BluffUp Privacy Policy

Last updated: September 2026

BluffUp (“we”, “the app”) is a multiplayer party game with several game modes (bluff answers, number guess, truth or lie, and Undercover social deduction). This policy describes what data the app processes and why.

What we collect

• Anonymous account ID — Firebase Authentication assigns a random user ID so you can play without signing up with email.
• Nickname — shown to other players in your room only.
• Optional lobby photo — if you choose to take a selfie in the lobby, a small thumbnail is shown to other players in that room only. It is not a public profile. Online rooms store it temporarily on our servers; nearby (offline) rooms pass it between devices in the session. It is deleted when the room ends.
• Game content you submit — player-written answers, numeric guesses, true/lie picks, Hot Seat statements, Undercover discussion answers, votes, and optional reactions during a match.
• Session gameplay data — scores, round state, and (in Undercover) role-specific prompts shown only to you during the match. Secret topics and spy assignments are not exposed to other players until the reveal phase.
• Reports and blocks — if you report or block a player, we store the reason and blocked user ID.

Related policies

• Community Guidelines
• Terms of Use

What we do not collect

• Email, phone number, or real name (unless you contact us separately).
• Contacts, precise location, or access to your photo library. (We request no location permission; our ad provider may infer an approximate region from your IP address — see Advertising below.)
• A permanent account or social profile — nicknames and optional lobby photos exist only for the current room session.
• Your identity in Nearby mode beyond the session — the local network / Bluetooth connection is used only to pass game state (and optional lobby photos) between devices in that room. Nothing is kept after the session ends.

Camera

The camera is used to scan QR codes so you can join a room, and optionally to take a lobby selfie if you tap Add photo. You can skip the selfie and use your nickname initial instead. We do not upload QR scan frames — only an optional lobby thumbnail if you choose one.

How data is used

• Run live multiplayer rooms and scoring across all game modes.
• Show who is in the lobby (nickname and optional photo).
• Deliver mode-specific gameplay (for example, Undercover prompts and roles during a round).
• Improve question and topic quality (aggregated stats, not your identity).
• Moderate reported content.

Retention

Room data (answers, votes, optional lobby photos, role-specific views) is removed when a round or game advances or when the room is deleted. Stale rooms are deleted automatically after a few hours. Your block list is kept until you remove it or uninstall the app. Analytics aggregates do not include answer text or lobby photos tied to your identity.

The BluffUp website

This section covers bluffup.web.app (the marketing site and the browser-based room player). It is separate from the iOS app described above.

Cookies and local storage

The website sets no cookies of its own. It stores three values in your browser's local storage, all of which stay on your device:

• bluffup_consent — whether you accepted or declined analytics. Set only once you choose.
• bluffup-locale — your language preference (English or Ukrainian).
• bluffup-player-ui-language, bluffup-player-ui-theme — display preferences, only if you join a room in the browser.

Analytics

We use Google Analytics 4 to count page views, measure how far people scroll, and see which download buttons are used. We record no name, email, or other identifying information, and no text you write in a game.

Analytics runs under Google Consent Mode v2 with storage denied by default. Until you press Accept, no analytics cookies or identifiers are stored on your device. If you press Decline, storage stays denied; Google may still receive an anonymous, cookieless signal that a page was viewed, which cannot be used to identify or track you across sites. Google is our processor for this data, and processing takes place in part in the United States.

Legal basis: consent (GDPR Art. 6(1)(a)) for analytics. You can withdraw it at any time.

Changing or withdrawing your choice

Select Cookie settings in the site footer at any time. Withdrawing is as easy as giving consent, and takes effect immediately.

Fonts and third-party requests

Fonts are served from our own domain. The website makes no requests to third-party font, ad, or social networks, so no third party receives your IP address simply because you visited a page.

Your rights

If you are in the EU, EEA, UK, or Ukraine you may request access to, correction of, or deletion of your personal data, object to or restrict processing, withdraw consent, and request a copy of your data. Contact us at the address below; we respond within 30 days. You also have the right to complain to your national data protection authority.

Because the app uses anonymous accounts, we generally need your in-app anonymous ID to locate any data relating to you.

Advertising

The app shows ads supplied by Google AdMob. There are two kinds:

• Rewarded ads — entirely optional. You choose to watch one to earn AI Credits; nothing is shown unless you tap to start it.
• Full-screen ads between games — shown occasionally to free accounts after a finished game. Premium removes these.

To select and measure ads, Google receives your device’s advertising identifier, IP address (from which an approximate region can be inferred), and basic device and ad-interaction data. We do not send Google your nickname, your anonymous account ID, your lobby photo, or anything you write during a game.

Where required by law (the EEA, the UK, and Switzerland), Google’s consent form is shown before personalised ads are used, and you can decline. If you decline, or where consent is not obtained, ads are non-personalised. The app does not ask for App Tracking Transparency permission and does not track you across other companies’ apps or websites.

Google’s handling of this data is governed by Google’s privacy policy. To change a consent choice you have already made, contact us at the address below.

Crash reporting

We use Firebase Crashlytics to record crashes so we can fix them. A crash report contains your device model, operating system version, app version, and a technical stack trace. It does not contain your nickname, your lobby photo, or anything you wrote in a game.

Third parties

We use Google Firebase (Auth, Firestore, Cloud Functions, Crashlytics) to host the service and record crashes, and Google AdMob to serve ads. Their processing is governed by Google’s privacy policy.

Children

The app is not directed at children under 13. We do not knowingly collect personal information from children.

Contact

Questions: kainsp92@gmail.com

Changes

We may update this page. Continued use of the app after changes means you accept the updated policy.