Privacy Policy
Last updated: 4 November 2026
Crowdpit (crowdpit.io) is a small independent project: browser games where one player takes the hot seat and everyone watching plays against them. This policy explains what the site processes when you watch or play, why, and what you can do about it. It covers the landing page and every game on crowdpit.io. It is written to meet the EU General Data Protection Regulation (GDPR) and the UK GDPR with the Data Protection Act 2018. Who is responsible for your data and how to reach them is at the end of this page.
The short version
- No accounts. There is nothing to sign up for. We never ask for an email address, a password or a payment method.
- No ads, no trackers. Crowdpit sets no cookies, runs no third-party scripts and loads nothing from other sites: even the font is served from crowdpit.io. The only statistics we keep are anonymous daily totals per game, with nothing that points to you.
- What we do keep is what the games need: a name you choose, the things you type into the games, and your IP address for a short time to keep the pit fair.
What we process and why
| Data | Why | Where it ends up |
|---|---|---|
| Your chosen name | Required to take the hot seat, chat, place a block or pitch an idea. Spectating needs no name. Leave the box blank and the game picks a random one (like SwiftOtter-4821). Names pass through a word filter before they are accepted. | Shown publicly next to your actions: the Wall of Legends, leaderboards, fallen bodies on the bridge, blocks in the tower, Hand-Me-Down chains and the suggestion board. Kept on our server for as long as those records exist. |
| What you type | Chat lines in One vs. Everyone and Mob Rule, the note you leave in Hand-Me-Down, and pitches on the suggestion board. Text passes through the same word filter. | Only the most recent 30 chat lines are kept; they are saved on our server so the room survives a restart, and older lines are dropped as new ones arrive. In a private room (a link made with "Create a room") chat and results are kept in memory only and vanish a few minutes after the room empties. Lines from a muted player are removed. Hand-Me-Down notes are saved with the item chain and shown to later players. Pitches are saved and shown publicly. |
| Game inputs | Cursor positions, direction calls, votes, block drops and similar moves run the games in real time. | Processed live and not stored per person. Only the outcome (a score, a body on the bridge, a block in the tower) is kept, with your chosen name on it. |
| IP address | Every connection carries one. We use it in memory to cap connections and message rates per address, to apply chat mutes, to rate limit the suggestion board, and to count visitors: a hashed form of the address is remembered for one hour so you count once, and only the running total is stored. | Kept in memory while you are connected and for the length of the limit (at most one hour for the visitor count), then dropped. Written to disk only inside the chat report log described below. |
| Play statistics | To learn which games people enjoy, the server adds each game connection to daily totals for that game: how many connections there were, how many started a round, how many played more than once, how many left within 30 seconds without playing, and the total time spent. | Only those totals are saved, per game and per day, for up to 120 days. They contain no name, address, identifier or anything else about you, and they are not shared. |
| Bug reports | When you use the "Report a bug" card we receive what you typed, the optional contact you gave, the address of the page you were on, your browser name and window size, on a game page a few numbers about your connection at that moment (ping, gaps between updates), and your IP address to limit reports to three an hour per address. | Saved on our server and emailed to support@crowdpit.io. Deleted automatically from the server after 12 months, and from the mailbox within the same time. Never shown on the site. A contact you give is used only to reply about the report. |
| Twitch chat in a streamer room | When a streamer makes a room with their Twitch channel name, our server reads that channel's public chat as an anonymous guest, so viewers can steer the Crowd by typing 1 to 9 or "fire". Only those commands are used; everything else in chat is ignored. | The Twitch username and command are shown in the room for a few seconds and held in memory for at most ten seconds. Nothing from Twitch chat is written to disk. We send Twitch nothing about you; Twitch's own policy covers your use of Twitch. |
| Connection details | Your browser sends standard headers such as its user agent and the page origin. We use the origin to accept or refuse WebSocket connections. | Not stored by Crowdpit. Our hosting provider keeps ordinary server logs (see below). |
Pick a nickname, not your real name. Names and anything you type are visible to everyone else in the pit and may appear in other people's streams and clips.
Moderation and reports
Every game checks names and text against a profanity filter. In One vs. Everyone and Mob Rule, anyone can report a chat line. When that happens we record the reported line, the chosen names and IP addresses of the reported player and of the reporter, and the time. A player reported by three different addresses is muted for the rest of their session. The report log is used only to review abuse and tune the filter. Entries are deleted automatically after 6 months and are never shared.
The mute is the only automatic decision the site makes about you. It lasts until you leave, affects only chat, and has no legal or similarly significant effect. If you think a mute was wrong, email us and a person will look at it.
Data kept in your browser
Crowdpit sets no cookies. It uses your browser's local storage for a few conveniences that never leave your device unless you act:
- the name you chose, so you do not have to type it again;
- the keyboard layout you picked in a game's side panel, so the key hints keep matching your keyboard;
- a random token for the suggestion board, so you can change or withdraw your vote;
- small per-game progress such as Stack of Babel coins and your Hand-Me-Down guessing streak.
