Imposterly — Privacy Policy

Last updated: 24 September 2026

Imposterly has no accounts, no analytics, no advertising and no third-party SDKs, and played on one phone the game works entirely offline. Two optional features use the internet, and only while you use them: remote play, where everyone plays on their own phone in a room, and feedback notes you choose to send. Both are described below.

What stays on your phone

To run the game, Imposterly saves a few things locally on your device only:

• player names and emoji you type in,
• your game settings and selected word packs,
• custom word packs you create,
• a short history of recently dealt words (so rounds don’t repeat),
• for remote play: the name and emoji you play under, and a random ID the app makes for itself.

This data is not backed up by us and is deleted when you delete the app. (Your own iCloud device backup may include it, under Apple’s iCloud terms.)

Remote play

Remote play (Play remotely on the home screen) connects the phones in a room while you are in it. It is optional. A phone has to send a name to join a room, and any nickname works. If you’d rather send nothing, play on one phone, which never uses the internet.

What we receive. The four-letter room code, the name and emoji you choose to play under, a random ID the app made when you first used remote play (so a phone that drops out gets its own seat back — it is not an advertising or device identifier), and the game itself: who has seen their card, who is ready, the votes and, from the host’s phone, each round’s word and category (which may come from a word pack the host wrote). The other players in your room see your name, emoji and score, and at the end of a round who the imposter was.

Why. Only to run the game between the phones in the room. We do not use it for advertising or marketing, we do not profile you or track you, and we never sell it or share it with anyone else.

Our legal basis. We use this information because it is necessary to run the game you asked to join, as part of our agreement with you (Kenya’s Data Protection Act, 2019, section 30(1)(b)(i); for players in the European Union or the UK, Article 6(1)(b) of the GDPR).

Where it goes. Over an encrypted connection to our room server. The server runs on Cloudflare’s network (Cloudflare Workers) and may be stored in a Cloudflare data centre outside Kenya, which is what lets players join from anywhere. Cloudflare handles it only on our instructions, under data-protection terms that protect it at least as well as this policy does.

How long we keep it. A room and everything in it (names, emoji, the random ID, words, votes and scores) is deleted automatically 30 minutes after its last move. We keep no logs of games or of who played. Two things outlast a room for a limited time, and we use neither to look at games. Cloudflare’s storage keeps an automatic recovery copy for up to 30 days, which we never use to bring a room back. Cloudflare’s network also keeps its own short-lived security logs of connections (such as IP addresses) under Cloudflare’s policies.

Use a nickname. Everyone in the room sees your name, so please don’t play under your full name.

Under 18? Play remote games only with a parent’s or guardian’s okay.

Feedback you send us

Settings → Send feedback uses the internet only at the moment you tap Send. It is completely optional; the game is identical if you never use it.

What we receive. The note you typed (up to 500 characters), whether you tapped Bug or Idea, your Imposterly version and your iOS version. Nothing else: no name, no email, no account, no device, advertising or install identifier — nothing that tells us which phone a note came from, or that lets us connect two notes to the same person.

Why we collect it. To fix the bug or consider the idea. Your note becomes a ticket on our internal work board and is used for nothing else. We do not use it for advertising or marketing, we do not profile you, we do not track you, and we never sell it or share it with anyone else.

Please don’t type personal details into the note. We don’t ask for any and we don’t need any. Anything you choose to write about yourself — your name, your email — is stored with the note.

Where it goes. The note is sent over an encrypted (HTTPS) connection to our database, which is run by Supabase on Amazon Web Services in Frankfurt, Germany — so it leaves Kenya when you send it. Supabase and AWS host it on our instructions only, under a jurisdiction with data protection law comparable to Kenya’s. The key inside the app can only add a note; it cannot read any note back. Only we can read the notes.

How long we keep it. Until the ticket is closed, and for up to 12 months after that, then it is deleted.

Your rights

Under Kenya’s Data Protection Act, 2019 you can ask us what we hold about you, ask for a copy, ask us to correct it, object to our using it, or ask us to delete it. Write to info@imposterly.app and we will answer within 30 days. Rooms delete themselves within 30 minutes, so there is usually nothing left of a remote game to ask about. One honest limitation for feedback: because nothing in a note identifies you, we cannot look up “your” feedback. To have a note corrected or deleted, tell us roughly what it said — quote the wording — and about when you sent it, so we can find that row. If we can’t match it, we can’t act on it. You can also complain to Kenya’s Office of the Data Protection Commissioner (odpc.go.ke). If you are in the European Union or the UK, you have the same rights under the GDPR, and you can also complain to your local data protection authority (in the UK, the Information Commissioner’s Office).

Who is responsible. Imposterly is published by Aman Shah, Nairobi, Kenya, who is the data controller for remote-play rooms and feedback notes. Contact: info@imposterly.app.

Children

Imposterly is a general-audience party game, not made for children, and every built-in word pack is family-safe. Remote play sends only a nickname, an emoji and a random ID, and deletes them with the room. It is meant for players 18 and over, or younger players with a parent’s or guardian’s okay. If your child has played remotely or sent us a feedback note and you want anything deleted, write to us and we will delete whatever we can find.

Changes

If this policy ever changes, the new version will be posted at this address with a new date.

Contact

Questions: info@imposterly.app