriction / Objection: Deny storage consent via the consent banner. The platform falls back to sessionStorage only.
- Withdraw Consent: Clear the
ea_storage_consentkey from localStorage at any time.
If you are located in the EU/EEA or UK, you may lodge a complaint with your local supervisory authority. A directory is available at edpb.europa.eu.
8. Third-Party Processors
We use Supabase as our database provider for multiplayer room data. See supabase.com/privacy.
We use Vercel for application hosting. Vercel may process request metadata such as IP address and user-agent as part of normal web serving. See vercel.com/privacy.
9. EU Representative
Our EU representative for GDPR inquiries can be reached at: [To be appointed — see company/article-30-records.md]
10. Changes to This Policy
We may update this policy as the platform evolves. Material changes will be noted on this page with a revised date.
11. Contact
Questions about privacy: hello@ember-ace.com