What we keep,
and why

If you just play

You can join a room with a code and a name, without an account. While a game is running, its room keeps the game state it needs: who is in it, the names and avatars you picked, the moves, the scores. When a room has been idle for a while it's deleted.

Some games keep a little more so they work from day to day. For example, Updraft keeps a daily leaderboard of names and scores.

If you choose to record a buzzer or a kill shout, the recording is shared with the players in your room so it can play in the game. It stays with that room.

If you make a profile

A profile lets you keep your friends, invites and favourites across games and devices. For it we store:

• your display name and avatar
• your passkeys' public keys, and a name for each device you added one on. We never have a password, and the private part of a passkey never leaves your device
• your friends, the invites you send and receive, and the games you've hearted
• if you turn on notifications, your browser's push subscription, so we can tell your phone when a friend invites you
• a session cookie that keeps you signed in

We don't ask for your email address, phone number, contacts or location.

What we count

To see which games people like and make them better, we record which games you open, for how long, and a few things you do on One for the Road itself: rooms you host or join, invites, launches, hearts, friend adds, and sign-ups and sign-ins. With each, we note whether you're on a phone, tablet or computer, and whether you opened it in the browser, from your Home Screen or in our app.

If you're signed in, that's linked to your profile. If you're not, it's linked to a random ID stored on your device (a cookie and local storage). It isn't your name, and it isn't worked out from your device's details. Only we see it, on our own servers. There are no ads, we don't sell it and no third-party analytics service is involved.

We keep the detailed records for 90 days. After that only daily totals are left (for example, how many people played a game that day), and those don't identify anyone.

Who else handles it

Cloudflare hosts One for the Road and stores this data for us as our processor. Push notifications travel through your browser's push service (for example Apple's or Google's) encrypted, so it delivers them without being able to read them. We don't sell or share your data with anyone else, and nothing is used for advertising.

Deleting your data

Open oftr.io/play, go to Me and tap Delete profile. That removes your profile, passkeys, friends, hearts, invites, push subscriptions and the records of what you played (including those from the browsers you used it on). Rooms you were in are deleted on their own once they go idle. You can also remove the passkey from your phone's password manager.

If you play without a profile, clearing this site's data in your browser removes the random ID, so new visits can't be connected to old ones. To have the records for that ID deleted as well, ask us through Support.

Changes and contact

If what we keep changes, we'll update this page and its date. Questions or requests about your data: see Support for how to reach us.