Privacy Policy

Snitch Please is created and operated by Damsara Perera, an independent developer based in Sri Lanka responsible for the personal data described in this policy. This policy covers the app, website and demo. For privacy questions or requests, email hdtdamsara@gmail.com.

Accounts. Sign-in services such as Apple, Google and Discord provide account identifiers, a name, email address and, where available, an avatar. Apple may provide a private relay address instead of your email. Authentication records include session details and provider tokens. Where email-and-password registration is available, the service stores a protected password credential. You can play as a guest.

Gameplay. We store player nicknames, chosen modes and intensity, generated cards, turn outcomes, skips, reports, Inside Jokes stories and group answers, and Night Report selections. A host may enter information about other players. Use nicknames, tell players how the game uses their information, and do not submit sensitive or private details.

Device and security. We use a random install identifier for guest play, your reported time-zone offset for nightly resets, and IP addresses and browser or device information for authentication, security and abuse prevention. Hosting providers may also process request logs.

Purchases and usage. App stores and RevenueCat process payments. We receive purchase status, product and transaction identifiers and billing events, never your payment-card details. We record pass offers shown, responses, purchases, cards served and generation performance to understand usage and maintain the service.

Contact and early access. If you email us, we receive your email address and message. The website's early-access link opens your email app; it does not automatically subscribe you. If you send a request, we use it to respond and provide the early-access information you asked for. You can ask us to stop by replying.

We use this information to run sessions, personalise cards, provide reports, manage accounts and passes, enforce allowances, answer requests, prevent abuse and investigate failures or reported content. We use usage and generation records to understand and improve the service. Snitch Please does not show ads, sell personal data or track you across other apps and websites.

Where data-protection law requires a legal basis, providing requested account, gameplay and purchase features relies on performing our agreement with you. Security, troubleshooting and service improvement rely on legitimate interests, balanced against your rights. Compliance with binding legal requirements relies on legal obligations. Where we rely on consent, you may withdraw it by contacting us without affecting processing that was lawful before withdrawal.

You do not have to provide real player names or personal stories. Some account and transaction details are needed to sign in or supply a purchase. Without those details, the corresponding feature may not work.

OpenRouter and the model provider it routes a request to receive the player nicknames, selected mode and intensity, relevant recent game context and any personalisation included in the request. They process this information to generate cards. We store generated output and generation records to run the game and investigate quality and safety issues.

Provider retention and use of inputs depend on the provider and applicable settings. We do not promise that AI providers never retain inputs or use them for training. Do not enter secrets, health information, sexual details or other sensitive information about yourself or anyone else. See OpenRouter's privacy policy and its data collection documentation.

Game prompts and awards are entertainment, not factual assessments of people or decisions about their legal rights.

• Apple, Google and Discord provide sign-in when you choose those services.
• OpenRouter and the selected model providers generate cards.
• RevenueCat, Apple App Store and Google Play handle purchases and entitlements.
• Vercel and Neon host the service and database.
• Google's Gmail service processes email sent to our contact address.

Information may also be disclosed when legally required or necessary to investigate abuse, protect safety or establish or defend legal claims. People sharing your device can see the game session. Be careful when displaying or sharing a Night Report.

We operate from Sri Lanka. Service providers may process information outside Sri Lanka and your country. Applicable protections, retention and processing locations vary by provider. Contact us for details about the providers and transfer arrangements relevant to your data.

Account and linked gameplay records remain while your account exists. Delete Account in Settings removes the account and its linked sessions and account-linked awards. It also attempts to revoke a linked Sign in with Apple token; provider failures can prevent revocation. You can also manage app access in your Apple account.

Account deletion does not erase every record. Purchase webhook records and usage events may retain account or transaction identifiers after deletion. Some security, generation and administrative records also remain. These are not necessarily anonymous. There is currently no automatic deletion deadline for these retained records. Contact us to request their review or deletion; records required for legal obligations or resolving disputes may need to be retained.

Guest install identifiers, linked sessions and usage records support guest gameplay, allowances, reports and abuse prevention. They do not currently have an automatic expiry. Removing the app or clearing browser storage does not delete records already stored on the server. Contact us for help locating guest records without sending private stories by email.

Deleting your account ends access to active passes. Service providers may retain their own records under their policies; deleting a Snitch Please account does not automatically delete an app-store purchase history or all provider logs.

The live demo sends nicknames and your chosen mode to OpenRouter to generate five cards and a plot twist. We store inputs, generated output and the generation result to replay the round and investigate failures. Scripted example rounds do not send their player names for AI generation.

A first-party demo cookie identifies your browser for up to one day. A keyed hash of your IP address limits requests. Demo round records expire at the next UTC day boundary and are deleted when a subsequent demo reservation runs, so physical deletion can happen later. The website allowance is separate from the app allowance.

Sign-in uses session cookies, and browser-based guest play uses local storage for an install identifier. Blocking or clearing these can affect sign-in, saved browser state or allowance checks. These mechanisms support the service rather than cross-site advertising.

Depending on the law that applies to you, you may request access, correction, deletion, a portable copy, or restriction of processing. You may also object to processing based on legitimate interests. Email hdtdamsara@gmail.com with your request. We may ask for information needed to verify you or locate your records. Do not send passwords or payment-card details.

Players whose information was entered by a host can contact us too. Requests are subject to applicable law and the rights of other people. You may complain to your local data-protection authority. In Sri Lanka, contact the Data Protection Authority. In Australia, see the OAIC. For UK matters, see the Information Commissioner's Office.

Snitch Please is for adults aged 18 or over and requires any higher local legal drinking age. We do not knowingly collect children's data. Contact us if a child has provided information so we can investigate and remove it as appropriate.

Alcohol is optional. Read the responsible-drinking rules before playing.

Updates appear on this page with a new effective date. Any additional notice or consent required by applicable law will be needed before relevant changes take effect.