CAPERS

CAPERS

Privacy Policy

Last updated 30 September 2026

1. The short version

The people you play with, their names, photos and everything that happens during your nights stay on your phone. We never receive them.

Our servers only hold an account identifier, an optional email address, and whether you have CAPERS Pro. If you allow it, the app also sends anonymous usage events and crash reports that never include names, answers, photos or anything anyone typed.

The controller of your personal data is Luke McAfee. Contact: hello@playcapers.com.

2. What stays on your phone (and never reaches us)

Player profiles: names, nicknames, profile photos, “not drinking” and personal intensity settings, and statistics worked out from your nights.

Crews: the names of people who play together, crew names and photos, and all-time results.

Night history: which games were played, winners, who took consequences, CAPERS’ reads of each player, predictions and the Finale. Favourites, games marked “Not for us”, and which cards have been dealt recently.

During a night only: CAPTURE photos, the opening and closing group photos, and Confession Booth recordings and written confessions. These are deleted from the phone when the group leaves the night’s Finale (or, if the app is closed first, the next time CAPERS opens). They are never uploaded and never included in history.

This data is stored in the app’s private storage on your device and is removed if you use Settings → Privacy → Erase everything on this phone, or uninstall the app. Phone backups you make (for example iCloud or Google backups) may include it, under your backup provider’s terms.

3. What we process on our servers

Account: a random account identifier created automatically; if you add one, your email address and a password (stored only as a secure hash by our authentication provider); and when the account was created and last signed in.

Subscription: whether you have CAPERS Pro, the plan (monthly or yearly), which store it was bought through, when it renews or ends, and whether it was cancelled, refunded or has a billing problem. We receive this from RevenueCat and use it only to unlock Pro. We never receive your card or bank details.

Legal basis: providing the service you asked for (contract), and for security logs, our legitimate interest in keeping the service safe.

4. Anonymous usage analytics (optional)

If analytics is on (Settings → Privacy → Share anonymous usage), the app sends events such as “game started”, “game completed” or “paywall viewed”, with counts and game identifiers, the app version and platform, and a random identifier generated for this install. Events never contain names, nicknames, prompts, answers, confessions, photos, recordings or email addresses, and are not linked to your account.

We use them to understand which games work and where the app breaks, under our legitimate interest in improving CAPERS. You can switch them off at any time; the switch takes effect immediately and nothing further is sent.

5. Crash and error reports

If the app crashes or hits a serious error, it can send a report containing the technical error, the app version, device model and operating system. Reports are scrubbed of names, text anyone typed, email addresses and tokens before they leave the phone, include no screenshots, and are not linked to your account. We use them under our legitimate interest in keeping CAPERS working. Turning off Share anonymous usage turns crash reports off too.

6. Camera, microphone and photos

CAPERS asks for the camera only when you take a profile photo, a CAPTURE or a group photo; for your photo library only when you choose a profile photo from it; and for the microphone only when someone records in the Confession Booth. Photo location data is not kept. You can refuse or withdraw any of these in your phone’s settings; every feature still works without them (profiles use initials, confessions can be written).

7. Who we share data with

We use these service providers, who process data only on our instructions:

  • Supabase (hosting, database and authentication): your account and subscription status.
  • Cloudflare (Turnstile security check): when the app creates your account, signs you in with an email address or sends a password reset, Cloudflare checks that a person and not an automated program is using it. Cloudflare receives your IP address and technical information about your device for that check; we only receive whether it passed.
  • RevenueCat (subscription management): your account identifier and your purchase and renewal history from the app store.
  • Apple and Google: process your payment as the seller of record under their own privacy policies.
  • PostHog (analytics, EU hosting), only if analytics is on: the anonymous events described above.
  • Sentry (crash reporting): the scrubbed crash reports described above.

We do not sell personal data, do not show ads, and do not track you across other companies’ apps or websites.

8. International transfers

Some providers may process data outside the UK and EEA. Where they do, we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses, or an adequacy decision.

9. How long we keep data

Account and subscription data: until you delete your account. Records of which webhook messages we have processed are kept without any personal data.

Analytics events and crash reports: kept by our providers for a limited period (at most 12 months), then deleted.

After you delete your account, data may remain in our providers’ encrypted backups for a short period until those backups expire. Apple, Google and your bank keep their own records of purchases under their own policies.

10. Deleting your data

Settings → Account → Delete account deletes your account, your subscription records and your purchase history held by RevenueCat, and erases everything CAPERS stored on this phone. It does not cancel an app-store subscription; cancel that in your store settings first.

Settings → Privacy → Erase everything on this phone removes all players, photos, crews, history and preferences from this phone without touching your account.

You can also remove a single player, crew or night from its own page.

11. Your rights

Under UK and EU data protection law you can ask for access to, correction of, or deletion of your personal data, restrict or object to our processing, and ask for a copy in a portable format. Most of your data never reaches us; for what does, write to hello@playcapers.com. You can complain to the Information Commissioner’s Office (ico.org.uk) or your local data protection authority.

12. Children

CAPERS is for adults aged 18 and over. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

13. Changes

We will update this policy when what CAPERS collects changes, show the date here, and tell you in the app about material changes.