Privacy policy
In short
- You can play without an account and without an email address. A nickname is enough.
- No ads, no cookies, and we do not sell or share data for commercial purposes.
- The account is optional and only stores a username, your avatar and your progress. No email or phone number.
- What happens in a room (nicknames, questions, drawings) lives in memory and disappears when the room closes.
- You can delete your account from the game at any time, and write to us at contacto@jestermaster.com.
- Who is responsible
- What data is processed
- What for
- Who it is shared with
- Where it is stored
- For how long
- What is stored on your device
- Your rights
- Children
- Security
- Changes to this policy
1. Who is responsible
Jester Master is a game by Kyogen Studio, the trade name of Juan David Ortega Rincón, an individual based in Tunja, Boyacá (Colombia), who is the data controller for the data described here.
Contact for any privacy matter: contacto@jestermaster.com.
This policy is governed by Colombian Law 1581 of 2012 and its regulations. If you play from the European Union or the United Kingdom, you also have the rights granted by the General Data Protection Regulation (GDPR).
2. What data is processed
| When | What |
|---|---|
| When you play, with or without an account | The nickname and avatar you choose, a random identifier for your device so you can return to your room if the connection drops, and what you do in the room: questions, clues, answers, votes, custom words and whiteboard drawings. The people in your room see it. |
| If you create an account | Username, avatar, progress (level, coins, achievements, cosmetic items), creation and last-seen dates, the date you accepted the terms and, for each open session, its date and the type of browser or device. Of the recovery code we only keep an encrypted digest (hash): nobody, including us, can read it. |
| If you play with an account alongside other accounts | Which accounts you finished a game with, when the last time was and how many times (the latest 30 at most). It lets you invite each other to a room again. Only someone you already played with can invite you, that person is only told whether you are “available”, and you can turn invitations off from the room. |
| If you add characters to your group's collection | The character, its tags, the chosen photo and the nickname of whoever added it. Your group sees it. |
| If you offer a piece on the artists page | The link to the piece, the character, how you want to be credited, the contact you leave, what you write, and the date and version of the permission you accepted. The studio sees it; only your credit appears in the game. |
| If you request a character with “Is a character missing?” | The character's name, where it is from and the reason, if you write them. Your nickname and your account are not saved: only an irreversible digest of your device identifier, so that your request counts once. The studio sees it. |
| To find out which characters are missing from the game | The text of the characters you add to your group's collection, of the custom words typed in a room and of the playlist searches that find nothing, together with an irreversible digest of the identifier of whoever created the room, used only to count how many different groups repeat the same thing. Nobody sees a text until three different groups have repeated it. |
| If you report a bug | What you write, a screenshot if you attach one, a contact if you give one, and, if you agree, a technical log of the last few minutes (screens, action types, errors and device data such as browser and screen size). The log does not include names or anything you typed in the game. |
| If you report another player | The reason, an optional note, the nicknames of the reporter and the reported person and, if the reason is a drawing, a copy of the whiteboard at that moment. |
| If you give feedback | The 1–5 rating, your comment if you write one, the game mode, how many people were playing and the language. It is anonymous. |
| Always | Your IP address, in the server's memory and only while you are connected, to apply limits against abuse (for example, how many rooms can be created per minute). It is not stored. |
| Always | Daily usage statistics with nobody's data: how many visits, rooms and games there were and in which mode. To avoid counting someone twice when they reload the page, a digest of the IP and browser mixed with a value that changes every day is stored; it cannot tell who you are and is deleted after two days. |
We do not ask for or process sensitive data, we do not build advertising profiles, and we make no automated decisions that affect you, other than the abuse limits.
3. What for
- Running the game: creating rooms, showing you to other players, keeping your progress and your account. The game cannot work without this.
- Keeping it safe: stopping abuse, handling reports about players and suspending accounts that break the terms.
- Fixing and improving it: understanding the bugs you report and automatic errors, and knowing which modes are played and what players think.
- Answering you if you write to us.
By creating an account, reporting a bug or giving feedback, you authorise the processing of that data for these purposes. For players in the European Union, the legal bases are performance of the service you request (playing and having an account), your consent (reports and feedback) and our legitimate interest in keeping the game safe and working (abuse limits, errors and statistics without personal data).