Clearing site data for crowdpit.io in your browser removes all of it.
Who else handles the data
- Hosting and email. The site, its server and the support mailbox are hosted by Hostinger International Ltd, a company based in Cyprus, which processes the data above on our behalf under a data processing agreement and keeps standard server logs (IP address, requested URL, time, user agent) for security and operations. See Hostinger's privacy policy.
- Twitch, only in a streamer room: our server connects to Twitch to read that channel's public chat, as described above. Your browser never contacts Twitch from Crowdpit, and we pass Twitch no data about visitors.
- Nothing else. No fonts, scripts or images from other sites, no analytics, no advertising networks, no social media widgets, no embedded video. If you reached Crowdpit from a stream, a chat, a social post or a game portal that embeds it, that platform has its own policies and we have no part in them.
We do not sell or rent any of this data, and we do not share it with anyone except the provider above, or where the law requires us to (for example a valid order from a court or authority).
International transfers. Our server may run in a Hostinger data centre outside the European Economic Area and the UK, for example in the United States, and traffic may pass through Hostinger's content delivery network in other countries. Where data leaves the EEA or the UK, it is protected by the European Commission's Standard Contractual Clauses (with the UK addendum) in Hostinger's data processing agreement.
Legal basis
Under the GDPR and UK GDPR we rely on these grounds:
- Your chosen name and what you type into a game or the suggestion board: necessary to provide the feature you asked for (Article 6(1)(b)). Without a name you cannot take the hot seat, chat, place a block or pitch an idea, but you can still watch and play as part of the crowd.
- IP addresses and connection details for rate limits, mutes, the visitor count and the anonymous play totals: our legitimate interest in running the games fairly, keeping them free of floods and abuse, and knowing which games people enjoy (Article 6(1)(f)). We keep this as small and short-lived as we can, as described above.
- The chat report log: our legitimate interest in dealing with abuse and protecting other players (Article 6(1)(f)).
- Bug reports: our legitimate interest in fixing the site (Article 6(1)(f)). The optional contact is used only because you chose to give it, to answer you.
- Data kept in your browser is stored only because it is strictly necessary for something you asked for (remembering your name, your vote, your progress), so no consent banner is needed under the ePrivacy rules and the UK PECR.
Where we rely on legitimate interest you have the right to object at any time; tell us and we will stop unless we have compelling grounds, such as an open abuse case.
How long we keep things
- Names and text stay as long as they are part of a live game record. Leaderboards and the Wall of Legends hold a limited number of entries and push out the oldest. Corpse Bridge archives each finished season. Hand-Me-Down keeps the chain of items, curses and notes. Ask and we remove yours.
- Chat keeps only the most recent 30 lines. Each new line pushes the oldest out, and a muted player's lines are removed at once.
- IP addresses in memory are dropped as soon as the rate limit or mute they serve expires, and the visitor count forgets them after one hour.
- Chat reports, with the addresses in them, are deleted after 6 months.
- Bug reports are deleted after 12 months.
- Daily play statistics are anonymous totals and are deleted after 120 days.
- Hosting logs are kept by Hostinger for the short period set by its own policy.
- Browser data stays until you clear it.
Your rights
You can play almost everything without giving us anything beyond an IP address: watching, steering the Crowd and voting are anonymous.
Under the GDPR and UK GDPR you have the right to:
- access the personal data we hold about you and get a copy;
- have it corrected or deleted;
- restrict how we use it, or object to its use (see Legal basis);
- receive data you gave us in a portable format;
- complain to a data protection authority. In the UK that is the Information Commissioner's Office; in the EU it is the authority of the country where you live or work, listed by the European Data Protection Board.
Because there are no accounts, we find your data by what you tell us: write to us with the game, the name you used and roughly when. We answer within one month, free of charge, and may ask for a detail that shows the entry is yours before we hand anything over.
Children
Crowdpit is not directed at children under 13. In the EU and UK we also do not knowingly process the data of anyone under the age at which they can consent to online services where they live (13 in the UK, between 13 and 16 in EU countries). The site is built private by default: no accounts, no profiles, no location, no tracking, no ads, no private messages, and public names are filtered. If you believe a child has left a name or text on the site, contact us and we will remove it.
Security
The site is served over HTTPS with strict security headers, connections and message rates are limited per address, and there are no accounts or passwords to lose. No system is perfectly secure, which is one more reason to use a nickname.
Changes
If this policy changes, the new version is published here with a new date at the top. Significant changes are noted on the landing page for a while.
Who is responsible and contact
Crowdpit is run by Michele Colledanchise, an independent developer, who is the data controller under the GDPR and UK GDPR. For anything about this policy or your data, including any of the rights above, email support@crowdpit.io. There is no data protection officer, as the law does not require one for a project this size.