What we collect, and what we don’t

This is a description of what the software actually does, written to be read rather than agreed to. If something here doesn’t match what you see, that’s a bug — tell us.

Last updated 11 September 2026.

If you’re a guest playing at a bar

You don’t make an account and we don’t know who you are. Your phone sends a team name, the icon you picked, and your answers. That’s the game.

Two places ask for an email, both optional, both clearly labelled on the screen that asks:

Skip both and the night plays exactly the same.

We don’t use advertising or analytics trackers on this site or on the player screens. There is no third-party pixel, no ad network, no cross-site profile. Your score lives in the game and in your own browser’s storage.

If you fill in the contact form

We keep what you typed — your name, email, the bar, the neighbourhood, which nights you’re interested in, and your message — so we can reply. We also keep your browser’s user-agent string, and a one-way keyed digest of your IP address for spam control. We do not store the address itself, and the digest can’t be turned back into one. Rotating the key makes every stored digest meaningless, which is how they expire.

That’s a lead in our inbox, not a mailing list. We email you back about your enquiry.

If you run a venue

Your account holds an email, a display name, and the settings for your room. A cookie keeps you signed in — that’s the only cookie we set, and it does nothing but that.

The guest emails collected at your venue are yours. You can export them and you can delete them, and anyone on that list can unsubscribe from it.

What we never collect

No location. No contacts. No photos. No device identifiers. Nothing about who you came with or who you are. A trivia night does not need any of it, and a bar full of people who didn’t ask to be in a database is not a product.

Getting rid of it

Email hello@soiraye.com and say what you want deleted. You don’t need an account to ask, and you don’t need to explain why.

Some of it goes on its own: a game’s answers are trimmed as the night rolls forward, and abuse digests stop meaning anything when the key rotates.

Who else sees it

The companies that run our infrastructure, because that’s where the software lives: Supabase (database and sign-in), Vercel (hosting), and Resend (the email we send you). They process it for us and for nothing else.

Nobody buys data from us. There is no arrangement under which they could.

Written as a description of how the software behaves, not as legal advice, and not reviewed by a lawyer. If you need a formal data-processing agreement for your venue, email us and we’ll sort one out.