Privacy Policy

Effective Date and Last Updated: June 11, 2026

Introduction

Impostor Madness! is a multiplayer party game designed to be played with friends, either locally on the same Wi-Fi network (LAN) or online over the internet.

This privacy policy explains what data the app collects, how it is used, and your rights regarding that data.

This policy accurately reflects the app's actual data practices as of the date above.

We believe in giving you complete control over your data. When you first launch the app, you will be asked whether you want to share anonymous analytics and crash reports.

Before You Consent:

If You Accept:

If You Decline:

Nothing changes. No data is collected, all features remain available, and you can change your mind later in Settings.

This consent mechanism is designed to comply with GDPR, CCPA, and other privacy regulations worldwide.

Data Stored Locally on Your Device

The following data is stored ONLY on your device (not on any server). Note that some of it (your display name and avatar) is also shared with the other players while you are in a game; see "Network Communication" for how.

Network Communication (Gameplay)

Impostor Madness! offers two ways to play together: Local games on the same Wi-Fi network, and Online games over the internet. The information shared with the other players is the same either way (see "Data Shared During Gameplay" below); the difference is how it travels.

Local (LAN) Games

Local games use a 4-character room code and operate entirely on your local network (LAN). No internet connection is required to play.

Online Games (Optional)

You can also create or join Online games that work over the internet, identified by a 6-character room code. When you play Online:

Note: Analytics and crash reporting use the internet only if you consent. Purchase receipt verification uses the internet separately from gameplay. See their respective sections below.

Data Shared During Gameplay

When playing a game (Local or Online), the following data is shared with the other players:

In Local games this data only reaches devices on your local Wi-Fi network or Personal Hotspot. In Online games it travels through the relay to the other players. In both cases it is exchanged only during active gameplay and is not stored persistently by the relay or by other players' devices.

Deep Linking & Sharing

The app supports deep links (impostormadness://join?code=XXXX and https://impostorparty.com/join?code=XXXX) to let players join games easily. These links contain only a room code (4 characters for Local games, 6 for Online). When sharing a game invitation, the app uses your device's built-in share sheet. No personal data is collected, transmitted, or tracked.

Data Sent Online (With Your Consent)

The following data is ONLY collected and sent to external servers if you explicitly consent when first launching the app. You can change your choice at any time in the app's Settings.

Crash Reports (Firebase Crashlytics)

When enabled, if the app crashes, a report is sent containing:

No personal information, such as your name, avatar, location, or advertising identifiers, is ever included in crash reports.

Crash reports help us identify and fix bugs to improve the app for everyone. This data is processed by Google Firebase and is subject to Google's Privacy Policy.

Anonymous Usage Statistics (Firebase Analytics)

When enabled, the app collects completely anonymous, aggregated usage statistics. These help us understand how the app is used so we can improve it.

Automatic data collected by Firebase:

Custom events logged by the app:

These events contain only general game data. No player names, identities, or personally identifiable information are ever included.

This data is:

This anonymous data is processed by Google Firebase and is subject to Google's Privacy Policy.

Third-Party Services

The following third-party services may receive data from the app or website:

On-Device Features

The app uses standard device capabilities, including local network discovery, sharing, camera (for QR codes and avatars), motion sensors (shake gesture), screen wake lock, and network status detection. These capabilities operate on your device and do not, in themselves, collect, store, or transmit any data to external servers. The one exception is an avatar photo you choose to set: in an Online game it is relayed to the other players through our cloud relay (and is never stored on a server), as described in "Network Communication" above.

Font assets are bundled with the app at build time; no network requests are made for fonts.

In-App Purchases

The app offers an optional one-time "Premium Hosting" in-app purchase that unlocks additional game modes, categories, and features. Payment is processed entirely through Apple's App Store or Google Play Store. We do not have access to your payment information.

Purchase Receipt Verification

When you buy or restore Premium Hosting, the app verifies the purchase by sending a request to our server (impostorparty.com) over HTTPS. The app also periodically re-verifies your purchase to confirm it remains valid. Each verification request contains:

The receipt token is used solely to confirm the purchase is legitimate and is not stored on our server after verification. The receipt data is stored locally on your device in platform-secure storage to enable periodic re-verification.

Purchase status is stored locally on your device using platform-secure storage, and can be restored via the app stores.

Device Permissions

The app requests the following permissions:

Required Permissions:

Optional Permissions:

Data Retention

Deleting Your Data

Impostor Madness! does not store your data on external servers (the Online game relay holds game data only briefly in memory during a game, then discards it). All your data is deleted by simply uninstalling the app or clearing app data in your device settings. This removes all preferences, avatar photos, and any locally stored information.

If you previously opted in to analytics and crash reporting, that data is anonymous and cannot be linked back to you. You can disable future collection at any time in the app's Settings.