4. Who it is shared with
We do not sell data or share it with advertisers. Only these providers are involved, each for the stated purpose:
| Who | What for | What they receive |
|---|---|---|
| Fly.io (Fly.io, Inc., USA) | Hosting the server and the database | Everything that is stored, as a data processor. Like any hosting provider, it sees your device's connection to the server. |
| Sentry (Functional Software, Inc., USA) | Telling us when something breaks | The error type, its message and where it happened in the code, the room, the game phase and the version. Our server sends it: Sentry does not receive your IP, your nickname or what you type. |
| Wikimedia Commons (Wikimedia Foundation, USA) | The photos of the words | Your device downloads each photo directly from Wikimedia, which receives your IP and browser as when visiting any website. Governed by the Wikimedia privacy policy. |
| Twitch (Twitch Interactive, Inc., USA) | Letting a stream's chat take part in the room | Only if you are the host and turn it on in “Streamer mode”: your browser connects to your channel's public chat to read it, without signing in. Twitch receives your IP and browser, as when opening its website. The names of people typing in chat stay in your browser; our server only receives the words you accept, without saying whose they were. |
We may also disclose data if a competent authority lawfully requires it.
5. Where it is stored
The server is in the United States (Fly.io's Virginia region), so data is transferred outside Colombia and, if you play from the European Union, outside the EU. By using the game you authorise that transfer, which is made with providers that apply appropriate security and contractual safeguards.
6. For how long
| Data | Kept |
|---|---|
| What happens in a room | While the room exists. Deleted half an hour after the last player leaves, or when the server restarts. |
| Account and progress | Until you delete the account. Deletion is immediate; daily backups containing it disappear within 7 days. |
| Pieces offered by artists | For as long as the piece is in the game, because it is the record of your permission. If you take it down or it is never used, it is deleted when you ask. |
| Requested characters and what turns out to be missing | A request, until it is reviewed and for as long as it serves as a record of what was decided. What turns out to be missing without anyone asking is deleted after 90 days unless three different groups repeated it. |
| Recent players | Until you or the other person delete the account, or until 30 newer people push them off the list. |
| Group collection | If it belongs to an account, while the account exists; if it belongs to a room, it is deleted with it. |
| Bug reports, player reports and feedback | 90 days, then deleted automatically. |
| Daily visit digests | 2 days. |
| Daily statistics | Indefinitely: they contain nobody's data. |
| Errors in Sentry | Whatever Sentry's plan sets, between 30 and 90 days. |
7. What is stored on your device
The game does not use cookies. It keeps what it needs in your browser's local storage: your nickname and avatar, your progress if you have no account, your preferences (sound, language, animations), the room you were in and, if you have an account, your session key. It is not used to track you and is not shared with anyone. You can delete it from your browser settings; without an account, that also deletes your progress.
8. Your rights
You have the right to access, update and correct your data, to ask for it to be deleted, to withdraw your authorisation, to request proof of it, to be told how it is used, and to file complaints with Colombia's Superintendencia de Industria y Comercio (sic.gov.co) after contacting us. If you play from the European Union you also have the right to data portability, to object to processing based on legitimate interest, and to complain to your country's data protection authority.
- Deleting your account: in the game, under "Your account" → "Delete my account". It is immediate.
- Any other request: write to contacto@jestermaster.com. Since accounts have no email, to check the account is yours we will ask for your username and for confirmation from your open session or with your recovery code (never send it in full by email: we will tell you how).
- Deadlines: queries are answered within 10 business days and complaints within 15 business days, extendable where the law allows. It is free of charge.
9. Children
Jester Master is meant for people aged 13 and over and is not directed at children. Children under 13 must not create an account. If you are between 13 and 17, use the game with the permission of a parent or guardian. The game does not ask for age or contact details; if we learn that an account belongs to a child under 13, we delete it.
10. Security
Connections are encrypted (HTTPS). The recovery code and session keys are only stored as encrypted digests, the database lives on an encrypted disk, and admin access is password-protected. No system is infallible: if an incident affected your data, we would notify the authorities and the people affected as the law requires.
11. Changes to this policy
If we change it, the new version is published here with its date. If the change is significant (for example, new data or a new provider), we will announce it in the game before it takes effect.