Privacy Notice

Version 2026-09-30. Operator: Gregory Ackerman (individual operator of GatherWave Games™), Pennsylvania, United States. Contact: gatherwavesupport@gmail.com.

What this notice covers

This notice covers GatherWave’s free, adults-only beta. The operator above is responsible for the personal data described here. You do not need an account or payment details. A nickname and room identifier can still be personal data; play is not anonymous.

Information and purposes

• Room and player identifiers, access credentials, nicknames, game settings, answers, votes, drawings, scores and timestamps support room access, reconnection, gameplay and results.
• Technical requests include an IP address and browser/network information processed by our hosting provider. We use IP-based rate limits and limited operational events to protect the service, diagnose failures and understand room reliability. We do not put answer text, names or access tokens in application analytics.
• If enabled, optional browser analytics record page views, game selections and error categories with random event identifiers.
• If you contact us, we receive your email address, message and information you choose to include, to answer requests and resolve problems.

Legal grounds where applicable

We process information necessary to provide the game you request to perform our agreement with you. Security, abuse prevention and proportionate operational diagnostics serve our legitimate interests in running a reliable service. Optional browser analytics use your consent, which you can withdraw below. We may also process information to meet legal obligations or handle legal claims. We do not use gameplay to make decisions with legal or similarly significant effects on you.

Who can see information

Hosts and participants can see nicknames, scores and game submissions as the game reveals them. Anyone with a room code may try to join; keep codes within your group. Participants may take screenshots or make copies that we cannot erase. Your employer or event organizer is responsible for its own use of information outside this service.

Cloudflare provides hosting, networking, database, room-state and asset services. The email provider receiving support messages also processes correspondence. We may disclose information when legally required, to protect people and the service, or to service providers acting on our instructions. We do not sell personal information or share it for cross-context behavioral advertising, and this beta contains no advertising integrations.

Retention and deletion

Rooms expire after two hours without activity. Live room state, including submissions and access records, is scheduled for erasure 24 hours after expiry, even if a history export has failed. An hourly, bounded sweep removes associated database history, scores and room analytics after room-state erasure. Processing failures or a queue backlog can delay this cleanup.

Other application analytics have a 30-day cutoff and hourly bounded cleanup. Browser room-access records expire 24 hours after being saved and are removed when you next visit or use the app. You can clear them below. Support correspondence is reviewed for deletion within 90 days after resolution unless a documented legal need requires longer storage.

Cloudflare Workers Logs normally retain logs for three or seven days depending on the service plan. Database recovery copies may remain for up to 30 days under Cloudflare’s recovery facilities after live records are deleted. Other infrastructure records follow the applicable provider settings. Recovery must reapply deletions before restored data returns to use; contact us for details about the records involved in a request.

Browser storage

We use localStorage for room access, retry protection and your analytics choice, and sessionStorage for presentation preferences. Presentation preferences last for the browser tab’s session. Functional storage supports the features you request. Disabling browser storage may prevent joining or reconnecting. Clearing saved browser data does not delete server data.

International processing and your rights

The operator is in the United States, and providers may process information in other countries. Where required, international transfers must be covered by an applicable adequacy decision or contractual safeguards. Contact us for the safeguards applicable to your information.

Depending on your location, you may request access, correction, deletion, restriction or portability, object to certain processing, withdraw consent, and complain to your local data-protection authority. Withdrawing consent does not affect earlier lawful processing. We may need proportionate information to verify a request and protect other players’ data. We do not require you to create an account or send room access tokens by email.

Send requests to gatherwavesupport@gmail.com with the room code, approximate play date and nickname if available. These details help locate records but do not by themselves prove ownership. If records have already been erased, we may no longer be able to identify them.

Children and notice updates

This beta is for adults 18 and older. If you believe a child has provided personal information, contact us so we can investigate, stop inappropriate collection and address deletion. We will post material notice changes here and provide additional notice or obtain consent where required.