International Data Transfers

If you consent to analytics and crash reporting, the anonymous data described above is transmitted to Google Firebase servers. Google may process and store this data in data centers located outside your country of residence, including in the United States.

These transfers are governed by Google's data processing terms and their compliance with applicable data protection frameworks, including:

If you play Online games, your game data (display name, avatar, platform, and game actions) is relayed through Cloudflare's global network and may be processed on servers outside your country, independently of your analytics choice. The relay does not store this data. These transfers are covered by Cloudflare's data processing terms and Standard Contractual Clauses. If you do not consent to analytics and you play only Local games, no data is transferred internationally; it remains on your local network and device.

Your Rights & Data Control

You have full control over your data:

Since all personal data is stored locally on your device, there is no account to delete or data access request to make. Simply uninstalling the app removes all stored data.

If you previously consented to analytics, you can disable it in Settings to stop future data collection. Any analytics data already sent to Firebase is anonymous and aggregate, meaning it cannot be linked back to you individually and therefore cannot be individually identified or deleted.

Children's Privacy

Impostor Madness! is designed as a party game for friends and family. The app does not:

Impostor Madness! is intended for a general audience and is not directed to children under 13 (or the minimum age required in your country); younger children should only play with the involvement of a parent or guardian. When used in a supervised party setting, the game is suitable for players of all ages. Parents and guardians should ensure that display names and avatar photos chosen during gameplay are appropriate, particularly for Online games, where they are transmitted over the internet to the other players in the game.

Security

Changes to This Policy

We may update this privacy policy from time to time. Any changes will be reflected on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

Significant changes to data collection practices (if any) will be communicated through app updates and release notes.

impostorparty.com Website

Our website at impostorparty.com provides information about the app, includes a contact form, and offers a promo codes page where we occasionally distribute free codes for the Premium Hosting in-app purchase.

Contact Form

The website contact form collects:

This data is processed by Formspree (formspree.io), a third-party form service, to deliver your message to us. We use this information only to respond to your inquiry. Formspree's privacy policy applies to data submitted through the contact form.

Spam Protection (Google reCAPTCHA)

The contact form uses Google reCAPTCHA v2 to protect against spam and automated abuse. When you visit the contact page, reCAPTCHA may collect:

This data is sent to Google to determine whether you are a human visitor. It is processed under Google's Privacy Policy and Terms of Service.

reCAPTCHA is loaded only on the contact page. It is not present on any other page of the website.

Cookies & Local Storage

The website does not use analytics or tracking scripts of its own. Two pages load third-party verification widgets that may set cookies:

These cookies are used solely for spam and abuse prevention.

The only data we store locally on every page is your language preference (English or Greek) in your browser's local storage, to remember your choice across visits. This is not personal data and is never transmitted.

No cookies or third-party scripts are loaded on any other page of the website.

Promo Codes Page

The promo codes page at impostorparty.com/promo-codes distributes a limited number of free promo codes for the Premium Hosting in-app purchase. To prevent automated abuse, the page uses Cloudflare Turnstile in invisible mode.

When you visit the promo codes page, Cloudflare Turnstile may collect:

This data is processed by Cloudflare to determine whether you are a human visitor. It is handled under Cloudflare's Privacy Policy and the Cloudflare Turnstile Privacy Addendum.

To enforce our code-distribution rules, our server also stores:

Additionally, when you successfully claim a code, your browser stores a copy of that code in its local storage (imp_promo_claim). This is a convenience so we can re-display the code if you return to the page later, even if you cleared cookies. The local storage entry lives entirely in your browser and is never transmitted to us.

This data is used solely for the above fraud-prevention purposes and is not shared with any third party. The salted hashes associated with a claimed code are kept with that campaign's records so we can continue to enforce the one-code-per-person and per-network limits; they are not personal data and cannot be reversed to recover your IP address or identity. Our internal log of redemption attempts is kept while any promo codes remain available; once all distributed codes have been claimed and at least 7 days have passed since the most recent claim, it becomes eligible for deletion and is purged by a routine automated cleanup. Turnstile is loaded only on the promo codes page.

Contact

If you have questions about this privacy policy, the app's data practices, wish to exercise your data rights, or would like to report a bug, please reach out:

Impostor Madness! is developed and operated by Andreas Neofytou.

Summary

In summary, Impostor Madness! is designed with privacy in mind:

  • Explicit consent required before any analytics or crash data collection
  • Local games need no internet (LAN only); Online games relay game data via Cloudflare, which stores nothing
  • Crash reporting and analytics sent online only if you consent
  • Anonymous aggregate analytics only - no individual tracking
  • No user accounts or registration
  • No advertising or ad tracking
  • No user profiling or personalization
  • No data sold or shared with advertisers
  • Gameplay data is stored locally on your device; the Online relay stores nothing
  • Full user control - change consent anytime in Settings

Your privacy is important to us.
Enjoy the game!

Back to Top