Privacy Policy

Last updated: November 2026

This policy explains what Fool the Bot (operated by Novologia Ltd) collects and why. We collect as little as we can: you can play without an account.

What we collect

• A browser identifier. A random id in a cookie, so the game knows which seat is yours and you can rejoin after a reload.
• What you put into a game. The name and avatar you pick, your drawings (as pen strokes), your clues and your guesses, with their timing, and the scores.
• Challenges. The recorded drawing, the secret word, your name, and for each person who opens the link: the name they type (optional), their guesses, timing and result.
• Account and purchase (only if you buy a pass). Your email address, and the order details Paddle sends us (no card details).
• Technical data. IP address (for abuse limits), browser and device type, country, the page you came from, and in-game events (for example “a game started”), never your drawings, clues or guesses.
• Analytics (with consent where required). Google Analytics and the Meta pixel, only on our production site, and in the EU, EEA, UK and Switzerland only after you accept. You can change your choice at any time in cookie settings.

How we use it

To run the game (rooms, rounds, scores), to have the AI evaluate drawings and clues, to prevent abuse, to process purchases, to answer support requests, and to understand and improve the game in aggregate.

AI processing

To play against the bot, drawings (as images rendered from your strokes), clues and some guesses are sent to our AI providers, Anthropic and, as a fallback, OpenAI, which process them to return an answer. Do not put personal information in drawings or clues.

Who else processes data

Supabase (database), Vercel (hosting), Anthropic and OpenAI (AI), Paddle (payments, as merchant of record), Google and Meta (analytics, with consent), and our email provider for sign-in codes.

How long we keep it

Game rooms, their drawings, clues and guesses are deleted automatically about 30 days after the room was last used; challenges about 30 days after the link expires. Purchase records are kept as long as the law requires. [TODO: OWNER REVIEW: confirm these retention periods]

Your rights

You can ask us to access, correct or delete your personal data, or to remove a challenge you created, by writing to support@foolthebot.com. If you are in the EU, UK or a similar jurisdiction you also have the rights your law gives you, including complaining to your data protection authority.

Children

The Service is not directed at children under 13, and the word lists are chosen for a general audience.