BLUFFSTORY / Privacy
Privacy policy.
Your story belongs to you. So does knowing how your information is used.
Last updated: September 15, 2026Scope and contact
This policy covers the BluffStory app and bluffstory.com. Contact [email protected] for privacy, access or deletion requests.
Collection without an account
The BluffStory Collection needs no account; stories are served by the API and your progress stays on your device. Collection stories are fictional.
Information we process
We process account identifiers, name, username, email supplied by your sign-in provider, date of birth, optional biography and profile photo; stories, guesses, reactions, invitations, room participation, messages and safety reports. Date of birth is used to check the 18+ requirement. Server logs may include request timing, errors and connection information.
How we use information
Information is used for sign-in, story and room gameplay, mutually accepted conversations, moderation and service reliability. Optional app analytics are controlled by a separate in-app choice. Website analytics preferences do not change that setting.
Visibility and sharing
Public stories may be shown to other users. Recipients may forward links to invite-only stories. The real ending is revealed after a guess. Chats are not end-to-end encrypted and may be reviewed in connection with safety reports. Do not share another person’s private information without permission.
Service providers
Apple sign-in, Firebase email authentication and the service’s server, database and file-storage providers may process information needed to provide their functions. Depending on provider infrastructure, information may be processed outside your country. This release does not send stories to an AI provider or use advertising tracking.
Website and Google Analytics
If you allow it, Google Analytics 4 (G-ENWFCMV8WC) processes usage information such as page type, language and sample-story interactions. The Google Analytics tag is not loaded before permission. Advertising storage and ad personalisation are disabled. We do not add names, emails, free text, messages or invitation codes to events. The website stores language and cookie choices on your device. Change your choice using Cookie preferences in the footer.
Retention and account deletion
In the app, go to You → Settings → Delete account. Deletion disables the account and removes associated stories, guesses, reactions, conversations and operational event data. Active rooms you joined are closed. Removal of some account records is completed by background cleanup; backup copies expire through their retention cycles. Sign-in references are permanently removed by the 30-day cleanup. Request metadata is kept for 30 days, game events for 90 days, and room data for at most 7 days. Failed external-provider and file cleanup operations are retried.
Your choices and rights
Adding a photo is optional. You can download a JSON copy under You → Settings → Export my data, withdraw stories, block people, disable optional analytics and delete your account. Depending on applicable law, you may request access, correction, deletion, restriction, objection or portability. We may need to verify your identity before acting on a request. You may also have the right to contact your local data-protection authority.
Age requirement and updates
BluffStory is for adults aged 18 and over. Report an account if you believe it belongs to a minor. Changes to this policy are dated on this page; material changes may also be communicated in the app where appropriate.