Bastah is a party game you play together from your phones, on the web at www.bastah.games and soon as an iPhone app. This policy explains what we collect when you use the website, the web app or the iPhone app, and why.
The short version: guests never create an account, there are no ads, and we never sell your data.
What we collect
Device code. The first time you open Bastah, your device creates a random code and keeps it in the browser’s storage (or inside the app). We store only a hashed copy, so we can put you back in your session if your connection drops. It isn’t linked to your real name, email or phone number.
Name and character. The name you type and the character you pick for a session. Other players in that session see them.
What you play. Your answers, votes, drawings and scores in a game are saved with that game’s record, so we can show results and the night’s scoreboard, and avoid repeating questions for the same group.
Usage and device information. We use PostHog, an analytics service, to understand how Bastah is used: pages, taps, time spent, device and browser type, and approximate location (country or city) derived from your IP address. PostHog may also record session replays to help us fix problems; text you type into fields is masked and never recorded. Game events (for example, a session started or a game finished) are stored with session and device codes, not names.
Server logs. Our servers log technical events with session, game and device codes. They never include names or what you type.
Messages you send us. If you email us or send feedback inside Bastah, we keep it so we can reply.
What we don’t collect
We don’t collect your email, phone number, contacts, photos or precise location, and guests never create an account.
How we use it
To run sessions and games, reconnect you after a drop, show results, keep questions fresh, fix bugs and improve Bastah, and prevent abuse (rate limits and a name filter).
We don’t show ads, we don’t sell your data, we don’t share it for advertising, and we don’t track you across other companies’ apps or websites.
Who processes it with us
Cloudflare. Hosting for the website and the game servers.
PlanetScale. The database that holds session and game records.
PostHog. Analytics and session replays (servers in the United States).
Google Fonts. Some fonts in the web app load from Google, which receives your IP address.
How long we keep it
Session and game records are kept while Bastah runs, so results keep working and groups don’t get repeat questions. Analytics data is kept for a limited period under PostHog’s retention settings.
Your choices
You can remove the device code by clearing this site’s data in your browser or by deleting the app. To have us delete data linked to your device or a specific session, email raghad@bastah.games with the session code or date.
Children
Bastah is made for adults and families playing together, and isn’t directed at children under 13. We don’t knowingly collect personal information from them. If you think a child has sent us something, contact us and we’ll delete it.
If we add accounts or payments
If we add host accounts (such as Sign in with Apple) or payments, we’ll update this policy before the feature goes live and explain what changed.
Changes
When this policy changes, we update the date above. We’ll announce significant changes inside Bastah.
Contact us
Any question about your privacy, write to us:
raghad@bastah.games