Privacy
This page tells which data TinyTroop keeps, for how long and why. We keep as little data as possible. We do not sell data and we show no advertisements.
Cookies
We set only cookies that are strictly necessary. Thus we show no cookie banner. We set no cookie for analytics or advertisements.
- A guest cookie keeps your participant identifier, so that a room knows you after a reload. The cookie is signed,
Secure,HttpOnlyandSameSite=Strict. - When you sign in, a session cookie keeps you signed in.
Data that we keep
- In a room: your display name, your avatar style and seed, the stories and the votes of the current round. Before the reveal, only you see your vote.
- A room of a guest: we delete it 7 days after the last activity.
- A room of a person or a team: we keep it until you delete it. The history keeps the story title, the final estimate, the number of voters and how many votes each card got. The history does not keep who voted which value.
- An account: your name, your email address and your avatar from GitHub or Google, and your teams. We keep no passwords.
Analytics and logs
The server counts events, for example “a room started”. An event contains no IP address and no user identifier. The server logs contain participant identifiers only, not names, email addresses or votes.
Other companies
The website runs on Cloudflare. When a guest starts a room, Cloudflare Turnstile checks that the guest is a person. The website loads no other third-party scripts.
Global Privacy Control
We obey Global Privacy Control. We do not sell or share personal data, with or without the signal.
Your rights
You can delete your account and its data on the account page. To ask a question about your data, use the security contact file. Read about TinyTroop for the credits.