Privacy Policy
In short
playouija.com has two sides. The board needs no account and collects nothing: questions you type into it never leave your browser. The name screen is for magicians and does have accounts, because each one keeps its own name.
An account holds a username and a password, and nothing else. The name you set is stored on our server, and the site owner's name is what any visitor who is not signed in will hear, so please don't put anything private in it.
The question box
We never see it. Whatever you type into the board's question box is handled entirely inside your own browser. It is not transmitted to a server, not stored, and not readable by us. It disappears when you close the page.
Accounts
The name screen is for magicians, so it asks you to sign in. Accounts are made on invite: there is no open sign-up, and an invite code works once and lapses after seven days.
An account stores a username and a password, and the password is kept only as a cryptographic hash — the password itself is never stored, and nobody here can recover it. That also means a forgotten password has to be reset rather than looked up.
The name the board answers with
Each account has its own name, so one magician cannot overwrite another's. Your name is kept on our server rather than only on your phone, which is what lets your own board answer with it.
There is no separate public name. A visitor who is not signed in hears the site owner's name, which means the owner's word is visible to anyone using the site. Please do not put anything private or identifying in it.
A name is at most ten letters. Nothing else about it is kept: no history, and no record of who set one or when it changed.
Cookies and local storage
If you sign in, the site sets one cookie: your session. It is strictly necessary, because without it there is no way to stay signed in, so no consent banner is needed and none is shown. It holds a random reference rather than your password, and it cannot be read by any script on the page.
The session ends when you sign out, when you change your password, after thirty days of not being used, or six months after you signed in — whichever comes first.
Your browser's local storage holds two things: a cached copy of the name your board answers with, so the board still works when the network is unavailable, and your sound on/off preference. Neither is used to identify you, and clearing your browser's site data removes both.
Nothing here tracks you, and there is no advertising or analytics cookie of any kind.
Analytics, advertising and tracking
We use no analytics service, no advertising network, no social plug-ins and no behavioural tracking of any kind. We do not build profiles of visitors. There is no data about you for us to sell or share.
Server logs
The site is hosted by Hostinger. As with any web host, their servers automatically record basic technical details for each request — typically the IP address, the date and time, the page requested and the browser's user agent string. This is standard for operating and securing a website, and we do not use it to identify individual visitors.
Third-party resources
All fonts, styles, images and scripts are served from this domain. No part of the page is loaded from a third-party service, so simply visiting the site does not disclose your visit to anyone else.
Children
This site is not directed at children, and we do not knowingly collect personal information from anyone, including children. The site owner's name is visible to everyone, so we ask that it never contain personal details about anyone, of any age.
Your rights
Data protection laws such as the UK GDPR and the EU GDPR give you rights over personal data held about you, including rights of access, correction, erasure, restriction, portability and objection. Where a magician's account is concerned, what we hold is a username, a password hash and that account's name. Board visitors have no account at all, and nothing on our server identifies them.
If you have an account you can change the name yourself at any time on the name screen, and change your own password there too. To have an account and its name deleted, ask us and we will remove them. If you have any other question about your rights, please contact us.
Changes to this policy
If this policy changes, the revised version will appear on this page with an updated date. Continued use of the site after a change means you accept the revised policy.
Contact
Questions about this policy can be sent to [contact email address].