Privacy Policy

Last updated: October 7, 2026

This policy explains what personal data Imposter Games collects when you use impostergames.org or our Android app, why we collect it, who receives it, and the choices you have. For the full list of cookies, see our Cookie Policy.

In short: you don't need an account, and most of the game runs on your own device. Google Analytics only runs if you accept it. Ads are served by our ad partner NitroPay, which uses cookies and similar technology; visitors in the EEA, the UK and Switzerland are asked for their consent.

Who is responsible

Imposter Games is run by Mohammad Ahmadi, a private individual based in Sweden, who is the controller of the personal data described in this policy.

For anything about your data, email Email or use our contact page.

What we collect and why

What we handle depends on how you use the site:

Playing on one device. Player names, game settings, custom word lists and the state of the current round are saved only in your browser's storage. They are never sent to us. If you are signed in, the words a round deals and who won it are also added to your account, as described below.
Online multiplayer. When you create or join a room, the nickname you choose, the room code, and your clues, votes and chat messages go to our game server so the other players in that room can see them. The server keeps them in memory only, never in a database or a log file. It holds at most the last 50 chat messages of a room and deletes the room 30 minutes after the last player leaves. If a host makes a room public, the host's nickname and the room settings are listed for anyone to see.
Accounts, only if you sign in. You can sign in with Google or Discord. We then receive your account ID with that service and the name it shows; we never ask for or store your email address. We store that ID, your nickname and your own game stats: Daily Imposter results, best quiz scores, and totals from online rounds you play while signed in (games, wins, imposters caught). Clues, votes and chat are still never stored. A sign-in cookie keeps you signed in. Rounds you play on one device while signed in add to your totals per mode (rounds, and which side won), and we keep up to 2,000 words you have already been dealt, so your other devices skip them.
Live player count. During a local game, your browser sends our server a random ID and the number of players at your table every 15 seconds, so the site can show how many people are playing right now. The server forgets each ID after 20 seconds and does not link it to anything else.
Contacting us. If you email us, we receive your email address, your message and anything else you choose to include. We use them only to answer you.
Analytics, only if you accept. With your consent, Google Analytics counts visits and shows us which pages and game modes are used. It records the pages you view, the page that sent you here, your device and browser, your approximate location (country or city, derived from your IP address) and a random ID stored in a cookie. If you don't accept, Google Analytics is not loaded at all.
Cookie-free statistics. Cloudflare Web Analytics measures page views and loading speed without cookies and without identifying you.
Advertising. Our ad partner NitroPay and the advertising companies it works with collect data such as your IP address, device and browser details, the pages you visit, and cookie or advertising IDs, to show and measure ads, prevent fraud and, where allowed, personalise ads. See Advertising.
Keeping the site running and secure. Like any website, our server and Cloudflare process your IP address and technical details of each request to deliver pages and to protect the site from attacks and abuse. Cloudflare may set a security cookie for this.
Our Android app works the same way, without ads or analytics: local games stay on your phone, and online rooms use the same game server as the website.

Legal bases

Under the GDPR, we rely on these legal bases:

Providing the service you ask for (Article 6(1)(b)): online rooms and chat, and saving your settings on your device.
Your account (Article 6(1)(b)): if you sign in, storing your account and stats is how we provide them to you.
Legitimate interests (Article 6(1)(f)): keeping the site secure and working, the anonymous live player count, cookie-free statistics, and answering your messages. You can object to this processing at any time.
Consent (Article 6(1)(a)): Google Analytics, and cookies and personalised ads from our advertising partners. You can withdraw consent at any time; this does not affect processing that happened before.
Legal obligations (Article 6(1)(c)): when the law requires us to keep or disclose data.

Advertising

Ads pay for the site. NitroPay's ad script starts once you interact with a page, for example with your first tap, click or key press, or after about a minute.

If you are in the EEA, the UK or Switzerland, NitroPay asks for your consent to personalised advertising and to its partners storing or reading information on your device. You can change your choice at any time with the Update consent preferences button in the site footer.

Elsewhere, ads may be personalised using cookies and advertising IDs. You can limit this in your browser or phone settings, in Google's My Ad Center, or through the industry opt-out pages at optout.aboutads.info and youronlinechoices.eu.

The ad script can also detect ad blockers. If one stops the ads, the site may show a short note asking for support. That check happens in your browser, and nothing about it is sent to us.

This Site is affiliated with NitroPay for the purposes of placing advertising on the Site, and NitroPay will collect and use certain data for advertising purposes. To learn more about NitroPay’s data usage, click here: NitroPay Privacy Policy.

Transfers outside the EU

Some of these companies, including Google, Cloudflare, NitroPay and many advertising partners, process data in the United States or other countries outside the EU and EEA. When they do, they must protect it with the safeguards the GDPR requires, such as the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

How long we keep data

Browser storage: until you clear it in your browser.
Online rooms, nicknames, clues and chat: until the room closes, at most 30 minutes after the last player leaves.
Accounts and their stats: until you delete the account on the account page, which deletes everything stored with it at once. A sign-in session ends after 30 days without use.
Live player count IDs: 20 seconds.
Emails: as long as needed to answer you and deal with any follow-up.
Google Analytics: at most 14 months, after which Google deletes the data automatically.
Advertising data: as set out in the privacy policies of NitroPay and each partner.
Security data at Cloudflare and on our server: only as long as needed to protect the site and fix problems.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its use, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time. To use any of these rights, email Email. We will reply within one month.

Most game data never reaches us. You can delete it yourself by clearing this site's data in your browser settings.

If you have an account, you can download everything stored with it, or delete it, yourself on the account page.

You can also complain to the Swedish Authority for Privacy Protection (IMY) or to the data protection authority where you live.

US state privacy rights

If you live in California or another US state with a consumer privacy law, you may have the right to know what personal information we collect, to have it deleted or corrected, and to opt out of its sale or sharing for targeted advertising. We will never treat you differently for using these rights. Email Email to make a request.

If you are a California resident, you have the right to opt out of the sale or sharing of your personal information. Our advertising partners may use cookies and identifiers in ways that count as a sale or share under the CCPA. The opt-out link below appears only for California residents. You can change your analytics choice at any time with the Cookie settings button in the footer.

Children

Imposter Games is made for a general audience, including families playing together. It is not designed for children under 13 to use on their own, and we do not knowingly collect personal data from children under 13 or under the age of digital consent in their country. Younger players should play with a parent or guardian. Online chat is not moderated, so children should not join public rooms without an adult.

Accounts are for people aged 13 and over.

If you believe a child has given us personal data, email Email and we will delete it.

Security

The site is only served over encrypted HTTPS connections, and we keep the data we handle to what the games need. No system is completely secure, so please don't put personal information such as your full name, address or phone number in nicknames or chat.

Changes to this policy

We update this policy when the site changes how it uses data. The date at the top shows the current version. If a change is significant, we will say so on the site.