Privacy Policy
Effective Date: August 31, 2026
Last Updated: August 31, 2026
This Privacy Policy explains how Guessling ("Guessling," "we," "us," or "our") collects, uses, and discloses information when you use the Guessling website and guessing-game platform (the "Service").
1. Information We Collect
1.1 Information from Hosts (account holders)
- Email address — used for magic-link sign-in and account-related communication. We do not collect or store passwords.
- Game data you create — game name, theme, configured fields, uploaded background photos, and the "actual answers" you enter at reveal time.
- Payment status — whether your account is unlocked. Payment processing itself (including your card number) is handled entirely by Stripe; we do not receive or store your full card number. We do receive confirmation that a payment succeeded and a Stripe-generated reference.
- Session cookie — a single first-party, HttpOnly cookie (
shower_session) that keeps you signed in for up to 30 days. It contains only a random session identifier, not your email or password.
1.2 Information from Guests
- Guess content — whatever a Host has configured their game to collect (for example, a guessed date, weight, length, gender, or name), plus any name or nickname a guest chooses to enter to identify their guess on the leaderboard.
- Guests do not create accounts and are not asked for an email address, password, or payment information by Guessling.
- We collect standard technical information for rate-limiting and abuse prevention, such as IP address, tied to guess submissions.
1.3 Information we do not collect
We do not run third-party advertising trackers or analytics scripts on the Service. We do not sell personal information.
2. How We Use Information
We use the information above to:
- Operate the Service (creating games, displaying guesses, running the reveal/leaderboard, enforcing free-guess limits);
- Send magic-link sign-in emails and essential account/service communications (e.g., payment confirmation);
- Prevent abuse and enforce rate limits;
- Provide customer support;
- Comply with legal obligations.
We do not use guest guesses or Host game content to train machine learning models, and we do not share it with third parties for their own marketing purposes.
3. How We Share Information
We share information only in these circumstances:
- Service providers. With vendors who help us run the Service, currently: an SMTP/email delivery provider (to send sign-in links), Stripe (to process payments), and our hosting/database provider. Each only receives what it needs to perform its function.
- Other users, by design. A game's guesses and, after reveal, the leaderboard are visible to anyone with the play or leaderboard link — that link-sharing model is core to how the Service works. Hosts should be mindful of what they enable guests to enter and who they share links with.
- Legal requirements. If required by law, subpoena, or to protect the rights, safety, or property of Guessling or others.
- Business transfers. In connection with a merger, acquisition, or conversion of the business (such as our planned conversion from sole proprietorship to an LLC), subject to this Policy or a successor policy with equivalent protections.
We do not sell your personal information, and we have not sold personal information in the preceding 12 months.
4. Data Retention
- Guest guesses are retained as long as the associated game exists in the system, so the Host can view, score, and display them. A Host can delete a game at any time, which deletes its guesses.
- Host account and game data are retained until the Host deletes their game(s) or requests account deletion.
- Background photo uploads are retained until removed by the Host or the game is deleted.
- Session cookies expire automatically after 30 days of inactivity or on sign-out.
- Magic-link tokens expire after 15 minutes whether or not used.
5. Your Choices and Rights
5.1 Hosts can delete individual games (which deletes associated guesses) or request full account deletion by emailing support@guessling.com.
5.2 Guests who want a specific guess removed can ask the Host who owns that game, or contact support@guessling.com and we will assist where we're able to identify the relevant record.
5.3 Requesting your data. Depending on where you live, you may have rights such as confirming what personal data we hold about you, accessing or correcting it, deleting it, or obtaining a portable copy. To exercise any of these, email support@guessling.com and we'll do our best to accommodate the request regardless of where you're located. We will not discriminate against you for making a request.
6. Children's Privacy
Guessling is not directed to children under 13, and Host accounts require the account holder to be 18 or older. Guest guess forms are designed for general shower-guest use (typically adults) and do not knowingly collect personal information from children under 13 in a way that would trigger COPPA obligations. If you believe a child under 13 has submitted personal information to us, contact support@guessling.com and we will delete it.
7. Data Security
We use industry-standard measures appropriate to the sensitivity of the data involved, including HttpOnly session cookies, Secure cookies in production (HTTPS), rate limiting on sign-in and guess-submission endpoints, and server-side enforcement of account/game ownership. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Where Data Is Stored
Guessling is self-hosted: our database and uploaded files (such as background photos) are stored on servers we operate directly, rather than through a third-party managed database provider. We are responsible for the security and backup of that infrastructure.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date, and, where required by law, we will provide additional notice.
10. Contact Us
Questions, requests, or concerns about this Privacy Policy or your data can be sent to:
support@guessling.com