Privacy policy
Last updated 16 October 2026.
Volteface is an online game of court intrigue. This page says what the game stores about you, why, and what you can ask us to do with it. We keep as little as a game with accounts can, and we never send you email.
Who is responsible
Volteface is run by its operator, who is the data controller for the personal data below under UK data protection law (the UK GDPR and the Data Protection Act 2018). To contact the operator about your data, use the contact details given at the end of this page.
What we store
| What | Why |
|---|---|
| The name you give, or the name on your Google account if you sign in with Google | To show the referee who holds each seat in a game. |
| If you sign in with an email address: that address, and your password in hashed form (never the password itself) | To let you sign in. The address is used only as your sign-in name: we never send email to it and never check it. |
| If you sign in with Google: Google's identifier for your account and your name | To recognise you when you sign in again. We do not receive or keep your Google email address, contacts, or anything else from your Google account. |
| Sign-in sessions, stored only in hashed form | To keep you signed in, for up to ninety days. |
| If you ask for a password reset: the time you asked and what you wrote about how to send the link, kept until the referee answers or for a week | To let the referee see your request and send you the link. |
| A password reset the referee makes at your request, kept until it is used or for a day | To let you set a new password if you forget yours. The referee sends you the link themselves; we send nothing. |
| If you add passkeys: each one's public key, the name you gave it, and when it was added and last used | To let you sign in with it. The private key never leaves your device or password manager. |
| If you turn alerts on: the address your browser's push service gave that browser (Google, Mozilla, Apple or Microsoft, depending on your browser), and your last twenty alerts | To tell you when a turn has resolved or you are given a seat. Alerts carry no game detail through the push service; your device fetches the words from us. |
| Messages the referee sends you, and whether you have read them | To let the referee tell you about the game. The referee's table keeps a copy of what it sent. |
| Failed sign-in attempts against an email address, kept for fifteen minutes | To stop people guessing passwords. |
| Your seat in a game and everything you do in it: orders, letters, petitions and the like | To run the game. Other players see only what the game's rules show them. |
Our legal basis is that this data is needed to provide the game you have signed up to play (contract), and, for the protection against password guessing, our legitimate interest in keeping accounts secure.
Signing in with Google
If you choose "Continue with Google", Google tells us only your account identifier and your name (the
openid and profile scopes). We use them only to sign you in to Volteface and to show your name
to the referee. We do not share them, sell them, use them for advertising, or use them to train any model.
Volteface's use of information received from Google APIs adheres to the
Google API Services User Data Policy,
including the Limited Use requirements.
Cookies
We use two cookies, both needed for the game to work, and no others:
__Host-volteface: keeps you signed in.__Host-volteface-oauth: lasts ten minutes, only while you sign in with Google, to check that the answer from Google belongs to your sign-in.
There are no analytics, advertising or tracking cookies, and no third-party scripts.
Who else handles your data
The game runs on Cloudflare, which stores the game's data and, like any web host, briefly processes technical details of each request, such as your IP address, to deliver the site and protect it from attack. If you sign in with Google, Google handles that sign-in under its own privacy policy. If you turn alerts on, your browser's push service carries an empty wake-up message to your device. We share your data with no one else.
How long we keep it
Your account is kept until you ask us to delete it. Sessions end after ninety days or when you sign out. When an account is deleted, its name, email address, password hash, Google identifier, passkeys, alert addresses, alerts and messages are removed. Turning alerts off on a device forgets that device's address. A game's history is kept so that the game can be replayed and checked, but a deleted player's name is removed from it.
Your rights
You can ask for a copy of the data we hold about you, ask us to correct it or delete it, object to how we use it, or ask us to stop using it. Contact the operator using the details below and we will reply within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office.
Children
Volteface is not intended for children under 13, and we do not knowingly hold their data.
Changes
If this policy changes, we will update this page and the date at the top.
Contact
The operator of Volteface: volteface@logjam.co.uk.