The short version. Party Royale has no accounts, no ads, no analytics and no cookies. It never asks for your real name, email address, phone number or location, and it has no way to take a payment.
Two things do leave your device and are worth knowing about: the display name you type is shown to everyone in your session and can be saved to an all‑time leaderboard, and your IP address reaches our server, the other players in your session, and a small number of connection services. We do not store your IP address. Our logs keep only a one‑way hashed token derived from it, and those logs are deleted after 90 days. Both are explained in full below.
This policy covers the Party Royale game at games.vuelvatech.com/party-royale and the Party Royale Android app. Both are published by VuelvaTech ("we", "us"), the data controller for the purposes of this policy.
The game keeps a few small values in your browser's local storage so it does not have to ask you the same questions every time. These never leave your device, are not readable by us, and are not cookies, because the game sets no cookies at all.
| Stored value | What it is | Why |
|---|---|---|
pr.name.hostpr.name.join |
The display name you last typed | So you do not retype it every session |
pr_theme | Your chosen colour theme | Remembers the look you picked |
pr_touch_mode | Your touch-controls preference | Remembers your control layout |
pr_last_id | The last room you were in | Lets you rejoin after a dropped connection |
pr_session_… |
Temporary session data (browser session storage) | Holds your place in a running game; cleared when you close the tab |
Clearing your browser's site data, or uninstalling the Android app, removes all of it.
The name you type is sent to our game server and shown to everyone in your session. When a round finishes, the result is written to a log, and a name that sets an all‑time record is stored in a leaderboard file that persists until that record is beaten. Pick a nickname rather than your full name if you would rather it not be recorded. The game does not check or verify names in any way.
Our server keeps two append‑only logs, written to disk on the server and not shared with anyone:
We use these to keep the service running, diagnose faults and disconnections, understand which minigames are actually played, and to detect cheating and abuse. The lawful basis is our legitimate interest in operating and securing the game, and in keeping matches fair for everyone playing.
Anti‑cheat needs to answer one narrow question: did these two sessions come from the same place? That question can be answered without keeping the address itself. Before anything is written to disk, your IP address is put through a one‑way cryptographic hash (HMAC‑SHA‑256) with a secret key held only on our server, and only the resulting short token is stored.
The same address always produces the same token, which is what makes the check work; but the token cannot be turned back into an address, and without the secret key it is not usable by anyone who obtains the logs. Your IP address does still exist briefly in the server's memory while you are connected, because it has to be, or the server could not send you anything. It is used there for rate limiting and to reconnect you after a dropout. It is never written down.
Logs are written in daily files and are automatically deleted 90 days after the day they cover. This is enforced by the server itself, which sweeps the log directory at start-up and once a day thereafter, so it does not depend on anyone remembering to do it. Leaderboard entries are kept until the record is beaten. You can ask us to delete data relating to you sooner; see section 6.
We have no advertising, analytics, attribution or tracking SDKs of any kind. The services below are used to deliver and connect the game. Because they serve you content or route your connection, each necessarily receives your IP address; none of them receives your display name or your game results.
| Service | Used for | What it sees |
|---|---|---|
| Google Fonts fonts.googleapis.com, fonts.gstatic.com |
The typefaces the game is drawn in | IP address, browser details |
| unpkg unpkg.com |
Delivers the PeerJS connection library | IP address, browser details |
| PeerJS broker public PeerJS cloud service |
Introduces two players so they can connect directly | IP address, temporary random session ID |
| STUN servers Google, Cloudflare |
Discovers how your device is reachable | IP address |
| Open Relay TURN metered.ca |
Relays gameplay data when a direct connection is blocked | IP address, and relayed game traffic when used |
These providers handle that data under their own privacy policies, which we do not control.
The Android app is a thin wrapper that displays the same web game. It contains no game code of its
own, collects nothing beyond what is described above, and contains no advertising or analytics
libraries. It requests two permissions, both required simply to reach the internet:
INTERNET and ACCESS_NETWORK_STATE. It does not request access to your
location, camera, microphone, contacts, files or device identifiers.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to complain to your local data protection authority. Contact us at the address below to exercise any of them.
Party Royale is intended for a general audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we will delete it.
The game is served over HTTPS and gameplay connections are encrypted. Server logs are stored on our server with access limited to the operator. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Our servers and the third‑party services listed above may process data in countries other than your own, including outside the European Economic Area.
If this policy changes we will update the date at the top of this page and, where the change is significant, note it in the game. Continuing to play after a change means you accept the updated policy.
VuelvaTech
Email: markvuelva@gmail.com
We aim to respond to privacy requests within 30 days.