Privacy Policy

Summary

Playing needs no account, and the game stays on your device. An optional account lets you buy access and restore it on another device — it holds your email address and your purchases. Stripe takes payment on its own pages; we never see your card details. The only cookies this site sets keep you signed in.

On your device

Your browser’s local storage holds:

• the player names you typed and the game mode you last chose, forgotten after a day without a game;
• a game you are part-way through, discarded automatically after twelve hours;
• the fact that you confirmed you are 18 or older;
• cards you have chosen to hide;
• how many free samples you have been dealt in each paid mode;
• your sign-in session, if you have one; and
• if you have bought access, a cached copy of the paid cards, deleted when you sign out, delete your account, or your access ends.

Clearing your browser’s site data for this site erases all of it. When the app calls our servers, your sign-in session travels as a request header; the sign-in cookies below are the only exception.

Cookies

We set two first-party cookies, only once you sign in: ah_session, a sign-in token that page scripts cannot read and that is sent only to our sign-in endpoint, and ah_signed_in, a marker with no personal data in it. They exist because iPhone Safari clears a site’s stored data after seven days without a visit — without them, a week away from the game would sign you out. They last up to 400 days and are removed when you sign out. After Hours sets no advertising or analytics cookies. Google’s sign-in button, shown only on the sign-in screen, uses Google’s own cookies under Google’s privacy policy. Stripe sets its own cookies on its own pages, under Stripe’s privacy policy.

Player names

Player names stay in your browser’s local storage. They are not part of the web address, so they do not appear in your browser history, in a link you send someone, or in our hosting provider’s request logs. They are still visible to anyone who can see the screen while you play, which is the point of the game — use nicknames if that matters to you. Tapping Clear on the setup screen, or Discard on a game in progress, removes them immediately.

Accounts

An account is optional — you only need one to buy access or to restore it on another device. Creating one stores: your email address (we sign you in with a one-time code or through Google, never a password); the date you confirmed you are 18 or older; the date the account was created; your purchases, including their renewal or end dates; refund or dispute status; and the Stripe customer id tied to your purchases. We use this only to sign you in, give you access on any device, handle refunds and disputes, and meet legal, tax and accounting duties. We never use it for advertising, and never sell or share it.

Signing in with Google

Where the sign-in screen offers it, signing in with Google is optional; email codes always work. If you choose it, Google tells us your name, your email address, a link to your Google profile photo, and that Google has verified the address. Supabase, our sign-in provider, keeps these as part of your sign-in record. We use only your email address, the same way as for a code sign-in, and never show or use your name or photo. Google learns that you signed in to After Hours, under Google’s privacy policy. Deleting your account deletes this record.

Payments

Stripe takes payment on its own hosted page; we never see your card number. Stripe collects your card details, your email address, and your billing country or postcode (your full address, if tax collection is turned on), and issues receipts and, for a Lifetime purchase, an invoice. Stripe tells us only whether the payment succeeded, the amount, the relevant dates, and any refund or dispute.

Service providers

A handful of outside services help run After Hours. Each processes data only to provide its service, and data may be processed in the United States:

• Supabase — sign-in and our database, hosted in the US;
• Stripe — payments, receipts, invoices and subscriptions;
• Resend — sends sign-in codes, so it sees your email address;
• Google — sign-in, if you choose to sign in with Google;
• Vercel — hosting and our servers, including request logs with IP addresses;
• Sentry — error reports from the site and our servers, where enabled;
• Google Firebase — anonymous card ratings, where enabled.

What we do not collect

• Your real name, phone number, or postal address, beyond what Stripe collects to process a payment and the name Google shares if you sign in with Google.
• Location data.
• Anything from advertising or analytics networks.
• A record of which prompts you saw, skipped, or played. The one thing you can choose to send is a card rating — see “Card ratings” below — and hiding a card is handled entirely on your device.

Card ratings

If card ratings are enabled on this site, tapping the rate buttons on a card sends that card’s number and your rating — a simple up or down — to our database, so we can learn which cards land and improve the deck. It is anonymous: no name, no account, nothing that identifies you or your device, and it is never linked to your account, even if you are signed in. Choosing to hide a card is always kept on your own device and sent nowhere.

Errors and logs

If error reporting is enabled on this site, a crash may send technical diagnostic information — the error message, the page it happened on, and your browser type and version — to our error-monitoring provider so we can fix it. These reports are not used to identify you and are not combined with anything else. Reports never include anything the game has saved on your device, and before any report is sent we strip the query string from every URL in it. The same provider also receives reports from errors on our servers; those reports leave out sign-in tokens, cookies, and request bodies. Card details are never logged, on the browser or the server.

Refund records

Every refund or chargeback, even a partial one, is recorded: the date, a one-way keyed hash of your email address (not the address itself), the card fingerprint Stripe assigns your card (not the card number), the reason, and the charge id. We keep this after an account is deleted, for as long as After Hours is sold, and use it only to enforce our one-refund-per-person policy.

Retention

We keep account data for as long as the account exists. Deleting it removes your profile, unlocks, purchases, and sign-in account at once, and cancels any subscription. Backups roll off within about seven days. Stripe keeps its own payment records for as long as the law requires. The webhook log we keep holds only event ids and types, never personal data. Refund records are kept as described above.

Your rights

You can delete your account in the app at any time. For a copy of your data — your profile, unlocks, and purchases — contact us; there is no in-app download. If you are in California, the EU, or the UK, you have rights to know what we hold about you, access it, correct it, delete it, take a copy with you, and object to how it is used, and we will respond within 30 days. We do not “sell” or “share” personal information as those laws define it.

Children

After Hours is for players aged 18 and over. We ask you to confirm this again when you create an account. It is not directed at children and we do not knowingly collect information from anyone under 18. If you believe a minor’s account has been created, contact us and we will delete it.

Changes

If this policy changes we will update the “last updated” date at the top of this page, and email account holders about any material change.

Contact

Privacy questions or requests: Support@afterhoursgame.com. The data controller is After Hours Party Game, LLC.