Privacy

• No accounts. Nobody signs in.
• One-device mode sends nothing anywhere. Names, custom decks, the Secret Santa group and the Hall of Fame stay on that device.
• Phone games pass names and answers through our game server only while the room is open. A room is deleted when the host ends it, or 12 hours after it opened at the latest.
• Secret Santa matches are computed on the host's device. In phone games each phone receives only its own match.
• Names and typed answers are passed through a word filter, and the host can hide any entry or remove a player.
• No ads. No analytics or tracking on the play screens.

Exactly what is kept on your device

These are stored in your browser's local storage and never leave the device: the names you type for one-device games (cgn.names), the name you last joined with (cgn.name) the Family Hall of Fame (cgn.hall), tonight's Family Cup (cgn.night) and the secrets found on that device (cgn.secrets, cgn.feats, cgn.season). While a phone game is open, the browser's session storage keeps your seat in the room (cgn.seat.<code>) so a phone that goes to sleep gets its place back; it is gone when the tab closes. Clearing your browser's site data removes all of it.

Exactly what the game server keeps

A room on the game server holds the room code, the players' names and emoji, team names, and the current screen of the game, so that a phone or the host screen can reconnect after a drop. Secret Santa: the server holds each phone's own match only so that a phone can reconnect to it, and it is never sent to anyone else. The room and everything in it is deleted when the host ends the game, or after 12 hours at the latest. The game server runs on Cloudflare.