← Back to the game

Privacy Policy

Last updated: April 19, 2026

Whose butt is that? (the "Site") is a daily movie guessing game. We try to collect as little information as possible while still running the game, measuring what's working, and offering optional supporter access. This page explains what we collect and why.

Information we collect automatically

• Anonymous client ID. The first time you visit, your browser generates a random identifier and stores it in localStorage. This ID is used to deduplicate analytics events (for example, so one player counts as one player). It is not linked to your name, email, or any personal information.
• Gameplay events. We record which puzzle you viewed, whether you completed it, what step you won on, how many guesses you used, and which autocomplete entries you selected as guesses. We aggregate this to improve puzzles and fix bugs.
• Engagement events. We record clicks on share, challenge, premium, stats, and affiliate links so we know which features are useful.
• Request metadata. Like any website, our host (Cloudflare) receives your IP address and user agent to deliver pages and block abuse. We do not store IP addresses in our own analytics database.

Information you give us

• Supporter checkout. If you choose to become a supporter, payment is handled by Stripe. We do not see or store your card details. We store an opaque Stripe customer ID and your email address so we can restore access across devices via a magic link.
• Magic-link email. When you request access restore, we send a one-time sign-in link to the email address you provide. The email is stored only to identify your supporter account.
• Challenge display name. If you enter a name when creating a friend challenge, that name is embedded in the challenge link you share. We do not store it on our servers.

Cookies and local storage

• localStorage. Game state (streaks, completed puzzles, anonymous client ID) lives in your browser, not on our servers.
• Supporter session cookie. If you sign in as a supporter, a secure, HTTP-only cookie keeps you signed in. It contains only a signed session identifier.

Affiliate links

When we show "Watch" links after a puzzle, some of those are affiliate links. As an Amazon Associate we earn from qualifying purchases. Clicking an affiliate link may set cookies controlled by Amazon or another retailer; we only record (anonymously) that a click happened and which provider it was for.

Third-party services

• Cloudflare — hosting, CDN, DNS.
• Stripe — supporter payment processing. See Stripe's privacy policy.
• Resend — delivery of magic-link emails.
• Amazon Associates and other affiliate programs — activated only when you click an outbound "Watch" link.

What we do not do

• We do not sell your data.
• We do not use ad networks or retargeting pixels at this time.
• We do not require an account to play the daily puzzle.

Your choices

• You can clear your game state and anonymous ID at any time by clearing your browser's site data for this site.
• To request deletion of your supporter account or associated email, contact us at the address below.

Children

The Site is not directed at children under 13, and we do not knowingly collect information from them.

Changes to this policy

If we materially change how we handle information, we will update this page and revise the "Last updated" date above.

Contact

Questions about privacy can be sent to suggestions@whosebuttisthat.com.