Privacy policy

Crowd Link is a party game you play in your browser. We collect as little as we can: players don't have accounts, and what they type in a game disappears when the room closes. This page explains exactly what we keep, why, and for how long.

Who is responsible

Crowd Link, based in the Netherlands, is the “controller” of your personal data under the General Data Protection Regulation (GDPR). Questions about privacy: privacy@crowdlinkgame.com.

If you play (no account)

When you join a room we store, inside that room only:

• the name and colour you pick, and a generated nickname used when the host hides names;
• your answers and score in that game;
• a random seat token (so you can reconnect after a reload) and, stored only as a scrambled hash, a random device id (so a player the host removed can't rejoin that room).

We also count, per room, how many players joined from a phone and how many from a computer (read from your browser type). Only the two totals are kept, in the room statistics below; nothing about you.

We need this to run the game (our legitimate interest in providing the game you chose to join). All of it is deleted completely when the room closes: at the latest 4 hours after the room was created, plus 10 minutes to see the final results, or 30 minutes after the last activity.

Your answers and name are shown to the other people in the room, and possibly on the host's stream if they broadcast the game. Hosts can hide names and answers from the stream. Please don't type anything in a game that you wouldn't want the room to see.

If you host (account)

Hosts sign in so we can keep their rooms and (later) their purchases. For a host account we store:

• Email address, display name and the sign-in method (Twitch or Google) with its account id and username (for example your Twitch login), refreshed from our sign-in provider at most once a day;
• when the account was created and last used, and your settings (such as “I'm streaming”);
• passes and packs on your account, and codes you redeemed;
• statistics about your rooms: number of games and rounds, most players at once, how many players answered the first and the last round, how many joined from a phone, how long rounds took, which packs were used and whether a stream screen was used. No player names or answers.
• where you came from, if you followed a tagged link (such as crowdlinkgame.com/go/tiktok or the QR code on a stream), and whether you had played in someone else's game before hosting. Your browser sends this when you create a room.

We use this to provide the account and the game to you (performance of a contract), and the room statistics to improve the game and follow up on promotional codes (legitimate interest). We keep your account data until you delete your account. Room statistics are kept for 13 months.

Signing in with Google or Twitch

Hosts sign in with their Google or Twitch account through our sign-in provider, Clerk. We only ask for basic sign-in access. From Google that is your name, email address, profile picture and Google account id; from Twitch, your login, display name, email address, profile picture and Twitch account id. We get no access to anything else in those accounts, such as your Gmail, contacts, files or Twitch channel.

We use this data only to sign you in, to keep your rooms, passes and packs on the right account, and to contact you about your account (for example about important changes to these terms). We store your email address, display name, account id and username as described above; your profile picture stays with Clerk. We don't sell this data, don't use it for advertising and don't share it with anyone other than the providers listed under Who helps us. Crowd Link's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can remove Crowd Link's access at any time in your Google account or under Connections in your Twitch settings. Deleting your Crowd Link account (see Your rights) deletes this data from us and from Clerk.

If you ask for a streamer pass

The form on our streamers page sends us your channel, name and email, and optionally your typical viewer count and a message. We use them only to reply to you and set up your pass (steps you asked for before an agreement). We delete your request within 30 days if you decline, and otherwise after two years at the latest. Ask us any time to delete it sooner.

If you send lore for a streamer's pack

A streamer's moderators can send inside jokes, emotes and catchphrases for the streamer's own pack through a private link. We store what you type there, your handle if you give one, and whether you want to be credited. We use it only to build that channel's pack, and your handle appears in the pack (“Lore by @you”) only if you ticked that box. Please don't send private details of anyone. The entries are deleted when we delete the project, and at the latest two years after the last activity on it; ask us any time to delete yours sooner.

Technical data

• Logs. Our hosting provider records requests (including IP address, the page requested and your browser type) for debugging and to stop abuse. Logs are kept for a few days, and in production only a sample of requests is logged.
• Rate limits. To block abuse we count requests per IP address for about a minute. These counts are never written to our database.
• Error reports. If the game crashes in your browser, it sends us the error message and the page (without the room code), so we can fix it.

Cookies and storage on your device

This website sets no cookies and uses no analytics or advertising trackers. The game keeps a few things in your browser's local storage so it works smoothly:

• your seat in each room you joined (to reconnect after a reload);
• your last name, colour, nickname and host choices (to fill in the form next time);
• a random device id (see above);
• the tag of the first tagged link you arrived with, and whether you have joined a game as a player (sent only when you create a room, see above);
• stream screen links the host opened.

Hosts who sign in also get the sign-in cookies of our sign-in provider, Clerk. All of these are strictly necessary for the service, so no consent banner is needed. You can clear them in your browser at any time.

Who helps us

Service	What for	Data
Cloudflare, Inc.	Hosting, database (stored in Western Europe), game servers, logs	Everything described above
Clerk, Inc.	Host sign-in	Host email, name, sign-in accounts, sign-in cookies
Google, Twitch	Sign-in, if you choose them	Handled under your own account with them

Cloudflare and Clerk are based in the United States. Transfers are covered by the EU–US Data Privacy Framework and the European Commission's Standard Contractual Clauses. We have data processing agreements with both. We never sell your data.

Your rights

You can ask to see, correct, export or delete your data, and object to or restrict how we use it.

• Hosts: in the game, open your account menu → Account & data to download everything we hold about you or to delete your account. Deleting closes your open rooms and removes your account at our sign-in provider too.
• Players: your game data is deleted automatically when the room closes, usually within hours.
• For anything else, email privacy@crowdlinkgame.com. We answer within one month.

When an account is deleted, records of passes and purchases are kept without any link to you, because bookkeeping law requires us to keep sales records. If you think we handle your data wrongly, you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

Crowd Link is for players aged 16 and over. Hosting requires an account and is for adults. Packs with adult humour (marked 18+) can only be used after the host confirms that everyone playing is 18 or older.

Changes

If we change how we handle personal data, we update this page and the date at the top. For important changes we will tell hosts by email before they take effect.