Privacy Policy

Last updated: November 11, 2026

This policy explains what happens to your information when you use Who's Who? Guess Your Friends ("Who's Who", "the app", "we", "us"), in the Android app or in a browser at whoswho.tandevs.com. The short version: there are no accounts; the photos and answers you choose to share go only to your private room, live only in our server's memory during the round and are deleted right after they are revealed; nothing is stored, sold or shared. The app (not the website) sends anonymous usage statistics and crash reports to Google Firebase (you can turn this off) and shows a few ads from Google AdMob.

No accounts

You don't need an account, an email address or a social media login to play. You pick a nickname and a colour for each room. The app remembers on your device only your last nickname and colour, your settings (sound, vibration, theme, "Share anonymous usage & crash data") and whether you own the lifetime unlock. The website remembers your last nickname and colour in your browser, and a seat key for the room you are in (only for that browser tab, so you can reconnect). None of this is sent to us except as described below. Uninstalling the app or clearing your browser data deletes it.

Rooms: what our server receives

Rooms are private: you can only join with the host's room code or link. There are no public rooms and no matchmaking with strangers. When you create or join a room, our room server at whoswho.tandevs.com receives:

• your nickname and colour for that room,
• the photos and answers you choose to submit for a round (you can always skip),
• your moves: guesses, "most likely to" votes, hide/report taps,
• a random room code and random seat and photo keys, so you can reconnect,
• your IP address, used only in memory to stop abuse (too many rooms, uploads or wrong codes).

Photos and answers

• You choose every photo and answer; the app never picks anything from your gallery by itself, and it needs no permission to your photo library (Android's photo picker hands over only the photo you tap).
• Before upload, your device shrinks the photo (at most 1080 pixels) and re-encodes it, which removes hidden data such as location (GPS), camera model and date (EXIF).
• On our server, photos and answers are held only in memory (RAM) — never written to disk, never put in a database, never logged. Nobody, not even the host, sees your photo or answer before its turn in the reveal.
• A photo is shown only to the players in your room, only from the moment it is revealed until the end of its result, and it is deleted right after its result — or earlier if you "chicken out", if a player hides or reports it, if you leave, or when the room closes. In any case every photo is deleted at the latest 2 hours after it was uploaded. Answers are deleted with the round's game data.
• Photos never appear in share cards (those show only names and scores) and are never shared with anyone outside your room. In the browser, photos are kept in memory only while on screen; the website never saves them to your device.

How long rooms exist

Everything about a room is kept in memory only while the room is open. A room is deleted when everyone has left, 30 minutes after the last activity, or 2 hours after it was created at the latest. Our server logs contain only room codes, counts and sizes (for example "a 180 KB photo was stored"), never names, answers, photos, keys or IP addresses.

Reports

If you report a photo or answer, it is hidden for everyone at once and deleted. The report sends us only the room code, the reason you picked (nudity, bullying or something else) and a counter — never the photo, the answer or anyone's name.

Usage statistics and crash reports (Google Firebase, app only)

To find and fix crashes and to learn which parts of the game people use, the Android app uses Firebase Analytics and Firebase Crashlytics, services of Google. They receive app usage events (for example "a game started" with the number of players and rounds, "a round ended", screens opened, the unlock screen viewed, an ad shown), device and app information (device model, Android version, language, app version, country or region derived from your IP address), crash logs, and a random app-instance ID that is reset when you reinstall the app. They never receive nicknames, photos, answers or room codes.

Google keeps individual analytics events for 2 months and crash reports for 90 days; after that only aggregated statistics remain. Google processes this data under the Google Privacy Policy and How Google uses information from sites or apps that use its services; see also Privacy and Security in Firebase.

Your choice: turn it off at any time under Settings → Share anonymous usage & crash data. The website does not use Firebase.

Ads (Google AdMob, app only)

The free app shows at most an occasional full-screen ad between games on the host's phone — never during a round, never on the website and never to players who joined in the browser. Ads are served by Google AdMob, which may process the device's advertising ID, IP address and approximate location derived from it, device information and how you interact with ads, under Google's policies. Where the law requires it (for example in the EEA, the UK and Switzerland) the app asks for your consent first; you can change it under Settings → Privacy choices. You can reset or delete your advertising ID in your Android settings. The lifetime unlock removes ads.

Purchases (Google Play)

The lifetime unlock is a one-time purchase handled by Google Play under the Google Play Terms of Service and the Google Privacy Policy. The app only learns from Google Play that the unlock is owned; we never see your payment details.

Our website

whoswho.tandevs.com has no ads, cookies or trackers. Like every web server it records standard access logs (IP address, time, page and browser type) for security and troubleshooting, deleted automatically after about two weeks. Photo uploads and downloads are not logged.

Sharing

We don't sell, rent or share personal information with anyone. The only third parties involved are Google's services named above (in the app only). When you tap Share to invite friends or share a result card, nothing leaves your device unless you pick an app to share with.

Age

Who's Who is a party game for teens and adults aged 13 and over. It is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child under 13 has used the app, contact us and we will help.

Security

Connections to our room server and website are encrypted (HTTPS/TLS). Photos and answers exist only in server memory for the short time described above, and only members of your room can fetch a revealed photo with their own random key.

Changes to this policy

If this policy changes, we will update it here and in the app and change the date at the top.

Contact

Questions about privacy, or a photo you want removed right now? Email us at rajaryan.space@gmail.com.