Last updated 2 September 2026
Privacy Policy
1. What we collect
If you host: your email address, a display name, your date of birth, and your plan. Authentication is handled by Supabase; we never see your password.
We ask for a date of birth for one reason: games carry age ratings, and we use your age to decide which ones you are allowed to start. We store the date itself, not just the age, because an age is only true for a year. It is never used for advertising or shared with anyone.
If you join a party: a display name you choose and an anonymous per-device identifier so your seat survives a refresh. No email, no account.
While you play: the state of the party and the game — scores, votes, chat messages, and anything you write or draw.
2. What we do not collect
- Card details. Payments go through Paddle (merchant of record outside Pakistan) or Safepay (payment gateway, for Pakistani rupee payments). Card data never touches our servers.
- Your location. No game reads your device's location, and we never request location permission.
3. AI processing
Some games send text to Google's Gemini models to generate content: Turing's Fact (a plausible false fact), Hunted (narration of the night), Hot Potato (a dare), and Story Wizard (stitching your fragments into a story). Story Wizard additionally sends that finished story to Google Cloud Text-to-Speech so it can be read aloud.
In practice this means: what you type in those games is sent to Google. Do not type anything you would not want processed by a third party.
4. Processors
- Supabase — accounts, database, and image storage.
- Vercel — hosting the web app, plus anonymous traffic analytics.
- Google Cloud — Gemini and Text-to-Speech.
- Paddle — payments and subscription billing outside Pakistan.
- Safepay — payments and subscription billing in Pakistan.
5. Storage on your device
We keep a small amount of data in your browser's local storage:
- your signed-in session, if you host;
- your chosen display name and your seat in the last party, so a refresh does not lose your place;
- your sound preferences — volume, and whether music and timer ticks are muted.
None of this is set for advertising, and none of it is used to track you across other sites.
6. Advertising
The Basic plan is ad-supported. Ads are served by a third-party advertising provider, which means that provider — not us — receives some information about your device and may set its own cookies or identifiers.
No ads are shown to anyone on Pro or Ultra, and we never share what you write, draw or say in a game with an advertiser.
We have not shown an ad yet. Before the first one runs we will name the provider here, set out exactly what it collects, and ask for your consent where the law where you live requires it.
7. Retention
Party and game data lives for the session. Drawings uploaded in Chain Art are deleted when the game ends. Host accounts — including the date of birth on them — persist until you ask us to delete them, and deleting the account deletes the date with it.
8. Your rights
You can ask for a copy of your data or for your account and its data to be deleted, by emailing support@pegasuspartygames.com. Depending on where you live you may also have the right to object to processing or to complain to a data protection authority.
9. Children and age ratings
Games carry age ratings from “Everyone” to 16+. Every account gives a date of birth when it is created, and the rating is enforced on the person hosting the party: if you are 13, you can start a game rated 12+ but not one rated 16+. We check the host because the host is the only person we know anything about — everyone else joins anonymously, with no account and no email address.
Accounts for under-13s. We do allow them, and they are limited to games rated “Everyone”. Such an account still holds the things any account holds: an email address, a display name and a date of birth. If you are a parent or guardian and you did not agree to that account being created, email us and we will delete it and its data — you do not need to give a reason, and we do not ask for anything beyond the email address it was made with.
If you believe a child has given us personal data you would rather we did not hold, contact us and we will remove it.