Privacy Policy

1. Information We Collect

We collect the following information when you use thatsabot.com:

• Anonymous account ID — a UUID generated automatically when you first visit
• Social profile — name and email address, if you register with Google, Apple, or email
• Display name — a name you choose when registering
• Game history — game sessions, guess results, scores, and timing
• Chat messages — the full text of all messages you send during games
• IP address — collected transiently for rate limiting only; not stored persistently

2. How We Use Your Data

• Matching you with opponents and running game sessions
• Tracking scores and displaying the leaderboard
• Enforcing rate limits and preventing abuse
• Improving the service, AI models, and game experience
• Providing customer support

3. Chat Content & Research

Chat messages carry no expectation of privacy. By sending messages in the game, you acknowledge that your chat content may be reviewed by our team and used for research and product improvement.

We may use, share, and license aggregated or anonymized data — including chat content — for research, AI development, analytics, and product improvement. This may include sharing with third parties for these purposes.

4. Third-Party Services

We use the following third-party services:

• Google OAuth — for optional account registration. Governed by Google's Privacy Policy.
• Resend — for sending magic link login emails. Governed by Resend's Privacy Policy.
• Google Gemini API— to generate AI opponent responses during games. Chat messages are sent to Google's API for this purpose.

We do not currently use any advertising or analytics services.

5. Cookies & Local Storage

We store your authentication token in localStorage to keep you signed in across sessions. We do not use tracking cookies or third-party cookies.

6. Data Retention

We retain the following data indefinitely:

• Player accounts (ID, name, email, scores, stats)
• Game session records (participants, result, timing)
• Chat messages (full text)
• Guess results

IP addresses are not stored — they are used only in-memory for rate limiting and discarded immediately after.

7. Your Rights

Depending on where you live, you may have rights under GDPR, CCPA, or similar laws — including the right to access, correct, or delete your personal data. To exercise these rights or request account deletion, contact us at support@thatsabot.com.

8. Children's Privacy

thatsabot.com is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us at support@thatsabot.com.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page. Your continued use of the service after any changes constitutes your acceptance of the updated policy.